Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
File: wHR_vibJzddiit_ttXt4vo3nXik.mft (raw, json)
Hash identifier: VpfmffqhfsNCSGKYOUYMZRaJuBQvdB17EW/8cbvOIko=
Subject key identifier: 52:1F:48:BD:2A:87:D1:77:C2:44:6C:1D:43:81:92:CD:64:20:D2:DF
Authority key identifier: C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
Certificate issuer: /CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Certificate serial: 0196C3B94147E8DA1B9FF5BFBC5CB26E0B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 09:00:20 +0000
Manifest this update: Mon 12 May 2025 09:00:20 +0000
Manifest next update: Tue 13 May 2025 09:00:20 +0000
Files and hashes: 1: 2nyycqBL-rAzEQltLGtAfMtGQLM.roa (hash: MBIXdHvXsLvgHf885v+F1wgnsNoLNTld5Y4auopwyqw=)
2: 3bQBeV9f56eObQzYUYLO4GAQ8UY.roa (hash: HtmwpWIMcqcjPv1ZUB2JqlVZpv8JVThGiHf7qzzoBm0=)
3: ChVY_yTwqfm0VnhsyIrbJGaer18.roa (hash: R+XyXjI6742+O3LetUXz9z0t0N+RLDWsKAzEnh76DmE=)
4: QeIXKKypRp3pUKZsAXhEwiToOAw.roa (hash: 4uaN2IkF9UjmjdQnaC+MinX3CAS8fZa9J2o5ym9jh2Y=)
5: Rm5aIxDvXkvVkBBg3XIjNRMEevw.roa (hash: 91lRhrOUw2PQdAXyAGgZms7aAgC+waBbAPHPOWg5hPI=)
6: Sr0IV-rO-zHkL4o3XLlXoB58rKk.roa (hash: suoX77hNmWsUeC3U2K5nrNVPL2RuFHc2TD/yXsw9YqQ=)
7: ePEq_iR8SghIv87pTKid6AVEFNA.roa (hash: JKXKaBC2B7MQ6+tg8cpfMIILPOh/OoQhr9iR79J36DU=)
8: wHR_vibJzddiit_ttXt4vo3nXik.crl (hash: VNs4qd1e722eCf1ZchMzNsUhBuOw+7PvswUNcKOT280=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:41:47:e8:da:1b:9f:f5:bf:bc:5c:b2:6e:0b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Validity
Not Before: May 12 09:00:20 2025 GMT
Not After : May 13 09:00:20 2025 GMT
Subject: CN=521f48bd2a87d177c2446c1d438192cd6420d2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:ec:ec:4b:fb:1d:cc:3c:52:5c:45:3a:35:
fb:b4:96:bd:91:75:cc:d1:df:e5:d9:41:4a:ee:9b:
64:b2:72:71:09:1e:1a:8f:95:6f:a2:a1:1b:4a:1e:
c2:55:3a:25:8e:2f:16:86:d3:9a:c5:96:45:c1:89:
70:4f:c8:9b:7d:79:52:fb:0a:5a:42:e0:dc:eb:3f:
85:ea:44:7d:3c:ab:8f:78:d3:ae:a7:ad:96:8a:52:
b5:44:65:c3:80:81:9d:1e:cc:88:c8:32:03:8c:5b:
5c:f3:cd:a6:b4:f0:b4:5c:eb:ad:12:65:b9:98:5b:
34:2b:65:2c:17:22:8d:90:37:e2:ad:93:41:f2:03:
1d:e6:ac:17:cb:7d:d5:3c:41:d4:3c:fc:5b:72:c2:
d7:ec:e7:3e:3c:fe:b5:08:40:2c:01:8c:90:de:03:
92:f2:1c:32:db:70:0a:9a:24:af:df:c1:06:ff:67:
13:0a:6f:df:11:a6:65:ff:fe:b6:2b:ee:8b:49:80:
36:74:28:64:b6:b5:a0:68:c5:07:b6:f6:d0:4f:70:
5b:11:b3:19:44:9d:55:0d:b4:f0:7a:3f:71:61:28:
ff:ed:0d:b0:13:e8:7d:e3:a4:ba:04:6c:c3:62:42:
1d:2b:ba:6a:70:a4:22:a7:b8:fe:e1:99:aa:74:f9:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1F:48:BD:2A:87:D1:77:C2:44:6C:1D:43:81:92:CD:64:20:D2:DF
X509v3 Authority Key Identifier:
keyid:C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2a:59:06:03:c0:87:56:f1:fc:0a:c9:45:dd:9b:08:f8:23:
e1:79:58:a6:39:08:4b:e0:b0:6b:c3:60:70:8f:68:f3:4f:c6:
74:94:f1:19:90:22:89:9b:6d:3d:8e:dc:6a:7f:c7:af:fc:03:
a2:83:fe:b7:ef:a3:4d:22:3b:c7:15:81:8b:a9:6e:07:85:a5:
ba:5a:7c:50:69:38:e6:c8:de:f3:8f:d6:0f:9b:fb:00:c0:4f:
75:41:18:1c:e0:44:b8:58:f6:c5:ce:d2:10:2c:05:6b:74:5e:
a0:8a:1b:49:9c:13:1b:ef:5c:c3:7d:9e:d3:49:9b:46:f8:f4:
4c:ec:01:75:8e:53:4e:b7:29:52:5f:7f:90:97:84:5c:32:78:
3a:08:1d:de:d0:76:39:ba:57:ec:9f:c8:7a:2f:5c:35:37:ee:
fd:24:16:d9:41:01:4f:fd:82:9d:6b:65:74:91:09:44:55:35:
31:06:35:87:4c:16:93:a8:d4:e1:ee:72:48:2f:d2:70:ac:6b:
da:33:c8:47:6b:e1:51:0a:5d:38:c7:6a:d4:ca:27:66:58:5a:
0e:50:ac:67:97:ea:b6:33:4e:7b:ef:f4:64:f7:4e:65:08:be:
f9:f8:5e:81:2f:e3:0e:26:a5:21:8f:9f:5a:5c:1c:1e:31:46:
06:5d:5a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:51:33 2025 by rpki-client