Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
File: WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft (raw, json)
Hash identifier: LB4SqetVF95rJKAsX0K77J40Rg9fhxvLA0orNudq3Bk=
Subject key identifier: CA:F8:17:EE:DF:FD:9B:A1:0B:42:10:1D:E1:A0:30:FE:6A:82:F7:60
Authority key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
Certificate issuer: /CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Certificate serial: 0196759E609A58C0088CFB6C5C1515962DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
Manifest number: 06A6
Signing time: Sun 27 Apr 2025 05:00:35 +0000
Manifest this update: Sun 27 Apr 2025 05:00:35 +0000
Manifest next update: Mon 28 Apr 2025 05:00:35 +0000
Files and hashes: 1: WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl (hash: 4OKmAlDMlGLERYEHnnJfABVJEzkfi9hPi43kWH0eqIY=)
2: Z4U4s6npqkkGcLAYBUlzliN7I6c.roa (hash: jhktH3rMjXeFPaMYfnlQRVzXRWKx1pb7NI8qgNj/AcI=)
3: mzKfcsB_6SZ92dtoyTzdmZT_D5Q.roa (hash: W3oo5zZMXU2kzBLMgAMNFTy/16dWodtGflb0+ZEqPmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:60:9a:58:c0:08:8c:fb:6c:5c:15:15:96:2d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Validity
Not Before: Apr 27 05:00:35 2025 GMT
Not After : Apr 28 05:00:35 2025 GMT
Subject: CN=caf817eedffd9ba10b42101de1a030fe6a82f760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:77:d2:32:c2:10:b4:d8:02:fd:ae:f2:9d:b1:
ac:ea:a8:9d:79:de:f7:7a:0e:89:c9:97:37:74:5a:
f1:f8:52:01:67:d2:f7:d0:e4:16:33:3e:ff:c7:99:
e1:c2:6e:7e:37:82:17:05:6a:0d:14:27:70:97:86:
95:71:6b:c3:59:f7:1a:4d:92:83:ed:7e:dd:c0:f7:
da:f0:f9:99:24:bf:28:3b:ae:b1:79:05:ee:87:57:
cf:79:af:fe:47:5a:49:9f:65:b1:c2:93:96:c9:bc:
ee:8d:68:d7:6e:36:31:50:e5:5a:19:1e:50:24:b3:
dc:79:c2:1c:b9:d7:e4:cb:1c:5d:7e:d5:ae:60:96:
59:62:7a:8b:79:b9:36:a7:3c:70:9b:50:9f:71:8d:
99:29:a3:ed:90:06:37:e0:b9:ad:fb:c1:98:d2:e6:
81:78:23:63:de:94:42:93:9b:0d:5a:30:e1:c5:75:
5d:35:d3:1a:15:32:60:e6:ab:92:ae:f6:60:c7:6d:
8b:b8:2d:ca:96:39:6b:dd:8d:eb:20:d5:ee:65:a0:
8d:71:ce:7b:c5:1c:dd:99:62:e1:44:ae:fd:bb:80:
ab:34:27:ba:d6:e4:56:3f:a7:ab:58:6c:dd:f1:70:
d3:79:ab:76:f4:02:cb:f9:a3:4f:25:6f:c1:4d:33:
24:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F8:17:EE:DF:FD:9B:A1:0B:42:10:1D:E1:A0:30:FE:6A:82:F7:60
X509v3 Authority Key Identifier:
keyid:58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:7b:48:b8:99:cb:63:95:7b:2c:6a:5f:9d:0d:0d:4b:51:e6:
e0:0b:44:43:f9:c6:e9:81:6a:1d:56:5a:36:0b:9d:97:95:42:
90:4f:55:39:9e:eb:da:f0:9c:90:60:63:66:0c:6d:b0:8d:87:
e7:c2:88:82:df:f2:8a:16:27:12:9e:f8:68:84:aa:a7:ad:4a:
ba:4d:05:eb:14:02:86:b0:3f:65:ec:4a:7d:cc:ac:3b:da:b4:
a2:6b:dd:b4:82:d1:55:57:74:72:a8:5f:3f:66:d7:f1:f0:49:
aa:2f:c9:f1:e9:35:e3:c1:f5:6b:67:ee:6f:2c:35:91:c7:ea:
55:b7:29:64:eb:86:a0:00:1c:ef:0c:d4:41:d7:4d:cf:69:57:
05:53:0a:93:07:8b:73:4f:b0:fc:d1:44:69:c0:08:a2:67:18:
44:db:3a:10:20:e2:54:3c:ba:71:39:6c:e2:f1:1e:5c:9d:f2:
45:ca:86:22:6c:60:ed:1a:d0:cc:7b:fe:aa:73:39:a5:4c:d2:
cc:5c:8b:ed:e9:c7:6d:29:43:c3:71:be:33:c4:09:b1:07:6f:
dc:e1:91:9a:96:6d:44:86:d0:85:45:1c:c8:be:f1:8c:31:e8:
a4:5e:a6:a1:de:96:55:bb:27:4a:7d:0c:82:bf:67:f4:53:ef:
51:00:e4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:38:52 2025 by rpki-client