Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
File: WHiPOEJuA2KzTdVnND_oRhpYur4.mft (raw, json)
Hash identifier: UJA+sYkvSTmezb9RTUUYbOEAiEV5SmmeqKm8Y2ZciAk=
Subject key identifier: 8A:3E:59:60:67:CC:EE:6F:09:7F:3C:0C:99:75:19:48:32:BA:DF:80
Authority key identifier: 58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
Certificate issuer: /CN=58788f38426e0362b34dd567343fe8461a58babe
Certificate serial: 0196C1CB8333632BA8018AFF60A4454E45A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
Manifest number: 127B
Signing time: Mon 12 May 2025 00:01:02 +0000
Manifest this update: Mon 12 May 2025 00:01:02 +0000
Manifest next update: Tue 13 May 2025 00:01:02 +0000
Files and hashes: 1: WHiPOEJuA2KzTdVnND_oRhpYur4.crl (hash: nQP1f5t1W8oUsRu6VL0em8MZBjwSbvXDmHtBlrncjsk=)
2: za5pr_RdRVQCTgLd3W2Y-u8ZZIo.roa (hash: HsG6G2W0gO0SbTM6V5Eodd4DUw2y9g6vatwqlX3nzOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:83:33:63:2b:a8:01:8a:ff:60:a4:45:4e:45:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58788f38426e0362b34dd567343fe8461a58babe
Validity
Not Before: May 12 00:01:02 2025 GMT
Not After : May 13 00:01:02 2025 GMT
Subject: CN=8a3e596067ccee6f097f3c0c9975194832badf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:c7:cc:fc:11:36:83:47:fc:10:92:f2:f4:
d6:df:9f:5d:74:4b:ad:75:f2:2d:fa:5f:9e:dc:09:
94:39:c9:58:78:82:7b:b2:09:25:ee:19:3f:a3:8c:
2f:a0:de:bd:80:66:aa:43:34:53:35:67:9b:2a:08:
d4:6a:10:c6:d0:b8:ac:67:0f:aa:53:0a:2e:52:b0:
a5:33:2d:76:5a:0e:19:26:3a:fe:ac:87:2c:ba:1c:
e3:8a:20:e0:2e:6f:06:bb:75:f8:10:ee:a1:d9:08:
3e:46:c9:82:55:35:7a:3a:07:5a:ae:a3:67:59:21:
75:4a:fa:ff:f0:61:2b:06:15:98:71:b4:a2:75:ad:
6c:16:af:e3:7d:66:13:57:2e:4f:90:26:80:0a:fe:
30:b5:90:11:c7:c4:7c:00:6e:d2:7f:b2:ff:26:e6:
2e:f3:b2:bb:21:ec:5e:0d:40:9b:21:4c:14:92:95:
d0:a8:54:e8:83:5b:ac:bf:65:bb:a2:f6:81:8e:d7:
cf:61:76:bf:44:ce:f6:17:ee:20:3b:84:9c:a0:e7:
2b:31:7b:0a:0b:4f:2a:98:cd:5d:a4:18:54:b2:a2:
41:70:59:2c:8a:3b:07:50:85:c9:4e:c1:55:6d:1d:
8d:29:9c:6f:92:c5:42:d8:4b:85:ee:25:67:af:68:
52:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3E:59:60:67:CC:EE:6F:09:7F:3C:0C:99:75:19:48:32:BA:DF:80
X509v3 Authority Key Identifier:
keyid:58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7f:5c:09:0d:36:35:8c:fb:a4:0e:00:15:fd:24:84:83:50:
9a:95:c3:84:a0:29:40:c0:fa:9d:a8:f1:e0:15:06:79:32:72:
4a:80:8a:e4:12:f2:4e:17:83:64:40:4b:5c:5a:c4:d5:8a:87:
a9:4f:5d:7f:77:64:cd:e3:40:25:fd:d5:15:34:c3:2f:41:42:
e9:99:82:e3:cd:ec:57:2c:b4:1c:5a:9c:82:cd:3d:4c:8e:1c:
5b:51:c3:15:f9:9e:ed:00:f5:2d:f1:7c:be:44:d7:4b:cf:c0:
4f:27:c9:c2:b3:e4:12:9a:7a:e4:7f:5d:90:40:4b:b4:cc:12:
38:ee:72:3e:60:4a:ae:35:b7:45:26:0e:b2:29:b9:46:47:00:
5f:97:70:a1:42:1d:db:8d:85:fc:00:ec:c2:8f:64:12:63:be:
33:a7:ef:4a:5a:c2:5f:5b:5d:04:22:0b:c8:54:27:45:09:86:
56:91:45:b4:19:db:bc:1f:95:4d:7b:75:e8:0a:92:2d:af:d9:
a6:5b:87:b1:46:12:6c:a5:eb:ed:dd:f4:13:59:8a:42:e6:05:
a3:dc:07:64:e3:16:1d:9d:24:bb:1a:db:ff:3f:92:3e:87:36:
ac:6a:97:84:72:f5:2f:9f:b6:a1:32:1b:b7:73:44:3c:73:7a:
dd:76:2d:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBy4MzYyuoAYr/YKRFTkWlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4Nzg4ZjM4NDI2ZTAzNjJiMzRkZDU2NzM0M2ZlODQ2MWE1
OGJhYmUwHhcNMjUwNTEyMDAwMTAyWhcNMjUwNTEzMDAwMTAyWjAzMTEwLwYDVQQD
Eyg4YTNlNTk2MDY3Y2NlZTZmMDk3ZjNjMGM5OTc1MTk0ODMyYmFkZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwDHzPwRNoNH/BCS8vTW359ddEut
dfIt+l+e3AmUOclYeIJ7sgkl7hk/o4wvoN69gGaqQzRTNWebKgjUahDG0LisZw+q
UwouUrClMy12Wg4ZJjr+rIcsuhzjiiDgLm8Gu3X4EO6h2Qg+RsmCVTV6OgdarqNn
WSF1Svr/8GErBhWYcbSida1sFq/jfWYTVy5PkCaACv4wtZARx8R8AG7Sf7L/JuYu
87K7IexeDUCbIUwUkpXQqFTog1usv2W7ovaBjtfPYXa/RM72F+4gO4ScoOcrMXsK
C08qmM1dpBhUsqJBcFksijsHUIXJTsFVbR2NKZxvksVC2EuF7iVnr2hSKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIo+WWBnzO5vCX88DJl1GUgyut+AMB8GA1UdIwQY
MBaAFFh4jzhCbgNis03VZzQ/6EYaWLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0hpUE9FSnVBMkt6VGRWbk5EX29SaHBZdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zZDNiMjctZjc4Ni00MWUwLWFjNTQt
YmZjMGZmOTdhMTkwLzEvV0hpUE9FSnVBMkt6VGRWbk5EX29SaHBZdXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8zZDNiMjctZjc4Ni00MWUwLWFjNTQtYmZjMGZmOTdhMTkw
LzEvV0hpUE9FSnVBMkt6VGRWbk5EX29SaHBZdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdX9cCQ02
NYz7pA4AFf0khINQmpXDhKApQMD6najx4BUGeTJySoCK5BLyTheDZEBLXFrE1YqH
qU9df3dkzeNAJf3VFTTDL0FC6ZmC483sVyy0HFqcgs09TI4cW1HDFfme7QD1LfF8
vkTXS8/ATyfJwrPkEpp65H9dkEBLtMwSOO5yPmBKrjW3RSYOsim5RkcAX5dwoUId
242F/ADswo9kEmO+M6fvSlrCX1tdBCILyFQnRQmGVpFFtBnbvB+VTXt16AqSLa/Z
pluHsUYSbKXr7d30E1mKQuYFo9wHZOMWHZ0kuxrb/z+SPoc2rGqXhHL1L5+2oTIb
t3NEPHN63XYtiQ==
-----END CERTIFICATE-----
Generated at Mon May 12 05:16:04 2025 by rpki-client