Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
File: WH9UeNHpTyQHBXIsN4kHba9VN1c.mft (raw, json)
Hash identifier: 3fh47fd/RXjNu7FWErB2oiIaqSWv4W2kILOggzDVq+k=
Subject key identifier: 2D:C9:55:5E:95:52:31:48:E2:E2:B2:15:AE:A3:30:C8:1D:F7:55:7C
Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
Certificate issuer: /CN=587f5478d1e94f240705722c3789076daf553757
Certificate serial: 019677FAE831590140821BE417F50270208B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
Manifest number: 44
Signing time: Sun 27 Apr 2025 16:00:54 +0000
Manifest this update: Sun 27 Apr 2025 16:00:54 +0000
Manifest next update: Mon 28 Apr 2025 16:00:54 +0000
Files and hashes: 1: O9YH683XDT1flN6ET4uOsZBETCA.roa (hash: jKvHyJl0PhEVbjdUP0F4HcRlqo0pta2OYd3CqDYcUfU=)
2: WH9UeNHpTyQHBXIsN4kHba9VN1c.crl (hash: 3Cm/szk8kUMfQB6aw95W/8WuEtG5iOoiFdDyHMs062s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:e8:31:59:01:40:82:1b:e4:17:f5:02:70:20:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587f5478d1e94f240705722c3789076daf553757
Validity
Not Before: Apr 27 16:00:54 2025 GMT
Not After : Apr 28 16:00:54 2025 GMT
Subject: CN=2dc9555e95523148e2e2b215aea330c81df7557c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:00:3f:45:d5:c8:76:3d:c3:24:89:3d:0c:
26:da:a5:6a:1d:eb:80:42:3f:04:32:7a:fb:dd:d4:
01:6c:35:86:f0:81:f8:7d:ee:26:73:43:f9:3d:b8:
16:92:f9:d4:af:5e:60:92:60:ae:bb:ed:36:86:80:
bb:4d:90:4d:e2:ca:bb:39:80:d9:e4:6e:02:9b:14:
39:4d:c4:1a:d1:b5:32:a4:12:dc:30:2d:c4:73:6f:
25:4f:3e:74:6a:7f:d8:95:8f:0b:2f:d3:9e:72:d7:
47:3b:b4:db:62:f5:bb:9d:f2:b5:ad:8e:d3:4c:55:
19:74:b1:57:14:06:e2:6f:b7:87:b9:24:5e:e7:c6:
59:66:2b:a3:57:3d:02:bd:a2:6b:6a:e4:2c:82:a8:
09:7d:f0:6f:05:5e:cd:07:51:0a:13:a1:94:c1:36:
ce:ef:48:21:00:ce:e3:48:56:51:33:a6:f7:79:46:
12:96:92:1d:e9:6a:d3:98:d4:55:86:b1:50:a7:4e:
34:ff:aa:b6:6d:a9:22:2f:83:c8:c3:8e:69:dd:a1:
54:59:24:e8:54:8f:5e:91:59:8d:29:3f:e8:24:09:
ff:f3:60:77:6b:60:91:29:32:df:c7:09:1d:de:29:
fc:0b:02:78:ce:87:1c:dc:6e:15:ac:ea:42:e1:77:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C9:55:5E:95:52:31:48:E2:E2:B2:15:AE:A3:30:C8:1D:F7:55:7C
X509v3 Authority Key Identifier:
keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a4:38:0b:b5:8d:ed:d5:db:db:bf:48:0b:e1:b6:20:56:a1:
fc:34:ba:49:b0:f1:f4:29:13:81:82:99:7e:b8:a0:08:d3:28:
1a:52:25:97:f3:36:29:ad:5b:21:83:c9:39:2f:d6:4d:54:c5:
3a:3c:46:b2:98:9c:5f:a5:06:20:1a:cc:e3:17:c4:1c:84:5a:
88:68:4a:ad:cc:64:de:36:e6:1b:c2:4d:dd:a5:4d:dd:e3:94:
7a:2a:4b:9f:b9:51:b6:1f:aa:56:1b:16:e2:64:f4:32:d8:96:
2a:4f:49:bb:ca:e3:01:9c:ab:1c:9e:ad:ba:42:59:76:4e:96:
a4:f4:dc:4d:3c:bb:08:cf:2b:ac:f2:16:11:e5:df:f8:08:cc:
ae:27:a6:1b:7a:dd:77:b9:ea:01:dc:e7:75:fc:a5:14:ec:05:
c2:f1:1d:87:ae:32:c6:6c:ff:c1:69:25:e2:cc:fe:a2:26:ae:
ff:58:72:33:d0:b9:90:df:1a:37:ac:2c:fd:2a:2a:4c:56:17:
0f:f7:4a:5e:d5:8b:ea:0e:93:3e:33:41:d0:37:a8:e3:bf:c9:
da:4f:e3:53:44:4e:4f:ff:65:c4:1c:f2:62:33:7b:af:9b:31:
06:e0:7a:ae:b1:c0:d7:9d:79:2c:6c:95:28:8f:7a:14:bd:06:
a5:d2:16:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:08:21 2025 by rpki-client