Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
File: wzdo22Ch8ho07lwqNDVFYXvvi0A.mft (raw, json)
Hash identifier: T/q1zbFp9NX/JxoOD5mkvJkvgPhNG5oCezmhJGpXmD8=
Subject key identifier: 2A:5A:1B:6C:F3:AE:8F:C4:3C:66:69:99:26:8A:9F:BF:1B:08:40:29
Authority key identifier: C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
Certificate issuer: /CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Certificate serial: 0196B8FEA73DD1A0901E1B49B22C3A968DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
Manifest number: 152D
Signing time: Sat 10 May 2025 07:00:18 +0000
Manifest this update: Sat 10 May 2025 07:00:18 +0000
Manifest next update: Sun 11 May 2025 07:00:18 +0000
Files and hashes: 1: wzdo22Ch8ho07lwqNDVFYXvvi0A.crl (hash: SSIj2L5eurpxX/0WGCP3jZyrZybLx9ImdzXYqmitp4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:a7:3d:d1:a0:90:1e:1b:49:b2:2c:3a:96:8d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Validity
Not Before: May 10 07:00:18 2025 GMT
Not After : May 11 07:00:18 2025 GMT
Subject: CN=2a5a1b6cf3ae8fc43c666999268a9fbf1b084029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:f4:b0:58:78:61:f0:7f:bc:11:32:46:c7:
84:01:f1:4c:8b:66:fe:f9:7a:26:f6:55:e8:fb:bb:
c0:cb:fa:4c:01:88:67:db:26:15:5f:34:04:5d:a6:
68:63:90:3e:61:40:d7:8f:5c:a9:96:45:e6:8a:19:
3b:7c:9b:62:bc:9d:0c:c8:40:84:12:52:32:73:ef:
f1:1d:b7:43:b6:ac:e6:b8:23:cd:b8:2d:3a:85:30:
96:6d:cc:bd:58:63:16:27:a8:d0:35:50:02:b1:d2:
2d:b6:1e:93:cd:63:73:01:72:5d:30:c6:2e:42:46:
4c:1c:54:2e:e9:2f:e6:50:df:e8:ba:a3:5e:4b:97:
06:16:76:d4:75:16:7c:7c:91:b3:8a:ac:db:e7:b3:
5d:e2:4c:4a:20:7b:76:b4:2a:6b:6c:d3:b8:24:45:
45:da:6f:8c:0f:92:08:bc:11:8a:63:6d:8c:ec:56:
b7:fe:1d:17:ee:eb:0f:5b:a3:7f:07:e5:e2:fd:3b:
a4:99:9d:ca:3f:bf:18:71:01:d4:0f:ab:04:47:11:
99:0a:43:31:f6:57:7b:06:75:4d:b0:5a:d9:81:02:
65:62:3a:4e:69:df:7c:87:ae:03:17:4a:02:41:bf:
9e:ec:bf:1d:01:fb:56:56:cb:1f:9c:bf:ea:31:33:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5A:1B:6C:F3:AE:8F:C4:3C:66:69:99:26:8A:9F:BF:1B:08:40:29
X509v3 Authority Key Identifier:
keyid:C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:9a:92:3b:c3:a3:09:99:5a:a4:82:43:73:99:32:ad:67:50:
b7:8d:cc:67:cb:cf:8f:c9:f0:d1:eb:d2:64:65:3f:23:34:79:
b0:78:f2:21:08:6a:40:1f:d2:09:79:71:89:0d:5e:99:96:42:
e3:d5:23:7c:f1:5b:92:b1:dc:93:7e:98:f6:e4:94:7c:fb:04:
cc:74:50:3e:43:21:05:72:c7:60:19:9d:3e:c7:a6:dd:42:76:
3a:f9:fb:0c:9b:71:9c:bc:25:bb:49:55:12:62:c9:d0:00:0b:
0b:8e:5e:cb:7e:e4:18:93:51:99:ba:89:68:15:70:f0:47:9c:
c8:6b:fc:31:a2:cf:f9:65:0a:1f:bb:52:6f:90:21:85:f2:0c:
f2:3c:51:f6:f5:10:e1:c7:d2:76:07:d5:71:65:35:e6:31:15:
66:ee:9a:58:b0:75:7b:23:44:b4:bc:e4:e5:02:0b:9d:dd:33:
dc:8b:69:a9:39:53:fb:d1:5b:ea:9a:34:b6:c3:c7:27:b4:82:
3f:91:62:35:e2:f6:ec:53:58:b7:fb:98:d9:b1:f8:58:e6:f1:
08:cd:76:cf:83:0c:18:05:a7:49:6a:96:b4:31:ba:c3:05:b3:
ad:19:8e:88:3e:45:b3:79:4f:10:84:98:41:35:3a:8e:b6:2a:
23:1d:0e:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4/qc90aCQHhtJsiw6lo2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzc2OGRiNjBhMWYyMWEzNGVlNWMyYTM0MzU0NTYxN2Jl
ZjhiNDAwHhcNMjUwNTEwMDcwMDE4WhcNMjUwNTExMDcwMDE4WjAzMTEwLwYDVQQD
EygyYTVhMWI2Y2YzYWU4ZmM0M2M2NjY5OTkyNjhhOWZiZjFiMDg0MDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07b0sFh4YfB/vBEyRseEAfFMi2b+
+Xom9lXo+7vAy/pMAYhn2yYVXzQEXaZoY5A+YUDXj1yplkXmihk7fJtivJ0MyECE
ElIyc+/xHbdDtqzmuCPNuC06hTCWbcy9WGMWJ6jQNVACsdItth6TzWNzAXJdMMYu
QkZMHFQu6S/mUN/ouqNeS5cGFnbUdRZ8fJGziqzb57Nd4kxKIHt2tCprbNO4JEVF
2m+MD5IIvBGKY22M7Fa3/h0X7usPW6N/B+Xi/TukmZ3KP78YcQHUD6sERxGZCkMx
9ld7BnVNsFrZgQJlYjpOad98h64DF0oCQb+e7L8dAftWVssfnL/qMTOMwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpaG2zzro/EPGZpmSaKn78bCEApMB8GA1UdIwQY
MBaAFMM3aNtgofIaNO5cKjQ1RWF774tAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pkbzIyQ2g4aG8wN2x3cU5EVkZZWHZ2aTBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9iMWVjNWMtMTc3MC00YjFhLTg5NGIt
YzI2MTFiNzQyMGYyLzEvd3pkbzIyQ2g4aG8wN2x3cU5EVkZZWHZ2aTBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9iMWVjNWMtMTc3MC00YjFhLTg5NGItYzI2MTFiNzQyMGYy
LzEvd3pkbzIyQ2g4aG8wN2x3cU5EVkZZWHZ2aTBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx5qSO8Oj
CZlapIJDc5kyrWdQt43MZ8vPj8nw0evSZGU/IzR5sHjyIQhqQB/SCXlxiQ1emZZC
49UjfPFbkrHck36Y9uSUfPsEzHRQPkMhBXLHYBmdPsem3UJ2Ovn7DJtxnLwlu0lV
EmLJ0AALC45ey37kGJNRmbqJaBVw8EecyGv8MaLP+WUKH7tSb5AhhfIM8jxR9vUQ
4cfSdgfVcWU15jEVZu6aWLB1eyNEtLzk5QILnd0z3ItpqTlT+9Fb6po0tsPHJ7SC
P5FiNeL27FNYt/uY2bH4WObxCM12z4MMGAWnSWqWtDG6wwWzrRmOiD5Fs3lPEISY
QTU6jrYqIx0OcA==
-----END CERTIFICATE-----
Generated at Sat May 10 13:24:25 2025 by rpki-client