Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier: Z8+9J1x0xfqjHnhqDm2fNj65keXYhpkmMbqN2FsxdhM=
Subject key identifier: EE:33:54:2E:CA:73:8B:84:FA:11:00:C2:AE:56:6D:5F:45:F3:BF:7A
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 0196B823955DAD75D4F443D5D5AF7A3C3978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number: 153A
Signing time: Sat 10 May 2025 03:01:01 +0000
Manifest this update: Sat 10 May 2025 03:01:01 +0000
Manifest next update: Sun 11 May 2025 03:01:01 +0000
Files and hashes: 1: 9mv5BJvEaAqWoj8vH5r1xx_pFgo.roa (hash: IAS+DSX7WNtHYk4j+RDYn0qWAwRUWPxJ+A4Wt+jMAHQ=)
2: Jue_aw4zHx1sp-mJmowMMM2tGGA.roa (hash: 0Yitoumoz1xxoSRol/a1PWMjCmZIGDa9duJ/3vMhBiw=)
3: MpJGW61wsAY2na2GoCEJeo5HvXk.roa (hash: vRlmBz0iiqrk+J7PazbAwX0O6F7JU+iRJTTbiLqVjxU=)
4: PNxKt9EExJcdff8t4PlXHS3Zp8E.roa (hash: l/sm5m0RtWP1FamD6nvtIs4Wmty8En19TqcjOBknuMY=)
5: SNph92J-Xcf8IveNNNu0MkGJVWI.roa (hash: VJRwO2aW7uM1HccqCjhKGDaLckqIJFkhu3+W4SavOHw=)
6: U8yyp-JTHsc4PzNj0KNOVG9KECs.roa (hash: XL8cza6Y6dTsPDS6Eb2/zXU0zrVRVcGlEc/rkfzZaj0=)
7: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: SUrhtSvwbwKAuinfjKTRPkDPvhO+eh1ycQu1SzXtvO8=)
8: ve4iz1Nb8DcHS9BJwN65K0mM0-E.roa (hash: KrskrDJ9DRb/ge1dc1ifB8Oiho4jbO0ADnVg8CJqCCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:95:5d:ad:75:d4:f4:43:d5:d5:af:7a:3c:39:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: May 10 03:01:01 2025 GMT
Not After : May 11 03:01:01 2025 GMT
Subject: CN=ee33542eca738b84fa1100c2ae566d5f45f3bf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:7e:8f:d3:a2:d7:38:3b:0d:72:04:be:b5:
f3:55:0c:74:b9:97:7c:7a:53:8f:1f:83:c8:06:d9:
b1:4e:12:81:8c:c4:ca:f6:fc:c3:60:1e:b8:32:95:
31:70:bf:5e:99:17:97:ad:6e:64:ee:3a:bc:a9:80:
71:41:d4:1f:00:8c:bc:33:e9:7b:d6:c6:e4:94:20:
09:ba:86:23:d2:3d:c5:b7:ff:78:7a:8b:0d:7f:04:
1d:ea:c1:d7:dd:d1:ab:11:84:33:e5:cf:79:3e:93:
4e:c6:e9:6a:67:69:50:49:a1:03:47:2b:36:07:e4:
b4:ec:98:b3:a8:3d:ee:e3:f6:c2:bf:07:6b:4c:84:
b5:52:b3:be:ca:2d:8a:1f:52:9a:02:7a:af:e8:bf:
a2:ca:74:87:72:18:d1:88:67:fd:ee:ff:77:dc:15:
9b:3f:2b:12:88:13:39:cb:40:95:f0:cd:18:20:77:
68:aa:a4:6f:f1:78:fb:6c:e0:a5:0c:61:94:33:ce:
16:26:55:c6:a9:41:ac:04:5f:be:15:f9:13:57:8b:
87:72:c1:f9:5e:b3:34:27:d6:23:29:3e:69:c8:56:
84:b1:4f:9d:16:67:ae:a9:ae:ff:4f:ec:ff:f6:c8:
03:e7:ee:98:73:0b:2d:f5:4f:ba:6c:e4:1f:31:02:
b9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:33:54:2E:CA:73:8B:84:FA:11:00:C2:AE:56:6D:5F:45:F3:BF:7A
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e2:25:05:0c:74:7e:cd:4e:e6:1b:96:e5:57:5f:66:2a:c0:
15:ec:fd:cb:7c:bd:c7:ea:66:03:fb:b3:d6:8b:b8:01:80:a4:
78:02:15:09:e2:49:3d:6b:9e:fd:32:5b:78:d4:38:42:18:4f:
09:7c:b7:bf:6a:1c:42:5b:d2:4e:d6:70:a1:de:20:85:61:c6:
bc:85:ec:2c:8c:b7:a0:61:e5:51:c6:ca:1f:22:e3:c2:1a:bf:
98:32:d7:8e:c7:3d:50:f9:7b:15:71:f9:25:d3:32:1e:22:a0:
85:57:5b:19:a9:1b:f9:0e:36:d6:ea:d4:8d:63:81:fb:25:04:
05:1d:ca:d1:6a:fa:16:c8:a0:d7:da:c1:91:12:e1:2f:d4:52:
cc:26:63:3e:0e:a7:3c:fc:7b:6b:b6:7d:c9:e9:bb:a0:42:31:
ac:ca:5a:57:49:42:7b:77:51:9f:74:8d:56:14:67:14:a6:39:
5a:5a:3b:56:40:7f:91:55:cb:04:69:54:d5:24:6f:1a:2f:a3:
61:81:33:17:a5:53:a7:b3:50:e0:b3:8b:c6:0c:9b:67:8b:c9:
d2:78:82:6f:76:5a:39:b8:f8:fb:28:04:ed:37:2e:ef:fd:74:
b4:03:71:fa:9a:cf:5e:66:f3:61:e0:5a:1f:c5:c1:18:fb:a1:
ff:3a:d2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:33:39 2025 by rpki-client