Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
File: Wh1F7dft3pqLhipzmtqOeLfcgrk.mft (raw, json)
Hash identifier: kd8UdehLe7NfjqcQ49vpA2BmdnjCrV7SZss63TKGjq0=
Subject key identifier: F4:FA:0F:A1:98:13:AA:6C:BD:4A:AD:D3:CE:2A:D6:FA:C0:A8:7C:A4
Authority key identifier: 5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
Certificate issuer: /CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Certificate serial: 01960D1F580C4966431B8B68D754F53B5861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
Manifest number: 0538
Signing time: Sun 06 Apr 2025 22:01:20 +0000
Manifest this update: Sun 06 Apr 2025 22:01:20 +0000
Manifest next update: Mon 07 Apr 2025 22:01:20 +0000
Files and hashes: 1: Wh1F7dft3pqLhipzmtqOeLfcgrk.crl (hash: XZOfb/lXsqupQbjFNoJrOb/uFfB3wPn+wF84oPEw9T0=)
2: zfiw5E-qnyxqvOsxLYX9MrFyy84.roa (hash: 1/skm9ZEWKwE055qHT9FApOuyUCgE73YdLdPkqaA0Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:1f:58:0c:49:66:43:1b:8b:68:d7:54:f5:3b:58:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Validity
Not Before: Apr 6 22:01:20 2025 GMT
Not After : Apr 7 22:01:20 2025 GMT
Subject: CN=f4fa0fa19813aa6cbd4aadd3ce2ad6fac0a87ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:5a:17:30:ed:f5:80:e5:0e:e7:53:21:75:
dc:19:58:4a:a2:49:11:1c:dc:23:93:84:d5:5d:45:
3f:c5:11:6d:1a:3b:ac:e2:cf:47:be:4a:85:3d:9e:
5f:cd:fe:de:63:13:b2:fd:31:10:1b:0e:76:aa:e7:
09:29:de:41:59:41:47:26:4e:e7:9e:f6:20:0a:1b:
16:00:d8:89:f9:d2:8a:7f:0f:ac:4c:8e:30:49:95:
99:d0:ec:66:b0:d7:e3:36:50:a7:74:1c:52:e5:91:
96:5b:6c:86:14:1a:f2:4c:6b:16:8b:31:7b:8a:e1:
98:65:3e:74:cb:1a:b7:ba:48:9b:ea:41:b5:4b:0d:
77:10:c2:1e:bb:54:7a:13:ee:7b:d5:28:21:8b:71:
53:0a:3e:d9:5e:d8:ce:5f:3c:e8:ef:ea:d4:9e:a3:
a8:ac:5d:e5:19:2a:87:82:d1:74:94:89:32:28:05:
02:2b:a9:45:06:d4:2a:02:fe:8a:1c:41:87:8e:46:
8e:2a:d3:31:db:70:42:af:0e:dc:c5:64:ff:91:2b:
10:ee:33:cf:a1:c5:b8:3d:67:3a:4b:86:dd:3a:fa:
c7:cf:7c:ce:87:53:2f:29:a3:14:89:c9:fd:b7:7c:
a5:70:ba:5b:2e:dd:66:fa:53:48:09:80:9b:fc:1f:
6d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FA:0F:A1:98:13:AA:6C:BD:4A:AD:D3:CE:2A:D6:FA:C0:A8:7C:A4
X509v3 Authority Key Identifier:
keyid:5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:e6:64:48:fb:f7:2b:93:7c:15:8e:51:99:6c:af:de:21:f5:
a0:25:73:7e:e7:db:fc:6b:00:f3:9f:01:f1:b6:5e:a0:34:52:
7f:5f:ac:9c:28:48:29:f7:07:28:83:e8:2e:7a:9d:81:6b:c3:
56:e3:21:e9:5a:f0:b6:cf:2e:ec:16:75:0f:44:82:18:d5:67:
dd:ee:ce:b5:37:87:db:45:75:7b:3b:f3:cb:1a:97:34:34:a9:
26:f8:a2:19:6f:4f:c7:43:23:50:b6:fa:23:9c:a9:39:4f:7b:
3e:27:4c:73:ef:7d:83:24:c3:a8:6c:bf:91:c3:25:15:a5:bf:
2e:6e:93:ed:dd:9f:b0:23:69:9c:96:e6:45:ee:8e:5f:dc:0f:
2e:e7:fb:bf:39:01:46:88:3a:e4:8a:56:aa:6b:45:69:38:8b:
d2:f2:49:f7:aa:ec:24:41:28:0f:e6:14:5a:c6:a3:87:2f:df:
a2:e0:92:96:44:d8:45:79:8c:fb:08:0e:a6:4e:0b:b7:ff:57:
01:ad:97:25:5e:66:0d:7f:e5:41:ff:44:67:db:e0:fa:f4:5a:
b5:c2:3f:75:5f:62:b3:6c:22:8a:13:42:32:87:1e:af:44:4b:
36:dd:6c:2a:9d:5e:ae:43:a7:e0:d3:a2:f2:61:c5:70:2b:20:
e5:75:94:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:37 2025 by rpki-client