Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
File: wh-rdnRH02kRl0z5ux0a6RMfyEU.mft (raw, json)
Hash identifier: HgFUARBAbQ0d9NDIdgo26kdCS+EJ43jPveGhv53PA2k=
Subject key identifier: 40:B2:F7:A6:3D:1A:4D:80:24:51:87:EA:58:6A:B1:B4:EB:06:CD:1B
Authority key identifier: C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
Certificate issuer: /CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Certificate serial: 0196B44653B2A589D652B681BEAE094EFB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
Manifest number: 12BC
Signing time: Fri 09 May 2025 09:00:29 +0000
Manifest this update: Fri 09 May 2025 09:00:29 +0000
Manifest next update: Sat 10 May 2025 09:00:29 +0000
Files and hashes: 1: prGV5vanh8ZP5p3KxsDzpumMYgk.roa (hash: hK6jdh1nUN3ur+bES2D8ND74m74aDMb2GNKxeALcVf8=)
2: wh-rdnRH02kRl0z5ux0a6RMfyEU.crl (hash: qtUTJpDFE6sPWO4THINpIulIwnsq88sq6M7EF9+8KXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:46:53:b2:a5:89:d6:52:b6:81:be:ae:09:4e:fb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Validity
Not Before: May 9 09:00:29 2025 GMT
Not After : May 10 09:00:29 2025 GMT
Subject: CN=40b2f7a63d1a4d80245187ea586ab1b4eb06cd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bd:04:8d:4f:93:77:92:80:3b:3d:01:b9:ee:
21:ff:c9:1f:61:7d:e1:35:7b:d8:c8:0d:76:1f:1a:
de:19:3b:17:1d:ea:af:c5:00:26:4e:a2:1f:7b:0a:
b4:b1:be:75:20:c7:10:04:e2:c6:6b:18:64:9b:cc:
3e:a6:ad:22:a8:23:48:e7:fe:78:b1:7b:5f:cd:fd:
ff:06:49:e3:da:21:e9:ef:dc:7b:24:e2:31:36:55:
95:9c:a0:9f:82:49:18:aa:83:f0:dc:32:69:1e:fd:
cd:b3:10:ec:83:9f:f3:0d:64:9b:6c:6b:51:73:c9:
e6:54:70:28:fa:de:8e:ca:a5:25:c3:2f:89:e3:2e:
6e:97:0a:69:d9:d4:1e:fb:8b:2f:d7:25:f6:69:09:
c8:52:a4:72:79:9f:6b:26:5d:10:40:82:96:d4:15:
28:3d:09:fb:35:a9:3c:d3:3f:36:04:06:93:c7:f2:
00:68:b2:37:02:7c:a4:b6:58:27:b3:1e:1a:ba:c7:
0a:d9:c9:6e:8a:57:69:e4:95:5c:3e:ac:5c:41:09:
b1:e7:07:46:d9:ed:c9:d8:c7:f7:b3:6a:d6:45:bd:
24:31:62:5f:94:c9:90:21:fc:1f:75:05:6d:00:63:
89:8f:0d:b6:b1:4b:0e:33:d7:23:0e:32:4f:4e:e2:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B2:F7:A6:3D:1A:4D:80:24:51:87:EA:58:6A:B1:B4:EB:06:CD:1B
X509v3 Authority Key Identifier:
keyid:C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e0:5a:ef:49:2a:0c:69:a1:00:af:cb:12:83:9c:8d:8e:43:
00:96:b8:bd:ea:04:91:43:f7:a5:63:e1:e8:8b:6d:9d:06:7d:
5d:c6:ff:ca:b3:13:c2:88:04:83:4d:67:79:49:f9:22:e9:8f:
95:a3:11:28:88:53:76:e5:a6:35:1e:8c:da:c1:9e:82:49:31:
9b:14:1e:b2:68:71:26:f8:32:84:d2:8c:7a:8d:0b:85:73:2c:
a8:5b:d8:c5:33:74:61:b7:c6:32:6d:cc:5e:91:ae:12:1e:0e:
de:1f:5b:a2:43:91:00:ad:0d:46:9d:52:97:7c:48:37:30:74:
f3:3c:7b:8a:1f:dc:b7:b1:c9:c7:c9:9d:13:9e:42:3d:1e:1e:
80:1c:bb:ed:f9:b3:3b:27:a2:48:84:47:75:bb:25:f7:1e:87:
9c:fc:3f:4a:d6:f7:3f:5d:7f:a5:ab:ef:81:1a:95:e4:84:5f:
d7:5c:40:77:79:da:ab:de:57:74:8c:06:2c:c7:e8:09:46:8f:
fe:93:d3:e6:1c:64:18:86:68:07:c2:2d:e8:2e:df:72:df:2d:
88:22:31:df:36:b5:d7:96:10:63:ae:ee:3a:76:91:bd:a0:6b:
12:8c:32:f6:e5:6b:2b:3d:40:d6:c1:c5:9b:ad:e4:08:19:2a:
b2:93:e4:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa0RlOypYnWUraBvq4JTvt4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMWZhYjc2NzQ0N2QzNjkxMTk3NGNmOWJiMWQxYWU5MTMx
ZmM4NDUwHhcNMjUwNTA5MDkwMDI5WhcNMjUwNTEwMDkwMDI5WjAzMTEwLwYDVQQD
Eyg0MGIyZjdhNjNkMWE0ZDgwMjQ1MTg3ZWE1ODZhYjFiNGViMDZjZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA070EjU+Td5KAOz0Bue4h/8kfYX3h
NXvYyA12HxreGTsXHeqvxQAmTqIfewq0sb51IMcQBOLGaxhkm8w+pq0iqCNI5/54
sXtfzf3/Bknj2iHp79x7JOIxNlWVnKCfgkkYqoPw3DJpHv3NsxDsg5/zDWSbbGtR
c8nmVHAo+t6OyqUlwy+J4y5ulwpp2dQe+4sv1yX2aQnIUqRyeZ9rJl0QQIKW1BUo
PQn7Nak80z82BAaTx/IAaLI3Anyktlgnsx4auscK2cluildp5JVcPqxcQQmx5wdG
2e3J2Mf3s2rWRb0kMWJflMmQIfwfdQVtAGOJjw22sUsOM9cjDjJPTuIYBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECy96Y9Gk2AJFGH6lhqsbTrBs0bMB8GA1UdIwQY
MBaAFMIfq3Z0R9NpEZdM+bsdGukTH8hFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2gtcmRuUkgwMmtSbDB6NXV4MGE2Uk1meUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jZWI1YTEtMTZjMC00NzhmLWEyY2Yt
NGYyMjVkMDg4NTY2LzEvd2gtcmRuUkgwMmtSbDB6NXV4MGE2Uk1meUVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9jZWI1YTEtMTZjMC00NzhmLWEyY2YtNGYyMjVkMDg4NTY2
LzEvd2gtcmRuUkgwMmtSbDB6NXV4MGE2Uk1meUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOBa70kq
DGmhAK/LEoOcjY5DAJa4veoEkUP3pWPh6IttnQZ9Xcb/yrMTwogEg01neUn5IumP
laMRKIhTduWmNR6M2sGegkkxmxQesmhxJvgyhNKMeo0LhXMsqFvYxTN0YbfGMm3M
XpGuEh4O3h9bokORAK0NRp1Sl3xINzB08zx7ih/ct7HJx8mdE55CPR4egBy77fmz
OyeiSIRHdbsl9x6HnPw/Stb3P11/pavvgRqV5IRf11xAd3naq95XdIwGLMfoCUaP
/pPT5hxkGIZoB8It6C7fct8tiCIx3za115YQY67uOnaRvaBrEowy9uVrKz1A1sHF
m63kCBkqspPkbg==
-----END CERTIFICATE-----
Generated at Fri May 9 12:12:19 2025 by rpki-client