Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
File: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft (raw, json)
Hash identifier: HbT1M/zz04iHrp6SvI7LEdKXISYGu84GdJj8fNstAp8=
Subject key identifier: D6:DA:43:4C:D2:E0:5F:EC:0B:FF:52:B9:DE:9C:95:BE:6E:04:73:D5
Authority key identifier: 5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
Certificate issuer: /CN=5a1a31909780e81734af6607272d18525db7657d
Certificate serial: 0196BE2557205A71770E9E6317C976A15E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
Manifest number: 0A07
Signing time: Sun 11 May 2025 07:00:40 +0000
Manifest this update: Sun 11 May 2025 07:00:40 +0000
Manifest next update: Mon 12 May 2025 07:00:40 +0000
Files and hashes: 1: 05We7KAwOd8ZrvHSdSmKgB3AkYs.roa (hash: /6T/kf5A77qhojsVT6JQ5gSyGwEMhPcCMY7KI031bSc=)
2: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl (hash: ZE0Mb1RT1KXicAyTiD1JswuJwSvjeetj11v1JtsPq6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:57:20:5a:71:77:0e:9e:63:17:c9:76:a1:5e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1a31909780e81734af6607272d18525db7657d
Validity
Not Before: May 11 07:00:40 2025 GMT
Not After : May 12 07:00:40 2025 GMT
Subject: CN=d6da434cd2e05fec0bff52b9de9c95be6e0473d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:9b:18:8c:34:df:f8:81:d0:22:44:64:bb:
47:61:59:26:8d:d8:79:a4:64:ae:62:6c:da:a1:80:
b3:7a:d4:53:00:d6:73:e6:9e:b7:a6:0b:b4:41:1c:
c4:ab:d4:05:63:4e:d1:e6:70:10:28:47:90:9c:24:
06:75:4e:f6:35:61:e6:0d:dd:d4:d4:4a:5f:c1:de:
eb:5f:f4:92:40:e7:20:f8:bb:a8:91:42:1a:f3:bf:
62:2d:f1:05:71:ce:01:c9:a5:1d:0b:c5:6c:15:23:
86:bd:6d:e2:04:e4:40:1d:d8:a9:68:55:ed:78:87:
77:c7:01:6b:97:c6:5e:b5:25:80:b0:03:28:3b:97:
3a:b9:5b:77:77:1b:3f:93:9b:d6:89:89:cd:09:56:
2d:d5:7a:cc:ac:5c:6b:30:e3:9c:6f:50:e7:c0:95:
21:3a:59:b8:30:99:49:07:6e:c6:b2:20:91:f5:fc:
85:d4:23:d3:b1:9b:cf:25:ae:9f:5b:be:fd:4e:3c:
fd:4b:a0:9d:85:da:68:a4:f6:68:bf:44:4b:95:2a:
0d:93:94:bc:0e:4d:78:d6:9c:e5:08:c5:5d:59:96:
9c:f4:60:cc:d7:fa:3d:82:f6:a2:4d:f8:10:ec:71:
29:94:ce:a7:72:b8:9e:52:11:5a:2d:71:a2:f5:3f:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DA:43:4C:D2:E0:5F:EC:0B:FF:52:B9:DE:9C:95:BE:6E:04:73:D5
X509v3 Authority Key Identifier:
keyid:5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f6:29:75:1b:e9:13:c8:25:14:8f:f8:58:b7:cc:fc:f3:d0:
5c:16:81:15:7a:f5:d6:79:c7:b6:d5:dd:03:01:ef:85:fe:d3:
ad:43:13:af:a9:2b:88:b4:a7:a6:7e:26:82:59:10:05:58:ae:
be:76:a3:62:99:90:df:7e:b0:02:75:77:09:c3:4c:6c:e8:89:
4f:60:be:a1:b5:d1:58:ad:fa:e4:a0:30:4b:66:ae:5b:00:11:
02:4b:58:6f:91:5e:65:5c:8c:72:f4:d0:43:fd:7e:e3:c9:68:
74:86:e7:98:ad:f2:d7:bf:44:0a:f0:8d:bf:a8:0c:58:76:c4:
2e:b3:4d:f8:c9:6c:8d:3a:10:a5:0a:a9:bb:53:ee:b3:51:6d:
ef:51:ee:25:1d:a4:4f:ab:9e:bd:d4:92:7a:0c:95:3d:87:25:
bc:3e:bb:40:f8:a5:6c:d9:79:d7:f7:eb:8e:f5:4b:2d:f7:da:
78:5d:29:9d:23:5a:21:3d:06:77:e2:46:65:fc:b9:fe:a5:6d:
af:85:7f:b8:42:85:ae:cc:bc:b2:11:5a:63:a8:6b:2f:a9:a0:
1a:58:b6:39:ba:8a:dc:9f:e0:f4:07:c5:e3:61:c1:83:8a:e0:
44:2d:2b:57:16:5f:ae:0b:7d:13:39:5d:53:83:81:01:57:8f:
cc:4b:b3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:23:14 2025 by rpki-client