Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
File: wHR_vibJzddiit_ttXt4vo3nXik.mft (raw, json)
Hash identifier: Ylaucy8lEUDLUG+0Bixgj/xN2BZd+h1t5vxYPIhcfmE=
Subject key identifier: 4C:96:54:97:39:4C:70:EC:8F:AB:79:CD:6A:AB:B7:8A:C4:D6:80:6F
Authority key identifier: C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
Certificate issuer: /CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Certificate serial: 01962D18FEE5BDDC9CD5411841882E2F0622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
Manifest number: 14EB
Signing time: Sun 13 Apr 2025 03:02:14 +0000
Manifest this update: Sun 13 Apr 2025 03:02:14 +0000
Manifest next update: Mon 14 Apr 2025 03:02:14 +0000
Files and hashes: 1: 2nyycqBL-rAzEQltLGtAfMtGQLM.roa (hash: MBIXdHvXsLvgHf885v+F1wgnsNoLNTld5Y4auopwyqw=)
2: 3bQBeV9f56eObQzYUYLO4GAQ8UY.roa (hash: HtmwpWIMcqcjPv1ZUB2JqlVZpv8JVThGiHf7qzzoBm0=)
3: ChVY_yTwqfm0VnhsyIrbJGaer18.roa (hash: R+XyXjI6742+O3LetUXz9z0t0N+RLDWsKAzEnh76DmE=)
4: QeIXKKypRp3pUKZsAXhEwiToOAw.roa (hash: 4uaN2IkF9UjmjdQnaC+MinX3CAS8fZa9J2o5ym9jh2Y=)
5: Rm5aIxDvXkvVkBBg3XIjNRMEevw.roa (hash: 91lRhrOUw2PQdAXyAGgZms7aAgC+waBbAPHPOWg5hPI=)
6: Sr0IV-rO-zHkL4o3XLlXoB58rKk.roa (hash: suoX77hNmWsUeC3U2K5nrNVPL2RuFHc2TD/yXsw9YqQ=)
7: ePEq_iR8SghIv87pTKid6AVEFNA.roa (hash: JKXKaBC2B7MQ6+tg8cpfMIILPOh/OoQhr9iR79J36DU=)
8: wHR_vibJzddiit_ttXt4vo3nXik.crl (hash: rNv/FqxWvmoOoJsIqEwCI5nQoWQ87ZAhuDACkSvx7lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:18:fe:e5:bd:dc:9c:d5:41:18:41:88:2e:2f:06:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Validity
Not Before: Apr 13 03:02:14 2025 GMT
Not After : Apr 14 03:02:14 2025 GMT
Subject: CN=4c965497394c70ec8fab79cd6aabb78ac4d6806f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:57:ad:fd:a8:ce:37:62:f7:22:f3:36:39:4e:
07:5b:43:2c:7b:36:e8:53:ea:2a:eb:ab:c6:0d:40:
16:d5:6f:e4:3c:0d:c9:33:4c:16:b2:96:57:5f:8d:
ed:36:f9:38:b6:c2:11:fd:1d:71:0a:26:19:66:d7:
61:cc:8c:25:6c:c1:4a:2f:57:37:e6:f9:aa:ba:14:
64:e2:50:b2:ec:78:f4:31:bb:dc:58:6d:0c:76:1c:
50:eb:1c:22:a8:04:7f:79:36:5d:b9:d7:a8:42:48:
27:9d:b0:99:15:d9:22:6e:22:21:a3:e8:e7:2c:a8:
3a:ed:70:1b:02:59:15:99:74:0a:32:bb:a2:e9:e0:
6c:d6:03:00:96:6b:f9:67:9c:23:e5:20:f3:85:26:
10:fd:92:00:71:b9:4f:01:d0:38:e8:d5:f8:51:72:
0c:28:86:94:38:b8:f5:73:f7:01:a7:c3:56:ab:63:
f1:56:a4:f6:1e:82:00:44:f2:d4:2c:0f:56:1a:ba:
de:7f:1e:af:ae:6f:44:a0:99:52:73:c6:3e:7b:b5:
0d:4d:82:14:67:98:2d:4d:db:25:e5:04:9e:6c:3f:
15:a0:99:79:f0:e0:45:ca:56:49:67:34:73:e3:16:
79:63:85:ba:e1:69:ce:3f:6a:f3:54:b5:21:94:d3:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:96:54:97:39:4C:70:EC:8F:AB:79:CD:6A:AB:B7:8A:C4:D6:80:6F
X509v3 Authority Key Identifier:
keyid:C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2e:9f:80:c9:15:fc:4a:0a:9f:2b:3e:2b:65:b6:5e:42:8a:
be:28:6e:3e:6a:d8:22:35:04:6f:96:6c:5f:71:31:d9:86:a7:
b9:d3:79:a9:5a:58:e5:21:99:42:e8:5d:bd:03:14:51:76:15:
47:1a:8f:17:b1:f8:bf:77:3f:2c:96:9f:7e:f6:e9:6c:f4:93:
4a:41:53:00:24:2a:c4:00:4f:ec:cb:44:e8:bd:0b:67:76:cc:
50:53:89:46:08:bc:09:5d:4b:29:c2:61:c2:1c:bb:a8:67:dd:
1c:fe:a1:c8:96:8b:2c:6d:cc:30:18:b5:91:89:c0:6d:49:a5:
42:45:ad:92:77:8c:68:9a:4e:54:28:37:b3:65:4f:61:98:d3:
a2:9e:bd:8c:09:98:61:03:6c:00:05:15:3c:c2:ca:f1:5a:63:
c8:a6:df:91:cb:0f:68:46:fb:53:e8:e3:50:e4:d2:ac:d7:c2:
9b:9b:fa:0d:08:aa:5d:d2:37:2c:a9:91:bc:4e:a5:6c:64:7f:
23:d5:6c:6a:5c:09:15:fa:3e:a0:33:4b:8e:04:7b:21:78:2b:
d5:56:00:5d:bf:f3:80:7d:13:ea:4c:47:1b:61:e6:04:9c:a0:
87:fb:20:0c:74:f3:c7:eb:c6:8a:0e:f8:09:5a:bf:31:0d:48:
d8:4a:4e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 12:35:32 2025 by rpki-client