Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
File: WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json)
Hash identifier: O67awU+9V8PYhCXYNKbGMu6xSVSR6vVKm/vEkLIcYok=
Subject key identifier: 38:B5:A6:AC:8C:7A:52:3E:66:AE:18:E7:03:C2:9C:58:D6:73:F3:8E
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Certificate issuer: /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial: 0196B7ECAC04C744B86827CC29345A769F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 02:01:03 +0000
Manifest this update: Sat 10 May 2025 02:01:03 +0000
Manifest next update: Sun 11 May 2025 02:01:03 +0000
Files and hashes: 1: 8Z3aUD_PAmXD6dv52YsOghcqB84.roa (hash: yqXiM+cGXnQH3xEwReOpDqFoSkq0y2lHcTn04sbV7Go=)
2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: CfDk0UZC409GXjQRJkBMNmtAt2LGtQT8+L2lOWjG/z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:ac:04:c7:44:b8:68:27:cc:29:34:5a:76:9f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Validity
Not Before: May 10 02:01:03 2025 GMT
Not After : May 11 02:01:03 2025 GMT
Subject: CN=38b5a6ac8c7a523e66ae18e703c29c58d673f38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:59:70:4f:4a:0a:bb:43:23:24:fc:ef:d9:c6:
4a:cf:11:e4:85:91:e4:96:db:a3:f6:a1:08:90:90:
25:bb:75:2e:d1:d0:86:a2:97:24:1c:4c:29:b7:5a:
42:3e:6b:e2:78:73:fd:33:cc:1c:aa:19:b9:7e:48:
eb:7a:f9:34:a6:20:c1:3f:d4:a0:6d:95:07:b0:c8:
e5:28:04:09:bc:14:1d:46:b4:e3:53:86:06:24:45:
ec:76:fe:7e:4d:0c:b3:be:10:81:2a:14:ce:ea:87:
4a:55:fe:08:cb:6d:1c:59:db:00:b2:b0:aa:0f:cc:
db:b8:97:87:f3:e5:54:41:6e:7e:8a:ed:ec:9e:0c:
31:46:ec:08:b8:48:03:a2:76:2a:d3:4f:41:ad:92:
1f:11:01:05:7f:10:59:93:12:f8:f0:72:f4:8f:d3:
f2:49:28:96:4b:8e:36:9b:7e:db:4b:b6:46:6b:8b:
94:b7:91:cd:ce:ae:2a:dd:36:34:50:86:0e:b4:21:
56:2c:0f:6f:be:68:07:2a:14:90:25:da:ef:13:76:
75:9b:40:b7:44:34:29:ed:52:62:e7:f7:5e:bb:2d:
6a:a1:8e:06:25:2a:f0:12:77:73:53:75:64:af:4b:
05:15:47:f2:51:04:a5:ab:54:e6:10:bb:46:91:b1:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B5:A6:AC:8C:7A:52:3E:66:AE:18:E7:03:C2:9C:58:D6:73:F3:8E
X509v3 Authority Key Identifier:
keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:91:74:3b:e9:3d:73:be:17:7e:60:0e:32:93:2b:34:35:fe:
74:ce:35:9e:b0:a5:d5:03:6b:d5:55:dc:1f:dc:b1:f3:d3:49:
58:45:f2:d7:e4:59:b8:84:c1:1d:e9:33:0b:17:b4:c8:e7:5f:
38:00:5a:a1:6d:15:33:05:24:6a:9d:1c:26:ee:78:45:75:95:
a7:ec:0b:28:d5:63:e7:e2:d9:9e:9a:76:8e:13:5d:eb:ea:20:
48:0e:e3:52:ea:13:08:0d:a3:ba:f0:89:63:db:50:14:d0:c3:
96:23:4e:0d:3c:12:ab:fe:39:a6:04:d1:e6:24:ff:af:1c:fb:
40:52:e9:92:60:23:7b:72:83:7f:dc:94:8d:0f:90:18:4d:62:
70:d9:4e:1e:bd:e8:99:93:74:10:c6:47:d9:90:63:6a:74:a4:
e3:cd:a2:fc:3e:fb:2d:82:5e:26:88:5b:f0:a2:72:ea:c1:75:
cf:c9:b7:ea:b4:29:dd:d7:35:b3:d4:b2:74:9d:cd:70:9d:21:
4d:57:a2:0e:db:55:f6:32:c9:3b:07:5e:29:6c:de:10:dd:54:
f8:ff:f5:b2:c4:80:9a:84:47:25:bd:a3:a6:28:25:2a:82:06:
d2:81:5a:82:1c:fb:da:54:e6:62:86:1b:96:b2:ae:7c:81:11:
9b:f9:a1:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa37KwEx0S4aCfMKTRadp9qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NjBlNmNkMWIxYjAwNjNiMTg5MGY3ODA3NDVjMjQ1NjA2
ZGNmNzMwHhcNMjUwNTEwMDIwMTAzWhcNMjUwNTExMDIwMTAzWjAzMTEwLwYDVQQD
EygzOGI1YTZhYzhjN2E1MjNlNjZhZTE4ZTcwM2MyOWM1OGQ2NzNmMzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFlwT0oKu0MjJPzv2cZKzxHkhZHk
ltuj9qEIkJAlu3Uu0dCGopckHEwpt1pCPmvieHP9M8wcqhm5fkjrevk0piDBP9Sg
bZUHsMjlKAQJvBQdRrTjU4YGJEXsdv5+TQyzvhCBKhTO6odKVf4Iy20cWdsAsrCq
D8zbuJeH8+VUQW5+iu3sngwxRuwIuEgDonYq009BrZIfEQEFfxBZkxL48HL0j9Py
SSiWS442m37bS7ZGa4uUt5HNzq4q3TY0UIYOtCFWLA9vvmgHKhSQJdrvE3Z1m0C3
RDQp7VJi5/deuy1qoY4GJSrwEndzU3Vkr0sFFUfyUQSlq1TmELtGkbHAqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDi1pqyMelI+Zq4Y5wPCnFjWc/OOMB8GA1UdIwQY
MBaAFFlg5s0bGwBjsYkPeAdFwkVgbc9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kNmQxYmUtMTBkOS00YTNhLWJkMTQt
MGE4MzBkMDFhZmQxLzEvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9kNmQxYmUtMTBkOS00YTNhLWJkMTQtMGE4MzBkMDFhZmQx
LzEvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5F0O+k9
c74XfmAOMpMrNDX+dM41nrCl1QNr1VXcH9yx89NJWEXy1+RZuITBHekzCxe0yOdf
OABaoW0VMwUkap0cJu54RXWVp+wLKNVj5+LZnpp2jhNd6+ogSA7jUuoTCA2juvCJ
Y9tQFNDDliNODTwSq/45pgTR5iT/rxz7QFLpkmAje3KDf9yUjQ+QGE1icNlOHr3o
mZN0EMZH2ZBjanSk482i/D77LYJeJohb8KJy6sF1z8m36rQp3dc1s9SydJ3NcJ0h
TVeiDttV9jLJOwdeKWzeEN1U+P/1ssSAmoRHJb2jpiglKoIG0oFaghz72lTmYoYb
lrKufIERm/mhKQ==
-----END CERTIFICATE-----
Generated at Sat May 10 11:47:42 2025 by rpki-client