Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
File: wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json)
Hash identifier: RbqiAXTkYxmlW2s4703gBEZihAUBTHUWy9KLNS+OZ5Q=
Subject key identifier: CA:32:A9:EA:42:6E:1A:F9:0E:34:FC:F9:7E:06:A5:BB:DB:F8:64:E6
Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
Certificate issuer: /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Certificate serial: 0196A164B53D212B4F2ACBF0CEF8D6F4E86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
Manifest number: 0DF9
Signing time: Mon 05 May 2025 17:00:53 +0000
Manifest this update: Mon 05 May 2025 17:00:53 +0000
Manifest next update: Tue 06 May 2025 17:00:53 +0000
Files and hashes: 1: T_9TOa_stF5E9eIWRjxCGlAnn6k.roa (hash: 4V/y6Lec10YacV5wmtQBGvh+cufcrshrFw6PyKn/laI=)
2: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: K5W3FU8YgChcJVzMz6sQZCRY1hdY/tdCtZZD3lyVweE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:b5:3d:21:2b:4f:2a:cb:f0:ce:f8:d6:f4:e8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Validity
Not Before: May 5 17:00:53 2025 GMT
Not After : May 6 17:00:53 2025 GMT
Subject: CN=ca32a9ea426e1af90e34fcf97e06a5bbdbf864e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:37:b6:0f:ba:4b:51:0f:11:6a:16:60:9b:7c:
91:0c:51:13:a1:27:a8:39:8d:31:58:13:7b:9c:44:
2b:41:4e:16:a1:7f:1c:eb:c6:20:3e:95:26:ef:8e:
06:a2:56:d4:ef:bc:83:be:b6:8c:55:b8:11:8e:60:
03:6b:38:1f:31:d8:c1:c9:e2:40:dd:3d:6a:f3:bb:
a7:c2:a7:36:a1:03:ae:43:6e:86:5f:1f:c7:1b:1a:
37:b7:42:41:55:0e:ad:53:70:4e:78:38:58:d4:17:
e6:b3:eb:bf:e4:73:82:5c:ed:05:5d:85:39:b1:0d:
d5:e2:f0:5b:12:d3:72:ae:88:6e:70:55:5e:3c:9e:
6a:cb:44:70:88:3d:b9:ec:bd:db:7a:11:a8:98:b5:
38:d2:15:ef:90:fe:6c:f7:ca:a1:e6:25:3b:ea:3d:
3c:02:f4:c5:c9:98:67:bf:b4:23:53:35:e9:12:f5:
f1:bb:a1:50:a7:5b:d0:5c:a7:e6:26:27:d9:67:b8:
d2:77:09:6b:03:88:5a:b1:a8:7e:09:91:b0:70:53:
69:95:c5:85:69:d2:76:2d:4e:9e:79:70:51:6d:df:
55:0e:a5:ce:28:5a:a1:3f:6c:6b:a9:70:17:90:96:
05:ba:3a:49:da:e7:b4:aa:c1:fe:51:c0:65:3b:4e:
c1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:32:A9:EA:42:6E:1A:F9:0E:34:FC:F9:7E:06:A5:BB:DB:F8:64:E6
X509v3 Authority Key Identifier:
keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9e:b0:8b:11:de:0f:74:bd:de:1f:55:29:bd:09:7a:30:16:
a9:23:f0:46:50:6a:e3:d5:2b:c9:0b:4a:73:6d:49:30:3b:5b:
d0:26:d0:56:74:c8:ef:03:8d:d6:cb:17:ca:b3:48:8a:81:6a:
e8:80:e0:5f:10:7c:48:62:4f:27:c1:f7:47:e1:6c:f4:02:a9:
44:82:38:cf:b0:f5:97:93:ee:f3:55:1e:a5:a3:2f:39:fc:6b:
0e:48:53:bd:4f:35:43:83:23:f6:1c:0a:4a:08:4d:ed:12:30:
05:44:b2:fd:23:e6:2c:ec:58:ab:c2:8a:01:05:b8:d7:d3:26:
9a:48:3c:65:95:26:87:19:38:00:89:d0:e5:f8:4a:77:45:14:
1a:f2:b9:19:87:1f:1a:a5:84:ba:d7:8a:d2:13:d5:0d:a3:7a:
43:c4:93:b2:18:c7:6d:ba:b3:28:c8:77:e6:ba:87:dc:80:a4:
a6:b0:4a:a8:a3:62:60:1b:c0:8d:33:72:99:3e:d8:9e:2a:76:
c8:05:e8:ba:7d:ce:3d:98:d2:5f:e2:11:af:25:8d:5f:41:3e:
f6:2d:44:97:d4:bd:6d:5b:20:82:13:10:9e:29:2a:a8:43:26:
1c:43:18:1f:90:52:25:ca:6f:42:e3:45:38:2b:6b:3c:2a:22:
58:40:eb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:11:32 2025 by rpki-client