Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
File: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft (raw, json)
Hash identifier: zhBYP4jk2WhgTzu1n9vg2L2prF2I08hbB79L776N5TY=
Subject key identifier: 1D:1F:AA:86:F2:C4:05:F7:3C:9A:87:91:49:89:D1:28:F1:3C:1C:DA
Authority key identifier: 5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
Certificate issuer: /CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Certificate serial: 0196BF6E990E07D1EE3CEB00244A005D04D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
Manifest number: 14C9
Signing time: Sun 11 May 2025 13:00:18 +0000
Manifest this update: Sun 11 May 2025 13:00:18 +0000
Manifest next update: Mon 12 May 2025 13:00:18 +0000
Files and hashes: 1: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl (hash: dwYCuHqHBljq2X2m35dYVrMcMRdMkfBv35EHeNmi/Fw=)
2: Y5NkjhxNGx4ss5GCzKl7-rIduCM.roa (hash: /DJ0Dj5nLfrACSNcG6NOE2ReJp4ef+Ajvh1vnuYm/CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:99:0e:07:d1:ee:3c:eb:00:24:4a:00:5d:04:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Validity
Not Before: May 11 13:00:18 2025 GMT
Not After : May 12 13:00:18 2025 GMT
Subject: CN=1d1faa86f2c405f73c9a87914989d128f13c1cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:96:7f:bb:01:01:96:6f:a9:df:e5:4e:6d:a0:
5f:45:b5:af:3e:cf:7f:33:eb:d7:e6:d9:8d:4f:34:
57:8d:e4:48:34:d9:66:a3:03:9e:24:42:9a:51:73:
ce:5d:f5:6f:f4:c4:d8:8f:d3:65:c5:1d:76:52:a5:
3d:f3:50:33:b6:e1:d3:b3:81:05:a6:b2:e9:0d:6d:
01:c7:30:b4:c5:02:55:d7:81:8a:c2:ff:6a:07:9e:
ab:e5:25:0f:11:d2:3c:99:8c:5f:1c:26:03:71:f6:
e3:a6:e3:67:75:ca:2c:13:62:bd:a0:e4:f7:8e:d3:
8a:7b:50:c4:77:9c:24:30:91:4b:26:ab:13:2c:27:
93:a6:d8:bd:06:b0:da:58:76:17:f3:5d:24:26:0b:
8b:22:d7:23:d3:f1:94:3e:8c:13:7f:58:47:0b:69:
8b:9d:28:bf:0e:d8:42:19:36:e3:e3:5f:36:94:6d:
9a:e8:c5:82:84:c4:1b:b2:78:df:5d:df:bf:53:99:
10:80:2d:62:48:e2:60:33:9a:2c:47:28:76:3f:5c:
af:65:8c:ec:eb:38:a3:90:6e:80:90:f8:fb:b6:61:
97:bd:e2:a1:a5:12:f7:56:ab:cd:51:10:bb:74:9d:
f2:39:b4:23:13:3f:97:79:d4:77:df:8f:88:30:af:
63:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1F:AA:86:F2:C4:05:F7:3C:9A:87:91:49:89:D1:28:F1:3C:1C:DA
X509v3 Authority Key Identifier:
keyid:5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6d:d7:37:36:c7:ec:ff:d7:13:4f:48:eb:06:1f:40:4c:62:
0c:ca:20:32:5d:18:f5:62:64:83:97:a1:d7:4e:b5:0b:1a:47:
c2:d7:b5:89:90:68:f0:2a:f8:92:49:ae:a1:6e:89:b4:e5:ae:
9b:57:4c:6d:94:c9:ac:2e:62:aa:92:a5:6e:cc:30:ad:de:54:
ae:e1:c8:f8:26:4c:b4:16:14:e6:e4:8b:5c:de:c8:52:64:e3:
ce:fe:ac:be:07:3b:ee:28:33:4c:e3:ba:df:b9:7c:b0:e5:46:
1e:a5:47:8a:1f:1f:d1:94:a2:4c:41:84:4f:28:ec:48:0b:d5:
e1:4c:a3:fa:12:06:a0:55:5b:55:7c:40:7e:23:28:79:18:9d:
e1:1d:41:bc:62:7e:4a:4f:6f:ab:45:51:2d:a1:50:45:4c:55:
9e:5a:98:54:c1:08:e0:96:2c:7d:5e:18:b5:10:df:95:af:6e:
d8:fb:1f:a3:0f:20:8d:e3:52:11:62:9f:a6:55:8f:a3:87:8c:
5c:a1:90:73:02:e1:93:96:9a:f6:47:fa:63:64:dd:53:80:e3:
bb:80:9d:d5:76:4b:4f:e8:11:14:fd:f2:18:fe:f4:2c:82:31:
3c:d9:cc:cb:bf:6d:94:b8:86:d8:0b:7f:99:1d:85:b3:4e:fc:
1f:e3:96:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/bpkOB9HuPOsAJEoAXQTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNTEyNWFmYzVlYzk3OGIyYTMyMTI5MWMyYTU1NzBmZTYx
OTE1OWUwHhcNMjUwNTExMTMwMDE4WhcNMjUwNTEyMTMwMDE4WjAzMTEwLwYDVQQD
EygxZDFmYWE4NmYyYzQwNWY3M2M5YTg3OTE0OTg5ZDEyOGYxM2MxY2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JZ/uwEBlm+p3+VObaBfRbWvPs9/
M+vX5tmNTzRXjeRINNlmowOeJEKaUXPOXfVv9MTYj9NlxR12UqU981AztuHTs4EF
prLpDW0BxzC0xQJV14GKwv9qB56r5SUPEdI8mYxfHCYDcfbjpuNndcosE2K9oOT3
jtOKe1DEd5wkMJFLJqsTLCeTpti9BrDaWHYX810kJguLItcj0/GUPowTf1hHC2mL
nSi/DthCGTbj4182lG2a6MWChMQbsnjfXd+/U5kQgC1iSOJgM5osRyh2P1yvZYzs
6zijkG6AkPj7tmGXveKhpRL3VqvNURC7dJ3yObQjEz+XedR334+IMK9jKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0fqobyxAX3PJqHkUmJ0SjxPBzaMB8GA1UdIwQY
MBaAFFpRJa/F7JeLKjISkcKlVw/mGRWeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2xFbHI4WHNsNHNxTWhLUndxVlhELVlaRlo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83OTQwYWItZjdjYS00YzA3LWExMjMt
YTZmYjRkZjU0ODFlLzEvV2xFbHI4WHNsNHNxTWhLUndxVlhELVlaRlo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83OTQwYWItZjdjYS00YzA3LWExMjMtYTZmYjRkZjU0ODFl
LzEvV2xFbHI4WHNsNHNxTWhLUndxVlhELVlaRlo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl23XNzbH
7P/XE09I6wYfQExiDMogMl0Y9WJkg5eh1061CxpHwte1iZBo8Cr4kkmuoW6JtOWu
m1dMbZTJrC5iqpKlbswwrd5UruHI+CZMtBYU5uSLXN7IUmTjzv6svgc77igzTOO6
37l8sOVGHqVHih8f0ZSiTEGETyjsSAvV4Uyj+hIGoFVbVXxAfiMoeRid4R1BvGJ+
Sk9vq0VRLaFQRUxVnlqYVMEI4JYsfV4YtRDfla9u2Psfow8gjeNSEWKfplWPo4eM
XKGQcwLhk5aa9kf6Y2TdU4Dju4Cd1XZLT+gRFP3yGP70LIIxPNnMy79tlLiG2At/
mR2Fs078H+OWMg==
-----END CERTIFICATE-----
Generated at Sun May 11 19:19:16 2025 by rpki-client