Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
File: WHiPOEJuA2KzTdVnND_oRhpYur4.mft (raw, json)
Hash identifier: Zg8ZlC5+fo0mW1fOMIYAUWkS7qQcmsHWWyi9C1Q03TA=
Subject key identifier: 58:8F:BB:53:B3:AF:39:A4:81:3B:BC:09:8A:89:85:42:60:0B:BF:92
Authority key identifier: 58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
Certificate issuer: /CN=58788f38426e0362b34dd567343fe8461a58babe
Certificate serial: 0197B70F6EB2D9153AF320B68DB64900EB90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
Manifest number: 12FA
Signing time: Sat 28 Jun 2025 15:02:11 +0000
Manifest this update: Sat 28 Jun 2025 15:02:11 +0000
Manifest next update: Sun 29 Jun 2025 15:02:11 +0000
Files and hashes: 1: WHiPOEJuA2KzTdVnND_oRhpYur4.crl (hash: Y0sGZkuqlvevXVvf+Q8Sc4CEcvv2EfP5/zjgaJO7n34=)
2: za5pr_RdRVQCTgLd3W2Y-u8ZZIo.roa (hash: HsG6G2W0gO0SbTM6V5Eodd4DUw2y9g6vatwqlX3nzOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:6e:b2:d9:15:3a:f3:20:b6:8d:b6:49:00:eb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58788f38426e0362b34dd567343fe8461a58babe
Validity
Not Before: Jun 28 15:02:11 2025 GMT
Not After : Jun 29 15:02:11 2025 GMT
Subject: CN=588fbb53b3af39a4813bbc098a898542600bbf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:d5:0d:1b:c6:3f:c8:21:ad:ee:13:7d:d8:
24:e6:fe:a8:d2:f1:8e:1c:29:e4:a1:29:9b:26:9e:
a5:44:5c:93:bd:fc:f9:b2:d8:07:19:48:16:34:8e:
52:8c:8b:7e:1c:6b:8b:fa:1c:f0:3f:bb:fa:4a:27:
0f:72:ed:13:4b:ff:14:bb:51:d4:3d:bb:2f:37:de:
1c:b4:91:62:00:df:ee:29:a3:06:84:9f:2e:c5:7c:
7f:db:2d:30:33:e7:79:51:12:54:53:65:54:08:3a:
7e:36:92:77:7a:02:d2:14:c3:55:37:9b:66:89:f7:
56:d1:6e:b9:06:db:67:b2:f5:84:b1:bb:04:c2:0b:
ee:55:90:44:23:b2:38:0b:a0:05:1f:37:4f:c3:d0:
d2:12:5c:92:ff:af:c6:ff:e9:09:9c:19:d0:15:2d:
bf:11:33:67:2d:73:c2:93:10:ea:b7:1c:9a:f0:9f:
45:5f:5d:6b:77:76:6b:0e:63:32:b0:2d:05:16:5d:
5a:0a:90:93:10:c5:95:b2:35:86:32:c1:73:9c:91:
03:39:38:fd:51:a2:19:ef:f0:48:fa:d1:07:90:a9:
0b:48:54:bd:4b:43:04:54:2e:34:ad:34:2a:0a:2f:
17:40:25:d5:4d:e3:b2:5b:5f:8f:11:b0:f2:dd:8d:
15:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8F:BB:53:B3:AF:39:A4:81:3B:BC:09:8A:89:85:42:60:0B:BF:92
X509v3 Authority Key Identifier:
keyid:58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:25:0f:d2:b3:5a:47:ff:47:66:d6:80:a7:b6:c4:1b:6a:35:
eb:6a:54:9a:79:06:38:d4:46:fc:86:32:76:86:b9:71:58:2d:
ac:1d:a5:23:aa:72:c4:22:7d:45:93:65:15:ae:9e:7c:df:b6:
7f:86:65:f9:09:12:c2:80:d1:dd:e1:79:0f:e3:3a:43:eb:e3:
b3:b6:4c:3e:1b:38:fa:e2:34:f4:1f:12:e3:8c:20:50:26:41:
0f:65:12:23:74:ca:10:eb:d7:69:28:d0:e4:15:21:83:1d:30:
68:de:81:aa:ad:06:a2:87:4a:27:d6:8d:4f:5f:91:4e:1b:3c:
32:82:38:e4:76:3d:0c:ef:f5:9a:97:2f:df:33:db:1b:53:3d:
af:6c:07:8e:18:08:86:b4:a4:bf:ec:9f:77:21:1f:9c:fe:59:
c9:af:26:9c:35:30:88:77:42:53:1b:41:53:de:02:12:f7:3e:
2d:b5:58:e2:8d:82:8a:74:db:f8:3e:53:4c:62:14:4e:42:0b:
5b:5f:81:de:62:a0:55:9d:2f:3e:b9:52:ce:4f:78:c1:df:04:
a8:63:af:7b:a8:1b:0f:8e:55:0b:ca:c2:c4:2c:c3:ef:14:ae:
0e:8e:06:fb:b6:fb:49:ae:23:ab:73:d1:5b:ee:18:af:25:da:
a9:e9:a4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:12 2025 by rpki-client