Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
File: wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft (raw, json)
Hash identifier: 5FAChKFPSnWNewsqUolECs/2TQBlBKIArbSLNFHCJt0=
Subject key identifier: 37:80:07:14:56:55:4F:BA:DE:4D:58:A0:96:B8:59:67:BB:5D:71:34
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Certificate issuer: /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial: 0196BE5C2DD6CC8F6B7499CEA0D36ED89BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 08:00:34 +0000
Manifest this update: Sun 11 May 2025 08:00:34 +0000
Manifest next update: Mon 12 May 2025 08:00:34 +0000
Files and hashes: 1: Hz0_dopdOcTkQoi-4Q3mO6vS7ig.roa (hash: b8veFauUO102FVzcJY91NJg1d1nr7MA++Qf08FQhoiA=)
2: UnNAY2Ug9GVCcRKfH683OrLARtI.roa (hash: ZNLzC1DICXd5qw96hU96BotIt+MMzxMspSwOQt7KMEQ=)
3: wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl (hash: ve7+pInJA7UoSzeo33Fobuv3smd+qyPF3nJSW0894ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:2d:d6:cc:8f:6b:74:99:ce:a0:d3:6e:d8:9b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Validity
Not Before: May 11 08:00:34 2025 GMT
Not After : May 12 08:00:34 2025 GMT
Subject: CN=3780071456554fbade4d58a096b85967bb5d7134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:86:d4:24:a0:47:46:81:44:2a:55:e7:92:
84:0c:e8:f2:24:dd:6f:fa:c5:81:74:94:b5:b6:e3:
7c:06:a1:05:76:06:d8:5d:41:0f:54:d7:89:dd:1d:
9d:33:1a:83:18:a1:e2:18:63:52:d4:ed:1e:6f:e0:
94:cf:5d:22:42:39:83:bb:25:86:44:17:74:16:49:
50:3d:0f:20:d0:84:4f:57:8a:1d:b1:af:3b:b9:99:
4b:9a:d5:30:33:7b:0e:b0:e2:0b:18:c1:c8:1e:08:
ab:5b:39:b7:cc:10:a6:2e:c2:3b:32:7f:0e:dc:9a:
71:4d:b2:05:c6:4e:68:41:cf:d3:b6:76:5b:55:b3:
7d:22:c3:1c:7c:f9:2b:bc:8f:25:c4:0a:4c:8b:a7:
79:11:46:de:91:7c:63:f8:41:f7:18:01:8d:32:b3:
8c:83:fd:1c:0f:f6:e8:c6:9b:17:e9:ea:33:63:97:
5b:6d:a2:cf:40:fd:67:49:0c:ce:35:e5:50:14:1c:
6f:f7:5a:4e:da:79:f9:8e:c1:a5:ff:91:c6:8a:16:
62:01:b8:ac:be:5e:c6:e1:eb:8a:2e:7c:94:d1:d7:
f5:4b:fc:d7:e2:6a:f1:e2:c8:36:5f:b8:b4:e5:0f:
ae:e1:b3:36:a0:8c:eb:5c:2e:4f:99:ef:0b:32:78:
30:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:80:07:14:56:55:4F:BA:DE:4D:58:A0:96:B8:59:67:BB:5D:71:34
X509v3 Authority Key Identifier:
keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a8:29:53:6c:2d:96:4c:f4:2c:7e:75:6b:2f:ee:73:24:86:
f8:88:34:94:9f:24:ae:05:52:26:24:d9:ba:ad:d0:0c:78:6e:
77:34:e6:ba:1d:29:b4:09:68:f1:07:50:6c:77:1b:3e:32:b1:
04:ac:06:a7:d8:e5:be:84:9f:31:21:a5:e7:92:12:c2:3e:ab:
65:cc:bc:47:18:9b:71:f1:98:bd:cb:06:d7:c7:a5:97:e7:41:
91:01:80:d8:45:a0:98:dc:2e:07:c1:f7:af:b3:c4:be:97:b4:
0e:d2:5a:e2:21:7d:7c:d6:70:d5:38:4c:f5:64:d1:54:d5:81:
db:b8:61:3e:01:5e:b3:ac:24:3c:2f:92:00:73:5c:a4:af:25:
38:4f:3d:3d:34:49:58:fa:b0:ca:f8:df:d2:84:56:9b:88:fc:
c9:86:a9:7a:46:7e:06:2b:3d:2e:ba:36:7f:13:f1:8e:10:d1:
50:d3:be:8c:8c:7c:b0:62:c0:29:5e:ea:6d:66:76:c3:a3:09:
c8:e9:9e:70:67:ce:f4:fe:c0:d2:a5:80:cd:f1:1e:2c:a2:57:
0a:a8:18:9c:51:c9:41:2e:c3:b3:ae:ee:5d:6f:2d:bf:7a:95:
4d:36:52:20:79:da:bc:e3:a1:67:c4:60:c7:61:4e:b8:30:05:
2b:8e:cb:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XC3WzI9rdJnOoNNu2JvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZGMyZjg1MDI2MTU4Y2JkOWZmNDlkYTE1ZGIyMjVmMDUz
MDc0YWMwHhcNMjUwNTExMDgwMDM0WhcNMjUwNTEyMDgwMDM0WjAzMTEwLwYDVQQD
EygzNzgwMDcxNDU2NTU0ZmJhZGU0ZDU4YTA5NmI4NTk2N2JiNWQ3MTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYGG1CSgR0aBRCpV55KEDOjyJN1v
+sWBdJS1tuN8BqEFdgbYXUEPVNeJ3R2dMxqDGKHiGGNS1O0eb+CUz10iQjmDuyWG
RBd0FklQPQ8g0IRPV4odsa87uZlLmtUwM3sOsOILGMHIHgirWzm3zBCmLsI7Mn8O
3JpxTbIFxk5oQc/TtnZbVbN9IsMcfPkrvI8lxApMi6d5EUbekXxj+EH3GAGNMrOM
g/0cD/boxpsX6eozY5dbbaLPQP1nSQzONeVQFBxv91pO2nn5jsGl/5HGihZiAbis
vl7G4euKLnyU0df1S/zX4mrx4sg2X7i05Q+u4bM2oIzrXC5Pme8LMngwGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeABxRWVU+63k1YoJa4WWe7XXE0MB8GA1UdIwQY
MBaAFMHcL4UCYVjL2f9J2hXbIl8FMHSsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2R3dmhRSmhXTXZaXzBuYUZkc2lYd1V3ZEt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82ZjNlODktMDAxOC00ZGM5LWE5NWEt
Mjg0ZWM4MTYwMmU3LzEvd2R3dmhRSmhXTXZaXzBuYUZkc2lYd1V3ZEt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82ZjNlODktMDAxOC00ZGM5LWE5NWEtMjg0ZWM4MTYwMmU3
LzEvd2R3dmhRSmhXTXZaXzBuYUZkc2lYd1V3ZEt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqgpU2wt
lkz0LH51ay/ucySG+Ig0lJ8krgVSJiTZuq3QDHhudzTmuh0ptAlo8QdQbHcbPjKx
BKwGp9jlvoSfMSGl55ISwj6rZcy8RxibcfGYvcsG18ell+dBkQGA2EWgmNwuB8H3
r7PEvpe0DtJa4iF9fNZw1ThM9WTRVNWB27hhPgFes6wkPC+SAHNcpK8lOE89PTRJ
WPqwyvjf0oRWm4j8yYapekZ+Bis9Lro2fxPxjhDRUNO+jIx8sGLAKV7qbWZ2w6MJ
yOmecGfO9P7A0qWAzfEeLKJXCqgYnFHJQS7Ds67uXW8tv3qVTTZSIHnavOOhZ8Rg
x2FOuDAFK47LwA==
-----END CERTIFICATE-----
Generated at Sun May 11 10:24:17 2025 by rpki-client