Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
File: wh-rdnRH02kRl0z5ux0a6RMfyEU.mft (raw, json)
Hash identifier: dnzWgsZ/3uX6F9MuaMWHAp0FoYFhnnOzmaZvBLdOqkQ=
Subject key identifier: B0:9C:25:CD:F4:29:91:6B:56:26:36:F9:46:31:43:46:7D:3D:35:98
Authority key identifier: C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
Certificate issuer: /CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Certificate serial: 01974CD7164BB2C37893695B37623F38C94C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
Manifest number: 130B
Signing time: Sun 08 Jun 2025 00:00:53 +0000
Manifest this update: Sun 08 Jun 2025 00:00:53 +0000
Manifest next update: Mon 09 Jun 2025 00:00:53 +0000
Files and hashes: 1: prGV5vanh8ZP5p3KxsDzpumMYgk.roa (hash: hK6jdh1nUN3ur+bES2D8ND74m74aDMb2GNKxeALcVf8=)
2: wh-rdnRH02kRl0z5ux0a6RMfyEU.crl (hash: B+iQqfqhrWlp6ceXQfL6Ufs2aJFRDKwMLK5Aya34zPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:16:4b:b2:c3:78:93:69:5b:37:62:3f:38:c9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Validity
Not Before: Jun 8 00:00:53 2025 GMT
Not After : Jun 9 00:00:53 2025 GMT
Subject: CN=b09c25cdf429916b562636f9463143467d3d3598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:41:30:28:d9:a8:42:f7:25:9b:42:c6:b1:7a:
a1:dc:b5:11:03:f4:e5:ef:e1:ab:ab:a2:40:9c:45:
95:81:bc:fe:66:6f:71:2f:ec:f1:84:79:c1:bc:b4:
3e:a8:34:90:07:fe:bd:11:f1:57:b6:56:cc:b9:34:
77:82:c9:af:76:0c:a7:82:f0:0e:2d:c7:16:cc:8b:
7c:d1:69:4f:6b:30:c6:a7:d0:f2:97:a4:22:d9:a9:
50:07:63:d8:e3:32:0e:13:ed:b3:65:2a:f2:55:34:
a2:2a:6e:eb:bb:4c:2a:2a:26:fc:fc:da:2c:b2:8b:
f1:7f:d3:82:d6:49:e7:17:cb:b3:6e:f0:04:25:6b:
e9:3e:d4:04:25:e1:39:29:9e:ad:76:24:79:33:b1:
72:61:0c:b8:25:38:77:1d:d4:d4:19:78:60:0e:48:
a4:2f:f5:2a:d3:6a:74:df:20:ec:96:4c:db:45:7b:
a4:61:e3:bd:e2:26:9e:63:82:7e:ad:e0:1a:49:d3:
8f:d1:4a:c6:b4:40:ca:74:ad:f0:79:a4:d8:39:8d:
e4:67:13:74:9b:d9:f9:01:60:f2:bc:4c:2c:bd:4c:
a5:53:29:0a:65:ae:f6:e3:e5:35:fb:d1:7c:ee:f4:
eb:40:cf:3a:8b:65:07:3e:ed:59:d0:41:91:5a:1b:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9C:25:CD:F4:29:91:6B:56:26:36:F9:46:31:43:46:7D:3D:35:98
X509v3 Authority Key Identifier:
keyid:C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b7:27:62:d5:56:74:af:c8:b7:9c:98:05:2f:33:02:c6:16:
dd:53:70:8e:25:ac:e2:49:5b:80:86:e1:28:4b:fb:f7:26:17:
66:a3:1c:83:54:38:a3:8b:17:5b:80:85:bc:39:4e:35:8d:c7:
e9:a4:52:a1:75:60:b4:fd:ad:11:95:59:29:aa:96:12:52:7d:
08:3d:cc:0b:c1:e5:a5:8a:b0:f0:dc:6f:e7:30:6b:7c:56:e2:
d6:d6:fa:87:40:ed:d1:12:c0:3b:8e:30:d6:7b:43:05:cb:73:
f7:f3:d2:22:60:05:27:a7:12:f2:a7:e3:56:98:9f:38:5d:a0:
78:2d:47:1e:59:4c:6a:8f:a7:1c:52:5a:45:8b:2b:56:93:be:
a7:31:dd:3d:4b:70:75:9d:ce:7d:e8:54:e7:fa:ff:4d:c9:37:
16:cd:16:ed:a4:5a:73:a5:58:60:94:b4:13:a2:22:e2:14:84:
ea:43:32:7b:f6:78:eb:c3:b4:6a:46:22:d2:25:14:89:4c:ab:
b7:fc:88:a5:f6:cf:fe:ec:63:9e:a1:94:5e:44:3d:fb:01:1a:
1b:c5:c9:33:72:db:9b:81:ec:10:65:9c:79:b1:64:7d:d5:70:
fb:23:23:47:64:96:aa:56:e0:52:87:16:bd:9c:7c:af:71:df:
81:8a:68:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:01:16 2025 by rpki-client