Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
File: WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft (raw, json)
Hash identifier: qpEeVSljg2YJujNvh8ZwI6DjuFcviUFPUGdNiaSb7ew=
Subject key identifier: E4:B3:F7:D0:04:79:C6:68:A7:BC:6E:52:6C:42:E5:D2:EE:1E:3F:13
Authority key identifier: 5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
Certificate issuer: /CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Certificate serial: 01969ED11231FEC411028DE0A84C29353DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
Manifest number: 1181
Signing time: Mon 05 May 2025 05:00:23 +0000
Manifest this update: Mon 05 May 2025 05:00:23 +0000
Manifest next update: Tue 06 May 2025 05:00:23 +0000
Files and hashes: 1: Oh-cQnXBc3lf8_SsKrCv90dr1do.roa (hash: /clQdBNjFo+DPpzGiAtMduHa7oP5zjEdGJ0IRP2uvgo=)
2: WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl (hash: 7u+N2xXc6Y0A0ipmA/iBxBwP62T7VcFUJn5LHB2mlNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:12:31:fe:c4:11:02:8d:e0:a8:4c:29:35:3d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Validity
Not Before: May 5 05:00:23 2025 GMT
Not After : May 6 05:00:23 2025 GMT
Subject: CN=e4b3f7d00479c668a7bc6e526c42e5d2ee1e3f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:5a:80:15:43:c1:e1:e1:03:3d:40:0e:88:
ca:d8:c5:66:74:fd:e9:c7:3b:00:34:ae:47:0c:3a:
1a:a4:42:7a:cb:69:49:df:3c:85:10:e7:2e:6d:f5:
93:40:5a:09:19:ce:3d:96:37:98:f0:74:be:03:80:
97:7d:23:0a:02:11:9a:79:e6:4e:7e:23:e0:33:f1:
8c:02:a3:8a:dd:55:dd:e4:2f:ee:1e:cd:2d:60:9a:
6a:bd:95:54:75:46:82:50:58:fe:fe:2a:8c:30:49:
aa:a5:14:84:c1:30:dd:32:54:41:17:82:cd:36:89:
af:e7:13:18:9e:07:15:79:c7:cb:85:80:a2:30:fc:
38:79:14:0f:82:f0:11:23:bc:24:49:07:ed:0a:38:
c5:9d:3d:cf:13:05:cc:af:f3:2a:3a:05:bf:e2:24:
38:b8:3a:68:c8:62:12:80:10:a7:66:2c:7a:b0:6a:
82:22:fa:a7:d9:b8:09:70:43:da:b6:a4:60:bd:5b:
fb:0b:a4:b6:43:a0:01:89:7a:60:e0:26:ca:45:8d:
56:4d:76:6d:eb:5c:e7:69:f6:9f:b2:b7:1e:60:e8:
a4:05:a6:37:3e:bc:12:c7:87:ac:ac:de:ea:09:61:
f1:57:0b:2e:41:30:c1:ef:41:f7:aa:f0:e3:d4:99:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B3:F7:D0:04:79:C6:68:A7:BC:6E:52:6C:42:E5:D2:EE:1E:3F:13
X509v3 Authority Key Identifier:
keyid:5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:78:5a:08:3d:35:68:71:ee:21:5f:1c:b4:40:c8:3f:07:5d:
18:0e:11:22:d6:c7:ce:91:7c:e3:9b:b0:c6:3f:83:04:81:ff:
64:b1:06:c5:e7:97:f3:24:42:86:47:e3:8d:c9:82:c2:0e:ed:
bc:7d:b8:58:ff:3b:d8:d5:e6:ff:86:99:fd:4e:e9:64:98:7f:
1a:a6:2c:6a:6f:f1:b5:63:79:25:ba:85:81:74:83:22:0b:96:
89:bd:6e:dc:eb:b2:6c:01:71:3f:a9:6c:13:32:b9:29:b1:e6:
9c:28:45:a4:e6:3d:f0:43:7a:bc:fb:fc:74:06:d6:0d:21:02:
4a:4f:af:89:da:09:34:1c:b6:db:e3:9c:69:86:cc:12:16:96:
b3:08:15:4a:e6:f1:7d:47:81:86:5d:e6:ec:45:20:b9:b9:ee:
f6:31:ee:33:33:55:87:94:98:fe:ac:b7:7f:2a:82:88:19:cb:
14:d1:27:b9:ff:7c:f4:57:81:e2:51:c2:3a:25:9c:b3:1d:07:
44:43:d7:99:91:c0:0f:6e:c9:9c:8b:cf:49:75:99:49:97:3a:
41:f9:b7:69:7c:ef:22:77:f7:f2:37:e7:9e:6f:e7:e7:7b:3e:
8a:fb:76:b8:20:36:23:9a:e0:ad:28:fc:ce:83:6c:35:1e:86:
18:ed:83:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZae0RIx/sQRAo3gqEwpNT3VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTU1ZTMyYzRhOWNkYTFhODFiZDljNzM3MGRjMzRhYjAw
NjUzYTAwHhcNMjUwNTA1MDUwMDIzWhcNMjUwNTA2MDUwMDIzWjAzMTEwLwYDVQQD
EyhlNGIzZjdkMDA0NzljNjY4YTdiYzZlNTI2YzQyZTVkMmVlMWUzZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshhagBVDweHhAz1ADojK2MVmdP3p
xzsANK5HDDoapEJ6y2lJ3zyFEOcubfWTQFoJGc49ljeY8HS+A4CXfSMKAhGaeeZO
fiPgM/GMAqOK3VXd5C/uHs0tYJpqvZVUdUaCUFj+/iqMMEmqpRSEwTDdMlRBF4LN
Nomv5xMYngcVecfLhYCiMPw4eRQPgvARI7wkSQftCjjFnT3PEwXMr/MqOgW/4iQ4
uDpoyGISgBCnZix6sGqCIvqn2bgJcEPatqRgvVv7C6S2Q6ABiXpg4CbKRY1WTXZt
61znafafsrceYOikBaY3PrwSx4esrN7qCWHxVwsuQTDB70H3qvDj1JnhNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSz99AEecZop7xuUmxC5dLuHj8TMB8GA1UdIwQY
MBaAFFoVXjLEqc2hqBvZxzcNw0qwBlOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MmJjZGEtZjk3ZS00NzY1LWFhOTUt
Y2QyZjU3NzFkYTk4LzEvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81MmJjZGEtZjk3ZS00NzY1LWFhOTUtY2QyZjU3NzFkYTk4
LzEvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3haCD01
aHHuIV8ctEDIPwddGA4RItbHzpF845uwxj+DBIH/ZLEGxeeX8yRChkfjjcmCwg7t
vH24WP872NXm/4aZ/U7pZJh/GqYsam/xtWN5JbqFgXSDIguWib1u3OuybAFxP6ls
EzK5KbHmnChFpOY98EN6vPv8dAbWDSECSk+vidoJNBy22+OcaYbMEhaWswgVSubx
fUeBhl3m7EUgubnu9jHuMzNVh5SY/qy3fyqCiBnLFNEnuf989FeB4lHCOiWcsx0H
REPXmZHAD27JnIvPSXWZSZc6Qfm3aXzvInf38jfnnm/n53s+ivt2uCA2I5rgrSj8
zoNsNR6GGO2D7A==
-----END CERTIFICATE-----
Generated at Mon May 5 09:45:40 2025 by rpki-client