Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
File: WHiPOEJuA2KzTdVnND_oRhpYur4.mft (raw, json)
Hash identifier: cS85qs7ZwYJeNS4HFWaNmHNavKChuzrh5kJwgWS63j4=
Subject key identifier: 63:C4:B2:12:F5:2F:7B:A8:F2:AD:F6:59:00:E0:60:3E:7D:33:38:C6
Authority key identifier: 58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
Certificate issuer: /CN=58788f38426e0362b34dd567343fe8461a58babe
Certificate serial: 01964FDA5EFDA7A5C6DC57A22C46BA287354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
Manifest number: 1240
Signing time: Sat 19 Apr 2025 21:00:33 +0000
Manifest this update: Sat 19 Apr 2025 21:00:33 +0000
Manifest next update: Sun 20 Apr 2025 21:00:33 +0000
Files and hashes: 1: WHiPOEJuA2KzTdVnND_oRhpYur4.crl (hash: otsA1+/w1TjZAFDeWTJkAXT8PWDiO57PbAQnFu/sWb4=)
2: za5pr_RdRVQCTgLd3W2Y-u8ZZIo.roa (hash: HsG6G2W0gO0SbTM6V5Eodd4DUw2y9g6vatwqlX3nzOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:5e:fd:a7:a5:c6:dc:57:a2:2c:46:ba:28:73:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58788f38426e0362b34dd567343fe8461a58babe
Validity
Not Before: Apr 19 21:00:33 2025 GMT
Not After : Apr 20 21:00:33 2025 GMT
Subject: CN=63c4b212f52f7ba8f2adf65900e0603e7d3338c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:c1:40:57:b6:37:46:fa:a9:8f:1b:a1:31:
5c:90:92:fd:08:5d:f5:9a:d0:26:e6:80:6a:f7:f1:
45:d7:14:c0:b3:8c:e4:9c:b8:8e:7d:1a:d3:33:fb:
03:07:fe:65:6f:37:ab:3f:0b:e9:8e:f5:ba:86:a6:
e4:2c:81:a4:fd:43:4a:fc:4b:d8:f0:48:43:41:2b:
10:aa:aa:2f:85:ee:28:a4:53:4c:86:a6:39:77:37:
25:9f:e2:23:35:ed:1b:99:3a:f8:c5:84:d7:74:5c:
e0:be:3f:bd:a8:b8:23:b5:13:95:88:f1:52:f6:2b:
6e:fe:48:63:f3:d4:27:e0:61:2e:61:51:8b:4e:77:
b6:54:58:41:4f:e0:5c:76:2c:f1:ba:03:93:d1:cb:
a0:17:32:05:be:27:f7:bf:8c:a2:b5:2e:2c:87:32:
36:86:de:1b:ee:91:98:ff:d3:ee:c3:f2:5b:55:c4:
2f:2c:92:e3:26:6e:6c:1d:ca:bb:7c:d7:76:ef:b0:
f4:b6:70:78:e4:7c:cc:f2:ed:3a:6d:43:f5:66:65:
98:46:e9:8a:28:e7:28:04:c9:e1:61:52:67:9f:a9:
6a:60:2c:f4:6b:95:78:9d:75:3a:83:ac:e6:08:68:
59:25:51:bd:7e:f0:7c:82:16:d9:f0:ba:f5:dd:18:
5a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C4:B2:12:F5:2F:7B:A8:F2:AD:F6:59:00:E0:60:3E:7D:33:38:C6
X509v3 Authority Key Identifier:
keyid:58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ca:cd:95:f7:7d:b8:17:6b:78:bd:1a:9f:b8:78:5e:a8:3f:
f5:d5:a7:4d:2e:ab:29:8f:ab:5b:a8:01:78:77:bc:81:4c:db:
e4:f4:64:72:26:b6:47:0c:3d:ee:56:93:f8:af:fa:e1:49:03:
1a:49:6e:a4:ef:a3:cb:cb:58:86:57:d9:04:ab:c0:4a:4a:2d:
28:81:5d:05:ed:e7:9e:45:e9:53:cb:cf:97:c5:de:a0:45:68:
b0:35:0f:58:b9:cc:c3:2d:fa:37:78:24:a7:f9:14:54:48:8c:
4c:fa:54:df:c0:78:22:27:25:50:29:b2:e7:b4:b1:40:04:ea:
5c:7b:ec:ef:c8:35:57:5c:4b:5e:5a:a5:9a:6a:6c:c3:46:e3:
4e:e4:a1:a2:ac:84:77:b4:c2:2f:09:2f:8b:e2:ea:e6:e7:e4:
e3:4e:39:2c:e1:c4:91:ed:6f:4c:5b:f9:b5:27:e1:d4:86:01:
c1:07:ff:19:3d:f9:cb:31:8e:be:56:a6:df:74:3f:7e:d9:e6:
f4:c6:50:aa:6f:85:84:ba:94:b5:d6:34:8b:b3:06:12:b4:82:
1d:7e:fd:52:3d:76:a9:f9:ce:1a:bf:8b:73:71:d2:e7:ac:d1:
ed:6b:42:49:d1:39:9e:17:fa:51:01:75:5e:fa:24:c8:b9:4b:
6e:c1:f4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:58 2025 by rpki-client