Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
File: WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft (raw, json)
Hash identifier: elQujW1bsMljTpnRY+SC47hTsqG0Mho0lVf6aPlI9Xs=
Subject key identifier: BD:7B:B1:BD:D4:54:53:03:54:8B:93:4B:0D:31:13:26:AE:58:8F:78
Authority key identifier: 5A:15:68:19:9D:29:23:9A:27:45:AD:43:B6:96:FB:DC:2E:06:70:6D
Certificate issuer: /CN=5a1568199d29239a2745ad43b696fbdc2e06706d
Certificate serial: 01988CFCECFBD55DBFD009DB81E1396CB95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
Manifest number: 15EC
Signing time: Sat 09 Aug 2025 04:00:42 +0000
Manifest this update: Sat 09 Aug 2025 04:00:42 +0000
Manifest next update: Sun 10 Aug 2025 04:00:42 +0000
Files and hashes: 1: WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl (hash: 85Pkuj8DH4dGvbYRsRPHifEbS4b8Q/m4DWKqWM31BXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fc:ec:fb:d5:5d:bf:d0:09:db:81:e1:39:6c:b9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1568199d29239a2745ad43b696fbdc2e06706d
Validity
Not Before: Aug 9 04:00:42 2025 GMT
Not After : Aug 10 04:00:42 2025 GMT
Subject: CN=bd7bb1bdd4545303548b934b0d311326ae588f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a1:24:7d:56:6d:34:01:6e:2b:e7:b4:df:de:
91:e9:5a:d9:d1:94:74:59:c0:46:b0:22:46:ee:cd:
99:7a:f8:90:6c:c6:dc:9a:db:db:66:1f:37:ab:f0:
2e:32:8e:c5:c9:8b:22:d6:3b:51:a9:af:d8:72:59:
8f:3f:9d:36:81:96:a1:6d:4a:da:95:a8:aa:ba:77:
bb:4b:52:a1:ca:f4:9c:cc:73:91:57:08:d4:9e:68:
d5:8c:56:49:40:3f:57:8b:08:e1:dd:e5:7c:b9:0f:
c2:ed:78:77:2e:0f:f5:bf:c5:2f:8a:25:85:06:0f:
19:d6:bb:b3:89:f4:cf:9c:b2:eb:dc:68:c3:0b:e8:
84:a8:66:20:a0:84:db:3b:d8:84:51:84:61:db:2e:
b2:0a:5c:5f:cd:bf:5e:42:33:a8:4b:7e:4c:a2:4f:
76:63:1d:7c:da:3d:0e:a6:0c:b1:ce:59:06:f7:28:
a3:42:b1:d5:11:81:49:49:ea:09:9a:5b:d3:11:d7:
6a:de:3c:70:29:5b:af:ab:e8:cb:94:3d:3a:8a:60:
20:1d:e0:3d:11:43:ad:9d:03:42:c8:3b:26:d9:4d:
15:35:08:2f:34:c2:a2:26:ee:f9:d8:ff:c0:89:ba:
33:0d:14:7f:94:d4:11:5d:97:f9:76:a8:c6:fe:4e:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7B:B1:BD:D4:54:53:03:54:8B:93:4B:0D:31:13:26:AE:58:8F:78
X509v3 Authority Key Identifier:
keyid:5A:15:68:19:9D:29:23:9A:27:45:AD:43:B6:96:FB:DC:2E:06:70:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:55:82:ea:6d:76:b7:9b:92:d8:30:d4:ae:4a:f6:ef:f6:6e:
ff:b8:07:c9:c8:68:9c:79:77:98:89:f0:0c:20:2f:d4:2d:39:
bf:1f:72:cb:25:55:b1:94:9a:13:71:52:18:fb:ac:6c:74:f2:
bb:77:94:a0:09:cf:22:b5:9c:11:f8:9d:c1:10:44:62:7a:bc:
7a:a2:36:56:58:b9:0d:b8:6c:72:f6:f2:ce:da:61:63:45:e3:
5c:2f:1c:d9:27:eb:ad:0e:6a:db:76:dd:e5:ed:7f:3d:1f:fb:
12:d8:e9:bb:33:dd:47:b6:ec:8d:df:12:87:5d:56:9a:a2:d8:
a8:5d:13:05:7f:c7:03:31:ce:7f:0d:d7:70:34:66:91:27:a0:
9b:f6:24:ec:58:a5:69:b4:63:6b:90:0a:04:9c:a0:11:5d:95:
6b:c4:ba:27:6b:70:34:1a:e7:6e:46:42:e8:c2:d7:b9:4a:db:
ba:01:da:45:59:ea:db:1a:a5:fc:f1:ba:fe:e4:74:9e:10:0c:
a3:14:dc:0d:d2:48:25:b0:de:00:3b:61:a8:f1:82:b7:e2:71:
73:ec:50:6d:64:ea:97:88:37:2b:ae:4a:a0:6a:76:6b:de:9a:
24:74:b3:54:91:a0:c7:f8:97:92:09:a8:a3:5a:7a:34:da:0a:
4c:c6:90:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:52 2025 by rpki-client