Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
File: WH7X6fmKHxl17p-8sJXDrfoorsA.mft (raw, json)
Hash identifier: qfN8dHy2dCymOC7jhXLuLHP71GNgUt4l4Nyk4iP+NpQ=
Subject key identifier: CF:C3:53:72:B2:40:53:94:03:14:02:B9:6C:42:6F:AE:C6:8E:2E:A5
Authority key identifier: 58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
Certificate issuer: /CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Certificate serial: 01967EA16638766ADC9ED0167AE9E109109B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
Manifest number: 14F4
Signing time: Mon 28 Apr 2025 23:00:28 +0000
Manifest this update: Mon 28 Apr 2025 23:00:28 +0000
Manifest next update: Tue 29 Apr 2025 23:00:28 +0000
Files and hashes: 1: 19CW3KILFYPXEhHk2Ol76tPUYYc.roa (hash: vdEeJmbxLIeIAD2w3zH+n6I7kJJZC/K9fF2eOSXSZV8=)
2: WH7X6fmKHxl17p-8sJXDrfoorsA.crl (hash: u62HOWzUb7vbHSDVqUUkvPiCzQp7GwaNlp1AaWlmfrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:66:38:76:6a:dc:9e:d0:16:7a:e9:e1:09:10:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Validity
Not Before: Apr 28 23:00:28 2025 GMT
Not After : Apr 29 23:00:28 2025 GMT
Subject: CN=cfc35372b2405394031402b96c426faec68e2ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:d9:8d:4d:59:1a:e4:31:19:e7:ef:ca:72:
38:55:80:44:d4:39:98:b6:c7:b8:50:36:0d:81:c1:
27:3e:69:df:26:a5:47:b8:bf:fb:11:c1:85:64:06:
e1:09:d8:de:ba:da:e0:f3:e3:59:6c:3c:22:90:cc:
24:fd:5e:d3:e6:d9:9d:ef:8d:f5:c2:4f:a2:f6:91:
1f:3b:3e:00:78:96:25:c5:9f:33:de:7e:94:59:ff:
ae:a6:07:62:ca:ab:52:ed:80:6a:2d:8b:45:09:21:
76:88:e0:7d:49:bb:49:06:33:1c:99:a5:ba:85:e6:
98:d1:9b:6a:9a:32:ca:96:d5:e6:eb:39:39:3b:ee:
6d:ae:2b:e6:4f:e1:c4:a2:bd:65:8a:27:2e:ef:23:
47:67:a5:f3:79:30:e9:08:e2:d1:5b:de:d9:71:7d:
64:a5:d7:7c:aa:eb:3b:8d:b4:6d:22:39:7f:74:de:
70:bc:5e:73:7a:56:2f:80:72:0d:e8:fb:d0:09:2b:
7c:57:9e:b1:75:60:ff:a7:f5:de:57:4d:2e:89:4a:
4b:e6:6b:bc:f0:17:23:c5:4a:9a:25:35:72:c9:e0:
6b:23:8d:8d:95:3f:48:cb:0a:28:4a:1a:29:63:5d:
91:51:39:19:9d:34:08:33:18:24:e2:5b:75:22:b8:
56:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C3:53:72:B2:40:53:94:03:14:02:B9:6C:42:6F:AE:C6:8E:2E:A5
X509v3 Authority Key Identifier:
keyid:58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:04:f3:c1:f9:98:2c:c0:e9:e4:0d:9b:c8:6b:d5:06:94:79:
18:10:5e:d7:95:3f:85:0a:8c:14:ea:b7:ba:fb:55:21:97:d4:
9f:e6:2e:62:e6:ee:f3:7d:53:ed:0f:f5:cd:90:48:0f:fa:6f:
7f:b5:42:04:d7:3e:04:d3:d9:1d:07:21:f9:30:0d:72:03:35:
97:6c:c5:90:0f:b4:85:b2:9e:dd:e6:89:95:be:be:2c:1e:8a:
17:52:ba:a2:4a:66:5d:35:ff:a6:ca:1a:4c:98:34:f5:af:39:
ff:2f:f6:4c:fa:9c:e6:da:cc:3a:05:d5:c3:42:18:b4:f3:78:
93:bf:ad:f3:5a:0b:46:ef:56:ba:f7:e4:38:f7:4c:e3:15:e8:
c2:91:5a:3e:50:13:d3:77:fb:ac:4d:d4:95:33:4f:ed:2f:7f:
08:65:4f:27:cb:35:cd:94:1f:83:17:ca:61:ce:67:63:0e:bb:
0a:f3:e7:45:9c:36:cf:eb:c1:e3:41:71:47:27:ff:a4:13:90:
2f:71:d9:d0:e1:d2:3b:b1:49:f4:b4:d9:9a:2f:56:2e:a0:10:
0c:bd:3c:54:cb:62:b9:a0:2a:d8:77:c5:2f:ad:e8:74:0d:73:
e2:c7:f1:5a:8f:48:4a:e2:94:b9:86:fc:08:2d:fd:df:b0:32:
80:55:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:37:26 2025 by rpki-client