Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
File: Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft (raw, json)
Hash identifier: rmO6Ui5fWxPzypoWcH6Y4laxP2rDIgJHR29FIub0EFA=
Subject key identifier: E3:74:53:22:05:B4:EA:14:42:23:E0:79:32:E6:46:C9:58:4E:6A:08
Authority key identifier: 5A:1D:57:E0:60:D1:74:5D:BB:92:38:91:47:F0:1F:60:4E:CF:BA:AC
Certificate issuer: /CN=5a1d57e060d1745dbb92389147f01f604ecfbaac
Certificate serial: 0196515AAD2DA99D6F96DDF07FADD7760C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
Manifest number: 12F3
Signing time: Sun 20 Apr 2025 04:00:19 +0000
Manifest this update: Sun 20 Apr 2025 04:00:19 +0000
Manifest next update: Mon 21 Apr 2025 04:00:19 +0000
Files and hashes: 1: Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl (hash: lYWE6V2hn9Y8qqkGUztRhOmT6llKBA6my3AAnSKd7VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:ad:2d:a9:9d:6f:96:dd:f0:7f:ad:d7:76:0c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1d57e060d1745dbb92389147f01f604ecfbaac
Validity
Not Before: Apr 20 04:00:19 2025 GMT
Not After : Apr 21 04:00:19 2025 GMT
Subject: CN=e374532205b4ea144223e07932e646c9584e6a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:05:28:0e:75:5b:a3:6a:a7:9a:4f:3f:78:
60:1a:9f:5e:2d:cd:08:df:7b:da:81:2c:51:d3:52:
b6:33:a7:2b:ce:ae:0f:50:37:ea:c3:a1:ed:4c:bc:
1e:25:e6:d3:42:24:28:10:60:20:fb:d7:73:fe:31:
6f:05:e5:f4:fb:de:7f:a6:f5:50:51:cf:52:09:48:
64:62:6d:e1:ce:5d:b8:1e:e8:ed:8f:40:97:1e:5e:
ec:e3:26:67:45:ec:0a:f7:8c:a8:f4:fb:71:1f:6d:
55:00:42:a3:cb:28:f2:91:b3:19:97:9e:62:16:01:
0f:e6:66:e8:2d:ca:35:1b:fe:ed:d7:ac:57:ad:cc:
7d:00:53:28:8c:0b:bf:c6:8a:9f:02:7c:05:0c:63:
5d:2d:22:20:fe:e6:d1:d7:19:5e:7c:e7:e1:e2:bc:
bb:32:ba:0a:8c:94:27:88:71:2b:5e:9d:55:48:8e:
eb:a5:ec:e6:1f:5b:95:a0:eb:f3:56:46:77:d0:58:
05:d0:c9:71:ae:00:8e:fe:07:45:b2:3b:7e:92:b6:
02:43:1e:0a:83:fb:41:80:38:49:f9:27:9c:9e:ec:
7e:7b:5d:27:f1:ac:2c:12:e1:1e:22:ea:20:e8:14:
86:47:62:d0:88:81:8c:89:fa:99:41:4a:90:ed:32:
8b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:74:53:22:05:B4:EA:14:42:23:E0:79:32:E6:46:C9:58:4E:6A:08
X509v3 Authority Key Identifier:
keyid:5A:1D:57:E0:60:D1:74:5D:BB:92:38:91:47:F0:1F:60:4E:CF:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:df:fb:1f:d7:c7:5d:13:51:d6:fe:81:8c:f7:7d:af:f7:d7:
0e:fd:b0:39:ed:d3:e6:1b:cd:12:f4:c6:e0:28:db:a3:de:68:
80:85:93:b2:99:35:ce:9c:e8:e4:99:cd:73:50:99:50:27:b8:
0d:ed:cd:f7:e2:51:b5:43:a3:0a:b4:65:ba:16:33:ac:4c:05:
f7:69:3f:67:bf:57:7f:e3:b2:86:b6:21:42:e3:f9:d9:f1:57:
92:55:6a:98:33:fe:64:a6:64:a6:98:55:c3:52:47:65:17:bf:
02:a2:a7:c7:06:75:86:28:5b:c8:3f:5a:a8:02:c5:7f:a4:d8:
aa:1a:b9:82:0e:72:46:0b:0d:12:47:86:03:26:4a:0b:07:92:
ee:80:1e:2c:70:43:b4:a6:db:9d:c3:a3:91:ce:fc:1e:7e:96:
a1:26:d7:2b:11:ca:d8:80:9f:67:96:4e:c9:0d:38:f8:ce:6a:
c1:ad:e2:64:48:ed:fc:dc:5b:06:1c:72:83:d6:d1:ec:66:eb:
6b:85:84:21:ea:f7:ed:4a:14:e7:94:83:96:d9:02:f6:37:25:
ff:24:8e:b0:8c:a9:43:19:a9:d5:6e:66:68:e0:b7:82:62:9f:
5b:eb:2d:46:40:de:ea:f0:f6:27:a7:52:aa:64:17:1c:22:ed:
e5:59:33:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRWq0tqZ1vlt3wf63Xdgx3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMWQ1N2UwNjBkMTc0NWRiYjkyMzg5MTQ3ZjAxZjYwNGVj
ZmJhYWMwHhcNMjUwNDIwMDQwMDE5WhcNMjUwNDIxMDQwMDE5WjAzMTEwLwYDVQQD
EyhlMzc0NTMyMjA1YjRlYTE0NDIyM2UwNzkzMmU2NDZjOTU4NGU2YTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur8FKA51W6Nqp5pPP3hgGp9eLc0I
33vagSxR01K2M6crzq4PUDfqw6HtTLweJebTQiQoEGAg+9dz/jFvBeX0+95/pvVQ
Uc9SCUhkYm3hzl24Hujtj0CXHl7s4yZnRewK94yo9PtxH21VAEKjyyjykbMZl55i
FgEP5mboLco1G/7t16xXrcx9AFMojAu/xoqfAnwFDGNdLSIg/ubR1xlefOfh4ry7
MroKjJQniHErXp1VSI7rpezmH1uVoOvzVkZ30FgF0MlxrgCO/gdFsjt+krYCQx4K
g/tBgDhJ+Secnux+e10n8awsEuEeIuog6BSGR2LQiIGMifqZQUqQ7TKLUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFON0UyIFtOoUQiPgeTLmRslYTmoIMB8GA1UdIwQY
MBaAFFodV+Bg0XRdu5I4kUfwH2BOz7qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2gxWDRHRFJkRjI3a2ppUlJfQWZZRTdQdXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hNDZhYmUtMWZiNy00MzRhLTlmMjIt
YmViYTg1ZTdiMjk1LzEvV2gxWDRHRFJkRjI3a2ppUlJfQWZZRTdQdXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9hNDZhYmUtMWZiNy00MzRhLTlmMjItYmViYTg1ZTdiMjk1
LzEvV2gxWDRHRFJkRjI3a2ppUlJfQWZZRTdQdXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApN/7H9fH
XRNR1v6BjPd9r/fXDv2wOe3T5hvNEvTG4Cjbo95ogIWTspk1zpzo5JnNc1CZUCe4
De3N9+JRtUOjCrRluhYzrEwF92k/Z79Xf+OyhrYhQuP52fFXklVqmDP+ZKZkpphV
w1JHZRe/AqKnxwZ1hihbyD9aqALFf6TYqhq5gg5yRgsNEkeGAyZKCweS7oAeLHBD
tKbbncOjkc78Hn6WoSbXKxHK2ICfZ5ZOyQ04+M5qwa3iZEjt/NxbBhxyg9bR7Gbr
a4WEIer37UoU55SDltkC9jcl/ySOsIypQxmp1W5maOC3gmKfW+stRkDe6vD2J6dS
qmQXHCLt5VkzEA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:08 2025 by rpki-client