Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
File: WHiPOEJuA2KzTdVnND_oRhpYur4.mft (raw, json)
Hash identifier: XrwEt26QTgCXS5cIGQSaI0A184xbXDaPFTGrMtp5IDY=
Subject key identifier: 40:02:44:F2:F8:DA:A9:F6:36:46:B2:10:F1:28:59:02:63:DE:BB:BB
Authority key identifier: 58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
Certificate issuer: /CN=58788f38426e0362b34dd567343fe8461a58babe
Certificate serial: 0196748C29C71BAA2E4DC9862E2C1A1B2CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
Manifest number: 1253
Signing time: Sun 27 Apr 2025 00:01:04 +0000
Manifest this update: Sun 27 Apr 2025 00:01:04 +0000
Manifest next update: Mon 28 Apr 2025 00:01:04 +0000
Files and hashes: 1: WHiPOEJuA2KzTdVnND_oRhpYur4.crl (hash: JRbKOxpKqN+MV6shyBQue6xDYE8thFKxdynIZUVFAwk=)
2: za5pr_RdRVQCTgLd3W2Y-u8ZZIo.roa (hash: HsG6G2W0gO0SbTM6V5Eodd4DUw2y9g6vatwqlX3nzOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:29:c7:1b:aa:2e:4d:c9:86:2e:2c:1a:1b:2c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58788f38426e0362b34dd567343fe8461a58babe
Validity
Not Before: Apr 27 00:01:04 2025 GMT
Not After : Apr 28 00:01:04 2025 GMT
Subject: CN=400244f2f8daa9f63646b210f128590263debbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c9:4c:6e:b0:7a:e0:5d:8c:85:3f:68:1a:f0:
89:3b:5b:0a:65:ce:6f:11:e3:ba:d0:e8:36:72:5c:
2a:19:56:d2:5c:ae:84:9c:59:b1:08:4b:69:f8:60:
9b:32:ff:c2:07:72:d4:8b:fe:d9:90:b5:bd:1f:60:
53:a2:48:ab:20:01:82:ca:15:50:af:15:8f:ae:df:
b3:f0:47:c6:4d:c4:d0:c6:5a:1f:a8:5d:49:b4:9d:
66:5d:9d:80:df:13:9c:ca:45:4d:b5:7d:ca:21:3d:
f5:73:cb:3f:d7:87:fa:68:04:db:3a:ec:17:d8:5a:
64:f4:8d:7a:81:85:87:7c:96:85:9d:a6:74:6d:57:
e8:a6:90:84:24:6f:76:bd:21:21:44:e9:5b:73:d8:
31:a2:b6:00:e2:51:63:77:d0:d7:4b:c1:a6:87:a1:
d9:d3:88:5f:f8:52:3e:f7:80:d6:22:0c:a5:7a:dd:
46:04:a0:75:2e:40:dd:24:65:a7:f2:8e:dd:a3:d9:
16:f9:7b:84:9e:70:e0:9d:47:70:70:f9:93:8f:42:
92:bb:8d:17:91:0d:3e:00:77:6f:5e:13:d6:64:69:
1a:f0:b2:76:74:c9:30:4f:0e:71:7a:ed:95:ca:e2:
ea:3e:9e:2f:de:a0:40:25:1e:81:d8:11:85:10:6f:
06:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:02:44:F2:F8:DA:A9:F6:36:46:B2:10:F1:28:59:02:63:DE:BB:BB
X509v3 Authority Key Identifier:
keyid:58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4e:b7:2c:f2:de:55:f5:d4:f4:5c:ad:eb:09:1c:b7:d3:ad:
c8:08:13:91:38:01:c7:31:2b:0e:ec:0b:f9:6a:ca:b3:75:06:
94:48:7c:e5:9f:48:45:d4:62:e0:c0:bf:89:6a:39:f9:32:f1:
7e:24:79:f2:96:29:f1:07:d2:dc:cf:e3:ba:87:20:75:25:21:
01:0f:35:61:04:a7:47:68:10:bd:ab:91:51:8b:e6:83:66:f7:
5d:7b:04:a9:52:b4:92:e2:ae:07:a5:30:b7:f4:ef:b6:6a:51:
b2:8f:8a:b9:b8:2a:de:04:4f:ea:c1:9e:21:a7:e3:92:b0:31:
9e:fc:5d:f2:80:d3:7b:9e:47:b2:10:4d:34:0c:e8:1b:fd:92:
a9:2b:d6:7f:d0:d6:7d:7d:dc:e3:1e:f8:8d:3e:15:3e:3d:b8:
ba:fa:82:f4:8a:bb:d8:48:09:7c:95:27:b8:4d:24:2a:2b:1b:
a3:de:e9:5e:e9:7c:3d:b6:8f:90:fc:4e:21:75:b9:d3:2f:4b:
5a:98:d5:21:1c:1a:44:24:a9:3b:b6:9d:63:4a:7a:55:9b:24:
99:50:93:be:1b:d8:d1:c3:82:45:4e:68:58:7e:86:e2:89:34:
ab:ab:41:5d:63:0b:08:a9:21:d1:58:3c:1f:1d:76:8b:e5:66:
7c:77:a7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:30:03 2025 by rpki-client