Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
File: WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json)
Hash identifier: mJYXEcp3XdsZf0JYGweuNv+V5T4pOU76mmyosvqLGwc=
Subject key identifier: F1:59:D2:F3:C6:8B:2B:23:26:50:E2:64:14:27:09:E7:6F:AB:2B:84
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Certificate issuer: /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial: 0196839164912F9D407A9FC1D35225BF9C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
Manifest number: 14A8
Signing time: Tue 29 Apr 2025 22:01:05 +0000
Manifest this update: Tue 29 Apr 2025 22:01:05 +0000
Manifest next update: Wed 30 Apr 2025 22:01:05 +0000
Files and hashes: 1: StCabivgvIyHuO75rSeb1s6xEVs.roa (hash: RRQXRwYuo2mU1htEhpek7hE+ZEmIuqOlTMtqEPaKMPA=)
2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: i8+PYg2x/wFfCOvOn19zSO//jRSjR56yIuaut53EsE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:64:91:2f:9d:40:7a:9f:c1:d3:52:25:bf:9c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Validity
Not Before: Apr 29 22:01:05 2025 GMT
Not After : Apr 30 22:01:05 2025 GMT
Subject: CN=f159d2f3c68b2b232650e264142709e76fab2b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0c:99:fe:e1:48:b9:1f:5d:ce:9a:dd:71:59:
22:c4:20:47:c1:7e:09:9a:89:4d:80:42:fa:e1:05:
47:a6:8f:39:41:b1:c3:94:2e:b3:68:1e:0f:c4:f2:
de:05:cb:f1:0a:cc:1a:da:2d:36:48:69:df:cd:86:
a4:3e:03:e2:f3:ac:96:b6:90:24:36:9f:33:f2:92:
e8:79:86:46:0e:fe:d0:40:1f:bd:68:2d:b7:78:16:
02:cd:2e:4a:5f:06:67:4e:a2:49:40:bd:a7:0a:de:
26:1d:3a:3d:64:94:f2:b3:56:ec:cd:35:04:04:30:
7a:22:d3:5c:93:b0:da:61:06:73:d6:72:09:f0:df:
ea:5e:6d:64:4d:84:0f:39:3d:a6:d5:c6:41:9f:5e:
44:4e:2d:b1:5f:49:3a:eb:59:ce:47:cf:bb:e4:23:
80:8d:ff:28:25:ef:e5:f7:a8:a4:24:db:fe:97:7d:
ff:ed:66:6f:1f:11:9b:9e:e2:39:c8:14:a2:1f:d3:
4b:0b:7d:c9:9c:5e:7a:77:df:91:35:f3:c7:ba:28:
e3:fe:fb:8e:99:5b:f6:eb:25:78:a9:2a:91:93:15:
75:ab:40:5c:0c:f8:84:ea:82:09:e5:df:ab:f1:54:
b4:9a:52:82:b8:33:b9:31:aa:5b:5e:5e:e4:92:4f:
f5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:59:D2:F3:C6:8B:2B:23:26:50:E2:64:14:27:09:E7:6F:AB:2B:84
X509v3 Authority Key Identifier:
keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e1:75:fd:1e:93:0e:79:97:70:4a:e2:86:4a:b5:f6:66:99:
18:c2:48:e1:f4:af:6d:c7:0c:c8:78:c2:91:be:9a:83:e0:0f:
cc:75:54:69:55:bf:2b:0b:ad:44:87:a3:32:2b:92:4b:d0:fa:
95:f9:8a:87:27:f5:bb:98:cc:13:21:b0:be:c2:40:a2:f1:3c:
d5:5f:6e:c7:40:3e:42:f5:69:b6:57:f0:26:e7:0b:9b:bc:db:
91:62:47:f8:ba:9f:ed:b0:bb:36:72:6a:d5:c7:ee:91:53:b3:
92:db:b1:b6:6d:09:18:8f:57:4e:43:f0:1a:a5:c5:f9:b9:5e:
dc:cd:81:72:de:bd:2c:18:22:11:c0:74:57:19:cd:3b:89:94:
78:77:ac:3f:b0:c2:82:92:43:45:0c:ba:79:10:b5:f9:45:7a:
17:21:05:c8:9d:fc:94:24:39:d2:26:6c:08:a4:9a:f8:f9:36:
78:0a:dc:b8:6c:5d:62:59:a7:67:04:eb:0b:30:e1:44:ea:b4:
42:79:9f:0b:b8:12:6a:c0:3a:57:89:c7:0d:89:8a:e2:5b:39:
cb:29:89:5d:0a:07:83:4c:e4:a0:b4:58:70:af:15:ec:30:ce:
6c:ad:0e:76:90:03:2a:d5:00:4a:87:b8:ed:b6:4f:c5:0c:00:
86:86:37:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:32:09 2025 by rpki-client