
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
File: wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json)
Hash identifier: dNjb9KBG2LbJEHAn/5qUNyXi9WN6Fl9ORihK7b4Qd0M=
Subject key identifier: 41:53:98:CD:FB:B2:93:6D:CB:6C:99:1F:95:76:59:19:FD:46:E9:74
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial: 0196586FEAA964B867C7225F3326027E6C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
Manifest number: 081B
Signing time: Mon 21 Apr 2025 13:00:51 +0000
Manifest this update: Mon 21 Apr 2025 13:00:51 +0000
Manifest next update: Tue 22 Apr 2025 13:00:51 +0000
Files and hashes: 1: lMUiy0iCZc25BIvrjbAT5rY_gaE.roa (hash: os2q3M1axX4RL5z3SNixB1SYiEywK/95oeCFkIddddI=)
2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: LwrHzzs7ybtYvT288vUXUxsorjaC9tm3YN7df1HnDHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:ea:a9:64:b8:67:c7:22:5f:33:26:02:7e:6c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
Validity
Not Before: Apr 21 13:00:51 2025 GMT
Not After : Apr 22 13:00:51 2025 GMT
Subject: CN=415398cdfbb2936dcb6c991f95765919fd46e974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:f9:0e:30:fb:cb:3d:50:9a:1f:55:f0:f7:
b5:97:78:7f:1e:42:44:10:6b:3a:6e:79:f0:25:8a:
79:63:b3:3a:2a:e8:46:2f:12:59:0a:5a:cc:0c:ab:
25:b4:e6:34:ed:74:42:2e:94:cd:1d:cd:f8:58:72:
ad:91:c1:a4:8c:bd:e2:76:70:01:5a:43:65:95:b0:
a8:41:ef:90:dd:11:88:c5:7d:1b:77:59:2a:58:d2:
ef:00:4c:36:8b:56:5b:f0:c6:68:86:3b:9e:ac:94:
5e:b4:8e:90:5f:59:99:63:c7:a2:77:dc:ac:44:26:
53:f8:2f:72:98:a0:e6:de:36:cb:28:a0:4f:05:35:
47:c4:0c:ff:03:6f:c2:7f:d4:6d:55:a0:12:27:ca:
87:3b:ab:78:44:ef:41:6e:15:6d:61:9a:dd:96:d7:
98:5d:f5:8d:13:92:25:14:a9:4a:75:54:9f:15:50:
4d:95:ab:60:96:a4:5c:fd:82:6f:fc:0e:0b:da:b5:
d3:19:82:5f:70:06:6f:73:98:e3:9a:81:59:a8:f9:
a3:90:30:8e:4e:e4:3c:18:b2:50:09:79:ed:89:89:
0d:11:d8:ee:a6:99:e9:cc:b4:38:53:8d:ad:5d:e5:
84:13:20:33:8d:be:ab:76:7c:72:d5:c8:a6:f5:55:
2c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:53:98:CD:FB:B2:93:6D:CB:6C:99:1F:95:76:59:19:FD:46:E9:74
X509v3 Authority Key Identifier:
keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ab:59:cf:60:d3:e3:f6:ae:d5:57:29:62:cd:83:ad:df:9b:
36:0d:ae:09:cb:7f:31:43:26:40:d3:c1:38:46:8c:38:08:42:
60:7d:e4:c3:37:7e:92:5e:ae:15:0e:df:dd:79:a8:9a:0c:87:
ae:64:d7:94:aa:98:66:3b:9d:25:14:da:3b:c8:0d:f9:b9:9b:
ef:e0:e6:ea:10:b5:28:7c:3d:97:47:26:84:9f:09:b7:f2:b1:
71:7e:f9:e7:9c:69:d6:42:6d:3c:5c:62:aa:58:f0:40:c3:c0:
c0:b7:62:01:0b:6f:9c:ca:6d:37:0a:f6:d7:7b:4f:0c:50:f7:
78:42:d9:4f:ec:15:cf:54:06:e2:ac:b5:fb:bc:00:d2:f9:9a:
c3:39:86:d0:be:8e:6c:b7:2a:cf:73:ec:68:10:e8:1d:4b:cd:
11:07:18:2a:32:10:ed:1f:f0:c3:f9:37:22:77:08:40:34:5e:
80:e7:5a:81:d7:89:b1:76:9f:4e:68:74:73:bc:44:e1:03:54:
3e:e2:8f:c0:6b:22:08:68:01:9e:a1:ed:05:e8:68:3b:fe:af:
47:1c:0b:b1:7c:ed:e2:e5:b2:2e:dd:a7:38:65:a8:06:81:c3:
70:72:5d:03:d0:c8:45:18:97:14:e1:73:53:01:f6:0d:ca:91:
11:f3:72:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:42:42 2025 by rpki-client