Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
File: wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json)
Hash identifier: MrWnhoW96RsDKIvSQ/IXErJO6zFZF7xLBSNBAeHkyqY=
Subject key identifier: 42:F0:8F:90:6C:87:DB:72:C8:FA:FF:90:F1:96:BA:38:CE:08:BA:58
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial: 0196C8A90E9E9E98DAD23DDC2AEBDA9307CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
Manifest number: 0320
Signing time: Tue 13 May 2025 08:00:44 +0000
Manifest this update: Tue 13 May 2025 08:00:44 +0000
Manifest next update: Wed 14 May 2025 08:00:44 +0000
Files and hashes: 1: nvT_HNaheF7AuMYSBVzSYd3DVGE.roa (hash: f440eLAYfJKuxJN3bKdcZpOgumvQKi1Mg+JrUe7gMQo=)
2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: eZsGbg669yST+IhUG7jsMa7Qg/h6vqun8XH/8odexv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:a9:0e:9e:9e:98:da:d2:3d:dc:2a:eb:da:93:07:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Validity
Not Before: May 13 08:00:44 2025 GMT
Not After : May 14 08:00:44 2025 GMT
Subject: CN=42f08f906c87db72c8faff90f196ba38ce08ba58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:18:9c:7b:3c:07:cb:2b:17:c0:dd:2d:a4:
0d:6b:04:a1:45:3e:f3:60:8c:23:88:c0:7a:9e:da:
07:2e:78:8d:17:7f:70:35:49:c7:e5:19:dc:69:7d:
c8:30:ed:c2:0e:af:79:78:7f:ce:89:a1:02:9f:03:
9b:95:e4:36:6e:99:cf:ab:f9:a4:40:a5:e9:b8:74:
8e:a3:92:e8:2e:ed:08:16:6c:01:a6:ab:11:fb:9f:
6c:bd:a7:7d:01:f2:68:ae:92:0e:cb:fa:71:6f:07:
5e:f4:56:ec:ff:51:a6:46:5c:4a:6d:69:81:8b:85:
f2:d0:82:eb:e1:df:0d:04:e5:69:9b:9a:12:04:ed:
50:dd:ae:80:ad:bc:93:f3:9d:3f:96:ea:6c:1f:62:
c1:bf:4e:c3:0a:9c:67:8c:4a:84:a7:4c:9a:97:3d:
e0:0f:b3:9e:1f:48:33:9f:d0:62:da:66:9e:42:77:
ba:62:a4:33:a7:9f:01:dc:1c:48:03:84:27:13:6d:
5e:1a:62:21:94:3b:eb:76:96:2f:8c:8a:25:a0:77:
9d:a0:a1:03:44:b9:bd:3c:5f:52:16:a0:e3:04:7d:
e7:94:fe:58:94:cd:50:75:fa:da:3d:ab:ef:f9:ab:
5a:1c:91:78:6f:8c:dd:4e:ff:ae:df:34:bf:4a:e2:
08:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F0:8F:90:6C:87:DB:72:C8:FA:FF:90:F1:96:BA:38:CE:08:BA:58
X509v3 Authority Key Identifier:
keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6b:4d:23:96:0e:31:9e:dc:a1:34:a6:33:03:a2:35:5f:a0:
a2:d2:e6:e9:e4:93:bd:3f:01:60:3f:f6:d3:e3:48:1f:9c:cd:
05:0c:b0:21:05:9e:74:12:12:c8:25:b5:f8:b9:8c:08:71:52:
ba:1a:ea:d5:56:dc:62:3f:20:7e:87:b8:41:d1:88:4e:97:59:
7a:2f:f8:d4:d3:07:b1:76:e4:5a:2c:b3:14:b3:0b:c8:b8:97:
ee:84:4a:60:d8:8a:6e:04:55:56:63:02:5d:0b:2a:32:47:76:
be:df:43:44:1e:29:8b:9e:cc:60:8e:47:8e:9f:77:24:a3:89:
df:00:a0:7b:cd:43:a0:4c:c5:58:1f:18:a8:40:c3:1a:bc:6b:
c6:34:18:af:76:0c:b0:db:96:6e:68:3a:b3:97:b9:87:a1:28:
14:d4:1d:2a:92:0f:38:6e:da:e1:3b:fc:d8:2c:30:11:8b:87:
1b:a2:ef:bb:29:a8:79:65:0b:56:26:54:3d:d5:6b:42:d8:39:
39:72:88:db:ca:8e:2f:d3:ab:b4:ee:55:c2:07:6a:c3:f2:8f:
3d:ba:83:72:1d:31:a2:14:44:62:7a:9d:38:45:aa:93:3f:34:
15:57:36:e4:5f:09:6b:fa:f4:5b:ff:cb:56:dd:c8:c0:4a:96:
30:c4:df:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIqQ6enpja0j3cKuvakwfNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzZlNDA2MGUyNjllMDhiOTM2NjYwNzAyYzk3OGFlOGIz
YTE5OTYwHhcNMjUwNTEzMDgwMDQ0WhcNMjUwNTE0MDgwMDQ0WjAzMTEwLwYDVQQD
Eyg0MmYwOGY5MDZjODdkYjcyYzhmYWZmOTBmMTk2YmEzOGNlMDhiYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF0YnHs8B8srF8DdLaQNawShRT7z
YIwjiMB6ntoHLniNF39wNUnH5RncaX3IMO3CDq95eH/OiaECnwObleQ2bpnPq/mk
QKXpuHSOo5LoLu0IFmwBpqsR+59svad9AfJorpIOy/pxbwde9Fbs/1GmRlxKbWmB
i4Xy0ILr4d8NBOVpm5oSBO1Q3a6ArbyT850/lupsH2LBv07DCpxnjEqEp0yalz3g
D7OeH0gzn9Bi2maeQne6YqQzp58B3BxIA4QnE21eGmIhlDvrdpYvjIoloHedoKED
RLm9PF9SFqDjBH3nlP5YlM1QdfraPavv+ataHJF4b4zdTv+u3zS/SuIIWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELwj5Bsh9tyyPr/kPGWujjOCLpYMB8GA1UdIwQY
MBaAFMHG5AYOJp4IuTZmBwLJeK6LOhmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mNzM0NTgtNWNlMC00YWMyLTkxNjct
NzFhZWE1NGFmODU4LzEvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9mNzM0NTgtNWNlMC00YWMyLTkxNjctNzFhZWE1NGFmODU4
LzEvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGtNI5YO
MZ7coTSmMwOiNV+gotLm6eSTvT8BYD/20+NIH5zNBQywIQWedBISyCW1+LmMCHFS
uhrq1VbcYj8gfoe4QdGITpdZei/41NMHsXbkWiyzFLMLyLiX7oRKYNiKbgRVVmMC
XQsqMkd2vt9DRB4pi57MYI5Hjp93JKOJ3wCge81DoEzFWB8YqEDDGrxrxjQYr3YM
sNuWbmg6s5e5h6EoFNQdKpIPOG7a4Tv82CwwEYuHG6LvuymoeWULViZUPdVrQtg5
OXKI28qOL9OrtO5Vwgdqw/KPPbqDch0xohREYnqdOEWqkz80FVc25F8Ja/r0W//L
Vt3IwEqWMMTfUw==
-----END CERTIFICATE-----
Generated at Tue May 13 15:02:46 2025 by rpki-client