Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
File: WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft (raw, json)
Hash identifier: FYh6GAA2El3CHfmZFVdw5F7jy8vPYaYKtkOS7ckIVe4=
Subject key identifier: D3:5B:18:35:85:98:B7:C0:9E:E6:08:72:BF:2D:C4:2E:45:CF:2A:90
Authority key identifier: 58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A
Certificate issuer: /CN=5871720a8884167fef82a49267661fb346d7561a
Certificate serial: 0196BAB6403C158F03A03018AC49499B1070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
Manifest number: 1537
Signing time: Sat 10 May 2025 15:00:28 +0000
Manifest this update: Sat 10 May 2025 15:00:28 +0000
Manifest next update: Sun 11 May 2025 15:00:28 +0000
Files and hashes: 1: WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl (hash: W3lph7exr1QfbUzeYVN2SIgPWldfS76zHf605328JvY=)
2: b-H1HafvFZHqAREOClh3E9AccmU.roa (hash: MvASKCNf0q7mbKy4jwGmZ3TcUV1oDH8tUiKsCWNFvAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:40:3c:15:8f:03:a0:30:18:ac:49:49:9b:10:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5871720a8884167fef82a49267661fb346d7561a
Validity
Not Before: May 10 15:00:28 2025 GMT
Not After : May 11 15:00:28 2025 GMT
Subject: CN=d35b18358598b7c09ee60872bf2dc42e45cf2a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:97:a8:64:f1:f6:97:74:6d:5a:e4:e7:26:f8:
1c:b8:37:da:40:1d:5c:11:cf:8b:ce:fc:8a:29:aa:
cf:53:53:d9:66:44:95:6a:8b:dc:f6:3c:79:1d:88:
9b:e1:52:d4:14:a0:4c:33:9a:64:94:e4:0d:1d:bd:
71:2a:ac:c1:0f:14:03:70:33:81:7c:a9:25:76:41:
1a:28:dc:62:39:d3:35:09:31:24:4a:e6:12:a2:4e:
55:04:1d:31:f2:e0:8f:d6:df:75:1f:55:b4:5f:4f:
39:bc:40:54:63:1b:e8:5a:40:82:ae:fc:14:11:85:
01:6c:16:b4:3f:72:1c:99:a1:63:89:69:76:03:f9:
5c:c4:93:ec:b0:3c:6b:c8:af:52:bf:0c:ce:1f:7e:
88:d2:4d:ab:1c:6b:b3:b1:46:0b:1a:2c:cf:9c:4b:
21:b5:d6:b3:52:d6:df:0b:8f:e8:66:b9:89:05:ea:
7b:4e:c8:79:fe:41:56:d3:b4:6d:81:52:61:ad:79:
6b:8e:45:32:99:86:86:09:b3:85:30:9d:95:26:5e:
09:4b:6b:db:45:f6:f4:62:7b:c3:cf:7a:fc:0e:0c:
a2:22:14:3f:87:3e:e8:0c:3b:7c:08:4a:13:6c:c0:
d7:69:98:13:38:6d:6e:40:d2:a4:c0:93:48:b2:e5:
42:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5B:18:35:85:98:B7:C0:9E:E6:08:72:BF:2D:C4:2E:45:CF:2A:90
X509v3 Authority Key Identifier:
keyid:58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d2:ae:0f:bb:f3:0d:bd:55:16:36:7a:d2:d0:fd:e4:ae:d9:
8f:0a:f2:b3:80:a1:2e:27:a2:04:3b:f9:1e:2f:35:d4:19:75:
d0:ef:67:e5:6e:92:52:97:17:2b:bf:6b:eb:9a:63:9c:b3:e8:
de:e2:39:d8:7f:7b:53:eb:89:7e:92:79:95:ce:e4:76:68:92:
af:92:b7:9c:64:cf:02:35:f6:d7:e5:ba:c1:7e:7e:7f:17:b4:
b7:90:8d:79:5e:b7:3e:35:65:42:de:e8:45:52:42:e6:12:8b:
ef:21:93:99:a8:f4:ec:8e:6a:3a:0c:be:2e:32:9d:7c:5e:f2:
73:db:10:a5:86:f6:16:f0:af:eb:5e:12:1c:9f:b0:3e:3f:ff:
02:03:76:fa:62:d7:69:b5:06:19:15:ea:34:b3:d2:0d:c4:ed:
08:48:fa:2a:73:d9:10:b4:23:74:f7:0b:70:a0:bd:3d:31:3c:
bf:40:d0:10:a4:62:e0:e1:8a:d6:e5:9f:85:04:e2:86:78:aa:
5f:7b:c3:31:01:ae:ba:16:bd:aa:8b:a1:82:61:f4:ce:ae:10:
62:78:be:83:19:49:be:79:9a:cb:20:33:dc:69:b7:0a:2c:79:
61:e3:93:ac:b9:c4:e6:98:f0:1c:1c:72:d6:ff:b3:23:18:10:
2e:88:9c:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6tkA8FY8DoDAYrElJmxBwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NzE3MjBhODg4NDE2N2ZlZjgyYTQ5MjY3NjYxZmIzNDZk
NzU2MWEwHhcNMjUwNTEwMTUwMDI4WhcNMjUwNTExMTUwMDI4WjAzMTEwLwYDVQQD
EyhkMzViMTgzNTg1OThiN2MwOWVlNjA4NzJiZjJkYzQyZTQ1Y2YyYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpeoZPH2l3RtWuTnJvgcuDfaQB1c
Ec+LzvyKKarPU1PZZkSVaovc9jx5HYib4VLUFKBMM5pklOQNHb1xKqzBDxQDcDOB
fKkldkEaKNxiOdM1CTEkSuYSok5VBB0x8uCP1t91H1W0X085vEBUYxvoWkCCrvwU
EYUBbBa0P3IcmaFjiWl2A/lcxJPssDxryK9SvwzOH36I0k2rHGuzsUYLGizPnEsh
tdazUtbfC4/oZrmJBep7Tsh5/kFW07RtgVJhrXlrjkUymYaGCbOFMJ2VJl4JS2vb
Rfb0YnvDz3r8DgyiIhQ/hz7oDDt8CEoTbMDXaZgTOG1uQNKkwJNIsuVCVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNbGDWFmLfAnuYIcr8txC5FzyqQMB8GA1UdIwQY
MBaAFFhxcgqIhBZ/74KkkmdmH7NG11YaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZmE2MDItZjZiOC00N2FlLWJmMDYt
N2RhODljZGE5ZjcxLzEvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wZmE2MDItZjZiOC00N2FlLWJmMDYtN2RhODljZGE5Zjcx
LzEvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtKuD7vz
Db1VFjZ60tD95K7Zjwrys4ChLieiBDv5Hi811Bl10O9n5W6SUpcXK79r65pjnLPo
3uI52H97U+uJfpJ5lc7kdmiSr5K3nGTPAjX21+W6wX5+fxe0t5CNeV63PjVlQt7o
RVJC5hKL7yGTmaj07I5qOgy+LjKdfF7yc9sQpYb2FvCv614SHJ+wPj//AgN2+mLX
abUGGRXqNLPSDcTtCEj6KnPZELQjdPcLcKC9PTE8v0DQEKRi4OGK1uWfhQTihniq
X3vDMQGuuha9qouhgmH0zq4QYni+gxlJvnmayyAz3Gm3Cix5YeOTrLnE5pjwHBxy
1v+zIxgQLoicJg==
-----END CERTIFICATE-----
Generated at Sat May 10 17:06:29 2025 by rpki-client