Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
File: wHR_vibJzddiit_ttXt4vo3nXik.mft (raw, json)
Hash identifier: vvDvxdNoFvPZ3qRIgYw2tJb73wQBHoD/nuw3n1TgN/4=
Subject key identifier: A0:2C:C1:17:E5:5A:A3:59:63:D9:F3:F8:B2:BF:64:4B:AB:7A:55:39
Authority key identifier: C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
Certificate issuer: /CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Certificate serial: 0196748B61C899ED6A15675BDE3CF32C5356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 00:00:13 +0000
Manifest this update: Sun 27 Apr 2025 00:00:13 +0000
Manifest next update: Mon 28 Apr 2025 00:00:13 +0000
Files and hashes: 1: 2nyycqBL-rAzEQltLGtAfMtGQLM.roa (hash: MBIXdHvXsLvgHf885v+F1wgnsNoLNTld5Y4auopwyqw=)
2: 3bQBeV9f56eObQzYUYLO4GAQ8UY.roa (hash: HtmwpWIMcqcjPv1ZUB2JqlVZpv8JVThGiHf7qzzoBm0=)
3: ChVY_yTwqfm0VnhsyIrbJGaer18.roa (hash: R+XyXjI6742+O3LetUXz9z0t0N+RLDWsKAzEnh76DmE=)
4: QeIXKKypRp3pUKZsAXhEwiToOAw.roa (hash: 4uaN2IkF9UjmjdQnaC+MinX3CAS8fZa9J2o5ym9jh2Y=)
5: Rm5aIxDvXkvVkBBg3XIjNRMEevw.roa (hash: 91lRhrOUw2PQdAXyAGgZms7aAgC+waBbAPHPOWg5hPI=)
6: Sr0IV-rO-zHkL4o3XLlXoB58rKk.roa (hash: suoX77hNmWsUeC3U2K5nrNVPL2RuFHc2TD/yXsw9YqQ=)
7: ePEq_iR8SghIv87pTKid6AVEFNA.roa (hash: JKXKaBC2B7MQ6+tg8cpfMIILPOh/OoQhr9iR79J36DU=)
8: wHR_vibJzddiit_ttXt4vo3nXik.crl (hash: BOWonEWujWqoOdEkbmGMBuuso9QbNbTcgK6lKIr9R/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:61:c8:99:ed:6a:15:67:5b:de:3c:f3:2c:53:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Validity
Not Before: Apr 27 00:00:13 2025 GMT
Not After : Apr 28 00:00:13 2025 GMT
Subject: CN=a02cc117e55aa35963d9f3f8b2bf644bab7a5539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:da:9b:f0:ab:a5:fc:06:31:b6:19:c0:1a:
13:be:66:8a:b9:c1:96:3b:0e:7a:e8:9a:bf:25:f0:
a2:54:be:42:90:9b:77:2f:aa:bf:2b:d4:70:1d:5c:
ea:51:2a:b9:48:6b:f5:a1:99:f5:3d:ee:b8:b2:8e:
a8:46:58:33:42:16:e3:10:d0:93:47:38:e6:41:45:
89:7e:b4:4a:20:5e:7c:78:30:70:fe:ad:52:63:75:
9c:fc:77:e6:62:89:e8:9f:9c:ad:38:a3:25:bb:42:
03:c4:ef:06:0f:22:84:f0:c2:37:bc:3e:46:d3:1c:
ca:92:bd:4c:b7:bc:1b:2e:61:85:8c:b0:7f:09:ad:
d9:81:60:db:e3:64:a9:50:6a:28:01:58:69:e8:fe:
8c:e6:ac:24:5c:88:33:ff:2f:6b:d9:9f:61:b9:e3:
d0:ce:b7:59:26:f7:b7:2a:46:04:1a:7d:5a:97:e8:
14:d1:41:24:d1:45:ed:a3:7a:58:12:3e:4c:80:aa:
ae:79:d0:f8:da:ba:d5:10:65:8f:34:0b:80:e8:08:
06:c5:9c:3e:c4:05:d4:8f:93:48:07:e6:ea:da:b1:
25:ea:20:c2:ac:3d:2c:d2:a8:83:f3:0c:fc:e2:37:
31:29:41:0b:5a:f4:7c:6c:26:db:24:98:b8:35:98:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2C:C1:17:E5:5A:A3:59:63:D9:F3:F8:B2:BF:64:4B:AB:7A:55:39
X509v3 Authority Key Identifier:
keyid:C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:17:8f:89:e0:96:80:cd:eb:26:57:27:36:25:21:da:60:72:
52:84:39:20:4f:7a:dc:f9:9f:b2:20:f0:36:ff:30:5e:aa:b9:
93:cc:f3:ac:e9:89:e8:f3:6a:69:d5:b4:ca:a6:85:f6:f3:f3:
d8:87:7b:22:f1:ed:10:9d:56:17:e3:84:66:7e:c0:f4:26:ab:
ea:bb:8e:50:6f:de:5c:59:f7:06:2f:c2:20:79:c3:ed:76:61:
d7:0b:17:d5:9d:b0:d7:e1:9b:05:57:36:03:46:7e:16:74:ca:
60:76:85:aa:6b:7c:79:36:95:9a:cd:96:50:d7:7a:1d:ee:18:
c1:7f:91:5d:d5:2b:f0:28:37:4d:b2:8a:0c:1b:57:2d:78:6a:
42:f1:8b:e5:8f:96:00:0e:c5:d7:13:bd:59:10:9f:c0:05:b9:
3a:39:1a:23:55:44:67:14:75:32:80:d4:b7:e2:f7:e3:3d:96:
4a:49:62:b7:a5:6a:41:e8:bb:9b:2d:50:a0:a9:fd:1d:a7:d3:
5f:69:bb:17:89:2c:d3:b5:a9:29:39:10:41:2e:90:bc:5d:74:
40:e1:54:d4:db:4b:c6:42:20:14:19:81:5c:55:aa:38:3d:21:
93:82:99:a8:34:67:5a:14:c7:bc:0e:61:4b:58:b1:86:04:37:
40:d3:ce:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:33:29 2025 by rpki-client