Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
File: WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft (raw, json)
Hash identifier: K+ecHe1OkJWVX+VPh0SRY+tDQBIFzNOBc7bmA3zxI9A=
Subject key identifier: BC:42:0A:D1:B2:89:9C:CA:F6:E6:B2:C0:70:9C:96:11:DD:58:93:6C
Authority key identifier: 5A:15:68:19:9D:29:23:9A:27:45:AD:43:B6:96:FB:DC:2E:06:70:6D
Certificate issuer: /CN=5a1568199d29239a2745ad43b696fbdc2e06706d
Certificate serial: 0197B89048A4FEBF61D038E6B2769E1C72BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
Manifest number: 157E
Signing time: Sat 28 Jun 2025 22:02:32 +0000
Manifest this update: Sat 28 Jun 2025 22:02:32 +0000
Manifest next update: Sun 29 Jun 2025 22:02:32 +0000
Files and hashes: 1: WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl (hash: FzQZ1RALcYkXF2OsbHEWs5r72/kWcl+RMLv/0PZ6bbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:48:a4:fe:bf:61:d0:38:e6:b2:76:9e:1c:72:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1568199d29239a2745ad43b696fbdc2e06706d
Validity
Not Before: Jun 28 22:02:32 2025 GMT
Not After : Jun 29 22:02:32 2025 GMT
Subject: CN=bc420ad1b2899ccaf6e6b2c0709c9611dd58936c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:a7:96:ac:d4:86:11:66:b4:ae:a2:9c:64:
77:e8:49:3c:0a:4e:c2:c4:54:33:9c:50:f0:0c:eb:
de:15:c3:54:5e:88:30:9b:6d:28:51:cf:55:18:cc:
4c:84:67:a4:5c:e7:fa:f3:e2:ae:38:f8:91:21:6d:
61:94:88:87:f2:e7:e7:68:43:09:37:2d:1c:d3:b1:
b2:ee:58:8c:03:b4:59:c0:ff:e3:cc:a8:e7:a8:6c:
23:dd:83:03:78:be:ac:56:85:8d:cc:fc:f2:ee:59:
c5:88:6e:78:79:1e:9a:41:b9:7d:26:57:88:48:e6:
f0:cf:1d:79:28:82:74:38:d6:09:66:c5:13:59:3f:
98:e0:0e:e5:3f:77:05:08:f1:d1:ca:8f:28:f7:34:
13:ea:6c:13:d6:07:af:09:6e:eb:e1:aa:a8:42:a3:
1e:31:87:e2:44:76:6d:c4:b6:63:75:86:45:03:c1:
05:34:21:5c:ea:9a:fa:86:7e:ec:0f:a3:bf:9c:53:
0f:0b:24:35:ac:05:ba:01:96:62:53:5d:c5:4e:57:
5c:52:61:29:63:28:d2:44:b0:77:d6:ee:92:bf:f6:
38:ae:b6:fd:00:87:a7:af:fd:45:1b:29:fb:9d:37:
34:f4:5a:0b:53:32:d4:af:92:6e:c0:c2:c4:81:0b:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:42:0A:D1:B2:89:9C:CA:F6:E6:B2:C0:70:9C:96:11:DD:58:93:6C
X509v3 Authority Key Identifier:
keyid:5A:15:68:19:9D:29:23:9A:27:45:AD:43:B6:96:FB:DC:2E:06:70:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:93:ee:8f:b9:d9:dd:9a:01:60:1e:4c:f6:86:0b:ca:a9:f5:
d3:47:14:6e:fb:71:fc:27:99:64:84:fb:d3:b8:c8:f0:67:8d:
6f:97:b3:d1:6d:39:1a:1e:6b:6a:a8:19:eb:94:bd:0f:f7:1c:
1d:e3:04:40:c9:a6:50:82:21:a0:fb:51:ee:fa:c1:5a:bd:44:
25:42:e4:50:e5:30:f2:a4:40:80:18:b7:56:4a:03:cb:41:5d:
6f:88:d6:96:13:7e:c6:70:ae:1b:1a:26:5d:35:6e:ae:ea:81:
fb:81:3d:a5:61:8c:84:cb:9f:52:db:f1:fc:9b:02:78:ee:5e:
1a:71:af:7e:ec:1b:bd:52:0e:7f:40:cd:0c:69:8f:ee:d3:4f:
90:db:67:a1:2b:84:f6:e8:c0:3c:db:93:a7:da:a1:e7:cc:b1:
db:11:13:da:e3:86:79:49:06:59:aa:b3:09:b7:8d:c0:05:82:
60:64:ae:24:79:a9:06:b6:96:b1:b0:dc:d5:1e:8a:d2:74:ed:
10:41:12:87:9b:1d:c1:bb:41:ff:04:a2:54:57:8b:39:de:30:
6f:16:ae:b9:fb:f9:26:fc:2a:dc:2e:f5:cb:3f:23:f6:fc:73:
5e:54:4b:87:3d:0b:9b:f0:66:c5:3b:c0:62:d9:1a:37:a0:98:
c9:2a:6f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:39 2025 by rpki-client