Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
File: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft (raw, json)
Hash identifier: 42SfNF6usrLhr/ptRQvZtBqKf+6o45YWoNdeHuF6t7c=
Subject key identifier: D2:E3:5C:27:D6:1D:32:62:9A:4D:8C:7C:0D:6D:FE:9C:1E:4D:46:CB
Authority key identifier: 5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
Certificate issuer: /CN=5a1a31909780e81734af6607272d18525db7657d
Certificate serial: 0196881290DE1AD3EDF01BB7532BC79165B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
Manifest number: 09EB
Signing time: Wed 30 Apr 2025 19:00:40 +0000
Manifest this update: Wed 30 Apr 2025 19:00:40 +0000
Manifest next update: Thu 01 May 2025 19:00:40 +0000
Files and hashes: 1: 05We7KAwOd8ZrvHSdSmKgB3AkYs.roa (hash: /6T/kf5A77qhojsVT6JQ5gSyGwEMhPcCMY7KI031bSc=)
2: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl (hash: kA76/QKx49WMp1TRmDTKF3hj0JAE9bGrjI8HkBg6Y2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:12:90:de:1a:d3:ed:f0:1b:b7:53:2b:c7:91:65:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1a31909780e81734af6607272d18525db7657d
Validity
Not Before: Apr 30 19:00:40 2025 GMT
Not After : May 1 19:00:40 2025 GMT
Subject: CN=d2e35c27d61d32629a4d8c7c0d6dfe9c1e4d46cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:bb:f5:59:f1:b0:c4:1f:61:fc:54:f5:eb:
db:c6:77:9b:14:33:d0:94:75:e5:26:a7:7b:c2:ec:
42:00:14:27:7e:23:04:ba:2a:19:4e:47:c1:f9:c0:
06:29:02:79:b3:ab:7e:df:c3:d1:44:ae:77:c9:0e:
86:22:27:64:d1:46:82:01:b8:4d:38:e4:b1:3b:c8:
ba:39:62:15:34:10:4f:ce:64:92:cf:c6:71:95:24:
e6:3d:d4:3e:1d:e9:b8:d6:33:02:23:35:55:d6:ba:
09:b5:97:8f:73:0d:a2:08:8b:12:eb:cc:55:bb:44:
7b:4a:d3:2e:50:b7:a1:83:3d:d1:d8:71:eb:aa:79:
f3:e0:ae:37:84:19:f7:25:6a:cf:9d:bf:f4:83:f5:
0a:af:2a:36:a0:f3:db:79:2e:cb:8a:03:eb:00:e2:
eb:9f:91:88:f7:ab:a3:b5:ab:d3:98:1b:85:37:d2:
10:67:76:f8:2f:9c:91:ca:32:5f:cc:ab:bf:d2:a9:
32:07:24:c7:dc:cc:ef:2e:73:a7:9f:78:31:65:20:
28:29:a9:11:ce:d0:8a:25:28:29:9e:37:bb:c2:84:
5f:f4:f0:dd:3e:d8:dd:d4:c9:b1:75:f1:06:ad:1a:
73:f0:31:f8:c9:9e:05:1f:c2:c8:93:9d:df:2c:4b:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E3:5C:27:D6:1D:32:62:9A:4D:8C:7C:0D:6D:FE:9C:1E:4D:46:CB
X509v3 Authority Key Identifier:
keyid:5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6f:44:fa:e3:4c:d9:a0:10:f6:c9:67:0b:95:46:7a:c1:6a:
33:a4:a3:76:13:68:a7:4c:e6:63:ff:eb:f6:dd:ae:4e:27:97:
b5:9b:bb:bb:32:fa:ae:47:67:fe:de:7c:c7:9d:2a:e5:cf:10:
85:87:90:13:39:63:bd:4b:18:2f:85:dc:62:75:d3:a0:54:b6:
31:de:91:e3:a7:1e:e9:13:c4:4a:c6:e4:3d:56:1b:d1:43:fe:
96:8b:1f:10:db:b3:59:88:d4:7e:d3:21:8f:3b:a5:86:3f:f0:
7d:63:eb:f4:dc:aa:fe:f7:fb:ef:54:cf:ea:8f:9c:6e:96:fc:
a6:16:18:c2:f0:e4:99:3d:b9:1d:31:1e:c0:09:53:c4:b8:5c:
24:da:25:d4:0e:d2:34:ef:af:a5:00:84:3c:0d:98:3b:9b:cc:
f8:85:4e:de:c3:51:f8:2f:86:3f:df:c8:d0:50:b8:50:1d:e6:
cf:b2:15:a7:c0:4e:da:52:2e:21:e7:30:0f:2f:47:8c:62:97:
77:8c:fd:b8:4d:a1:be:f6:a5:6b:93:4d:21:c8:22:68:8a:9e:
be:04:79:94:1b:3d:be:40:6e:f6:bc:9b:38:fe:7c:66:dd:22:
eb:27:47:e0:37:f0:76:6b:5b:22:1f:11:07:9e:cb:cd:25:a4:
1d:c9:5c:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaIEpDeGtPt8Bu3UyvHkWW2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMWEzMTkwOTc4MGU4MTczNGFmNjYwNzI3MmQxODUyNWRi
NzY1N2QwHhcNMjUwNDMwMTkwMDQwWhcNMjUwNTAxMTkwMDQwWjAzMTEwLwYDVQQD
EyhkMmUzNWMyN2Q2MWQzMjYyOWE0ZDhjN2MwZDZkZmU5YzFlNGQ0NmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP679VnxsMQfYfxU9evbxnebFDPQ
lHXlJqd7wuxCABQnfiMEuioZTkfB+cAGKQJ5s6t+38PRRK53yQ6GIidk0UaCAbhN
OOSxO8i6OWIVNBBPzmSSz8ZxlSTmPdQ+Hem41jMCIzVV1roJtZePcw2iCIsS68xV
u0R7StMuULehgz3R2HHrqnnz4K43hBn3JWrPnb/0g/UKryo2oPPbeS7LigPrAOLr
n5GI96ujtavTmBuFN9IQZ3b4L5yRyjJfzKu/0qkyByTH3MzvLnOnn3gxZSAoKakR
ztCKJSgpnje7woRf9PDdPtjd1MmxdfEGrRpz8DH4yZ4FH8LIk53fLEvvAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLjXCfWHTJimk2MfA1t/pweTUbLMB8GA1UdIwQY
MBaAFFoaMZCXgOgXNK9mByctGFJdt2V9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hveGtKZUE2QmMwcjJZSEp5MFlVbDIzWlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9lMTAwNTctOTliYi00NGY5LTk3NzQt
Mjc1MmIzNzU5MDY2LzEvV2hveGtKZUE2QmMwcjJZSEp5MFlVbDIzWlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9lMTAwNTctOTliYi00NGY5LTk3NzQtMjc1MmIzNzU5MDY2
LzEvV2hveGtKZUE2QmMwcjJZSEp5MFlVbDIzWlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE29E+uNM
2aAQ9slnC5VGesFqM6SjdhNop0zmY//r9t2uTieXtZu7uzL6rkdn/t58x50q5c8Q
hYeQEzljvUsYL4XcYnXToFS2Md6R46ce6RPESsbkPVYb0UP+losfENuzWYjUftMh
jzulhj/wfWPr9Nyq/vf771TP6o+cbpb8phYYwvDkmT25HTEewAlTxLhcJNol1A7S
NO+vpQCEPA2YO5vM+IVO3sNR+C+GP9/I0FC4UB3mz7IVp8BO2lIuIecwDy9HjGKX
d4z9uE2hvvala5NNIcgiaIqevgR5lBs9vkBu9rybOP58Zt0i6ydH4DfwdmtbIh8R
B57LzSWkHclcpQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:19 2025 by rpki-client