Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
File: WmEQLtTWbc2VLeATBOCv4ThNAL8.mft (raw, json)
Hash identifier: LHHNw8g64sYFmHjS+GppzGLnkcKyCg4IDSGOj4NmnJY=
Subject key identifier: 9D:83:8E:5E:2B:B4:98:77:32:D8:21:47:56:2A:D1:C5:D2:FE:2D:90
Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
Certificate issuer: /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Certificate serial: 0197B933D2C95F12E02EA3701E8073BD86F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
Manifest number: 10AE
Signing time: Sun 29 Jun 2025 01:01:10 +0000
Manifest this update: Sun 29 Jun 2025 01:01:10 +0000
Manifest next update: Mon 30 Jun 2025 01:01:10 +0000
Files and hashes: 1: WmEQLtTWbc2VLeATBOCv4ThNAL8.crl (hash: B82kR1xUmGFkJNDrzO+mQyiv80h2zxDE7VVYU/gf+NI=)
2: aq4ogcfzZpEnM-qzTShzrKkmLVI.roa (hash: lrZqdOLgogubh9kYu+yXTtvdVJVSGrLVk+ZXNc+U3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:d2:c9:5f:12:e0:2e:a3:70:1e:80:73:bd:86:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Validity
Not Before: Jun 29 01:01:10 2025 GMT
Not After : Jun 30 01:01:10 2025 GMT
Subject: CN=9d838e5e2bb4987732d82147562ad1c5d2fe2d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f2:ee:34:51:13:18:b7:f6:7a:99:32:b7:12:
57:b7:fc:ca:12:cd:b3:38:71:77:64:df:f7:1a:17:
83:8b:95:db:fb:ca:aa:11:84:65:75:39:7c:71:1d:
9d:94:e1:c3:24:4b:2a:c2:cc:32:08:1e:c1:f6:8a:
0e:df:e4:14:20:16:9a:45:3f:11:6a:1e:d1:dd:63:
4e:4a:4d:8e:2b:d1:9e:97:73:7b:f6:4d:4d:42:8c:
a3:30:fa:ee:5d:21:b1:9b:03:b3:38:76:29:ff:fc:
72:6a:cd:33:7f:fb:17:97:7e:07:ac:92:33:1e:c1:
4b:4a:99:81:50:c8:ea:58:b1:0d:76:7a:69:8c:6a:
a6:6e:27:8f:49:b7:b0:d6:9f:6e:91:04:93:e5:63:
e0:0e:dd:1e:a6:51:37:a3:c1:71:a5:18:5a:13:45:
6a:81:fe:1d:b3:c6:33:6b:69:a2:06:00:dc:5d:cb:
0e:93:1e:cc:af:d3:25:7b:52:72:f8:4c:91:f6:4b:
0c:0c:3f:7f:47:dd:cd:5e:56:fa:f0:db:54:12:2d:
dc:bf:1e:dc:d3:a8:ba:82:a1:7e:96:8c:86:41:3b:
61:87:1c:a2:5f:50:92:5d:c4:b4:e6:aa:71:79:a2:
64:28:07:8d:3c:96:0a:4a:db:5c:28:00:b0:97:42:
d8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:83:8E:5E:2B:B4:98:77:32:D8:21:47:56:2A:D1:C5:D2:FE:2D:90
X509v3 Authority Key Identifier:
keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4a:41:c3:c5:cf:df:5b:92:4d:e7:62:42:d5:6d:59:1b:50:
42:5b:b8:00:7d:9f:16:17:eb:1a:50:5a:8d:31:31:07:c1:4f:
1c:1d:0d:8b:21:69:45:69:85:b3:42:f1:24:c1:0a:a9:c7:cb:
11:71:06:8e:35:eb:8b:ba:87:9e:8f:d6:cb:c1:4e:84:18:d6:
71:fb:82:27:4b:e5:98:df:f6:4c:b7:37:e6:29:a4:d7:3c:41:
a6:4e:46:c5:07:02:2a:1d:ad:a2:ef:0d:e8:c8:9c:ff:b0:22:
00:70:47:60:32:5a:55:4e:07:29:42:53:f0:03:fe:a5:6f:22:
ee:ba:d5:67:da:97:3b:cd:51:d6:c1:94:3c:bc:ad:8a:a0:99:
92:32:4d:2f:b7:c1:ac:63:89:a3:80:f9:a6:5f:0c:3d:a9:a9:
a4:7a:e9:ee:f1:21:df:15:1c:44:9c:b8:3c:40:68:08:34:d6:
ea:71:c4:43:2b:df:e8:e2:8d:5f:0d:ec:b2:2c:b4:d3:2f:b2:
ce:8f:88:01:84:6d:f8:86:99:ef:7a:68:81:61:b8:b8:94:80:
52:fd:71:7c:b4:31:35:65:63:5a:66:a5:de:e5:24:db:61:fb:
26:40:75:1a:7f:5f:15:42:eb:51:f8:cc:2c:0a:93:e4:a0:e1:
8f:3a:c7:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5M9LJXxLgLqNwHoBzvYbyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNjExMDJlZDRkNjZkY2Q5NTJkZTAxMzA0ZTBhZmUxMzg0
ZDAwYmYwHhcNMjUwNjI5MDEwMTEwWhcNMjUwNjMwMDEwMTEwWjAzMTEwLwYDVQQD
Eyg5ZDgzOGU1ZTJiYjQ5ODc3MzJkODIxNDc1NjJhZDFjNWQyZmUyZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9/LuNFETGLf2epkytxJXt/zKEs2z
OHF3ZN/3GheDi5Xb+8qqEYRldTl8cR2dlOHDJEsqwswyCB7B9ooO3+QUIBaaRT8R
ah7R3WNOSk2OK9Gel3N79k1NQoyjMPruXSGxmwOzOHYp//xyas0zf/sXl34HrJIz
HsFLSpmBUMjqWLENdnppjGqmbiePSbew1p9ukQST5WPgDt0eplE3o8FxpRhaE0Vq
gf4ds8Yza2miBgDcXcsOkx7Mr9Mle1Jy+EyR9ksMDD9/R93NXlb68NtUEi3cvx7c
06i6gqF+loyGQTthhxyiX1CSXcS05qpxeaJkKAeNPJYKSttcKACwl0LYgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2Djl4rtJh3MtghR1Yq0cXS/i2QMB8GA1UdIwQY
MBaAFFphEC7U1m3NlS3gEwTgr+E4TQC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi85NWU3OGEtNTdlNy00YTU4LTkzMTYt
Mjg4YmQ2YjllMDkyLzEvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi85NWU3OGEtNTdlNy00YTU4LTkzMTYtMjg4YmQ2YjllMDky
LzEvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUpBw8XP
31uSTediQtVtWRtQQlu4AH2fFhfrGlBajTExB8FPHB0NiyFpRWmFs0LxJMEKqcfL
EXEGjjXri7qHno/Wy8FOhBjWcfuCJ0vlmN/2TLc35imk1zxBpk5GxQcCKh2tou8N
6Mic/7AiAHBHYDJaVU4HKUJT8AP+pW8i7rrVZ9qXO81R1sGUPLytiqCZkjJNL7fB
rGOJo4D5pl8MPamppHrp7vEh3xUcRJy4PEBoCDTW6nHEQyvf6OKNXw3ssiy00y+y
zo+IAYRt+IaZ73pogWG4uJSAUv1xfLQxNWVjWmal3uUk22H7JkB1Gn9fFULrUfjM
LAqT5KDhjzrHWw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:22:21 2025 by rpki-client