Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
File: wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json)
Hash identifier: 1YknvXra6YXzbdASgXZ5DhYUKS0UolIcyuxqarzx/5A=
Subject key identifier: B8:8C:26:BB:06:84:60:1D:3B:C5:95:AF:FB:05:06:79:0B:7E:CC:45
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial: 0196C2A6E5262E665213462557E28AFA8B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
Manifest number: 0852
Signing time: Mon 12 May 2025 04:00:39 +0000
Manifest this update: Mon 12 May 2025 04:00:39 +0000
Manifest next update: Tue 13 May 2025 04:00:39 +0000
Files and hashes: 1: lMUiy0iCZc25BIvrjbAT5rY_gaE.roa (hash: os2q3M1axX4RL5z3SNixB1SYiEywK/95oeCFkIddddI=)
2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: l18WHrFUWIbvp9o9IxL5HHbnIwuQK59+rYy5h97gb/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:e5:26:2e:66:52:13:46:25:57:e2:8a:fa:8b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
Validity
Not Before: May 12 04:00:39 2025 GMT
Not After : May 13 04:00:39 2025 GMT
Subject: CN=b88c26bb0684601d3bc595affb0506790b7ecc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0a:71:c7:c0:b3:9e:bb:1f:2c:28:8e:ac:58:
8b:07:83:80:b4:af:40:0c:7c:ba:e6:ea:6e:a0:d8:
42:a9:0f:a9:b9:be:f9:32:83:aa:f2:7b:06:59:27:
e4:7d:3b:83:0a:7d:40:53:d8:be:d0:8c:be:eb:9c:
53:d0:75:c6:8d:1b:60:4c:fb:70:c2:df:ce:34:aa:
19:ea:88:17:98:2d:12:21:44:e7:a2:ed:5c:19:cf:
0d:a7:a6:0d:5d:ba:50:e1:2f:a9:52:e0:47:d4:99:
eb:c0:98:87:34:4b:33:f8:17:1f:e3:d7:a1:e4:5a:
92:74:ea:ee:7c:d5:81:6b:5c:c4:79:c1:1b:0d:e3:
93:1c:10:71:8c:29:c8:b5:da:c9:ea:15:69:54:ea:
b4:53:16:3e:30:97:39:58:97:62:de:9c:59:bf:c6:
eb:16:4a:dd:ef:52:38:6e:e7:c4:2f:ed:08:c0:66:
cd:be:ae:38:0b:76:45:db:c2:dc:51:d5:3b:61:90:
de:c0:1f:eb:ba:3c:f9:ba:0b:e4:a9:fa:21:3a:6f:
1d:1b:80:51:d2:3d:8f:1b:15:48:c8:cf:ef:5a:e9:
3d:80:0d:67:35:44:61:7b:7d:73:f6:e7:4e:4a:62:
52:0d:12:b8:92:91:11:17:c9:99:c8:2c:fd:30:aa:
6b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8C:26:BB:06:84:60:1D:3B:C5:95:AF:FB:05:06:79:0B:7E:CC:45
X509v3 Authority Key Identifier:
keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7e:56:18:6a:ae:6d:4d:c7:30:51:ec:8f:07:c0:89:e6:e1:
ec:14:96:bc:e0:17:c7:45:47:bd:0a:39:62:a5:2b:9b:45:9a:
9b:3f:5f:9d:a0:88:21:77:0f:ec:0f:7e:ea:56:37:fc:6f:04:
03:36:e3:77:3b:3d:65:38:05:71:de:21:4e:f0:ef:2c:15:ee:
5e:f9:e6:a3:6a:83:42:23:98:28:64:1f:3b:24:31:52:5e:5f:
ac:84:51:23:ac:62:ce:bf:3f:9e:b1:2a:94:a2:f1:a1:41:93:
51:bb:6a:25:5a:45:43:ef:f7:48:01:04:4f:a9:86:b2:f0:3d:
3d:e6:eb:f7:ff:46:99:96:4b:c3:82:52:69:51:90:60:66:1b:
5c:de:d0:d8:bc:bb:03:27:34:58:ae:d7:6e:50:fc:61:72:c3:
de:87:9b:4f:ca:d6:83:28:9f:6d:dc:64:19:6a:12:3f:b1:04:
06:d7:cc:59:90:82:cc:11:a5:60:de:9b:0b:20:47:cc:c5:85:
d4:57:75:07:4a:e9:45:21:b6:2e:f8:0f:b5:41:8e:60:5c:b7:
44:50:30:b5:44:c7:20:d6:d7:7d:9f:75:a1:00:03:19:86:24:
a4:ba:3a:64:95:25:2d:56:03:15:d1:df:31:9a:bd:59:8b:69:
ee:72:84:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:51:07 2025 by rpki-client