Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
File: WH7X6fmKHxl17p-8sJXDrfoorsA.mft (raw, json)
Hash identifier: lh4QOaeqsZwwSSs8MAiEKgTsriLk1vvUtxhABR+EiF8=
Subject key identifier: D7:07:35:3C:A2:A7:57:90:EE:60:A1:9A:18:7B:49:D6:FE:8A:02:B5
Authority key identifier: 58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
Certificate issuer: /CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Certificate serial: 01974779B1CD58B3CEA062D49D1CE09C6C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
Manifest number: 155C
Signing time: Fri 06 Jun 2025 23:00:46 +0000
Manifest this update: Fri 06 Jun 2025 23:00:46 +0000
Manifest next update: Sat 07 Jun 2025 23:00:46 +0000
Files and hashes: 1: 19CW3KILFYPXEhHk2Ol76tPUYYc.roa (hash: vdEeJmbxLIeIAD2w3zH+n6I7kJJZC/K9fF2eOSXSZV8=)
2: WH7X6fmKHxl17p-8sJXDrfoorsA.crl (hash: NsZDOwrApYHsQEAei1GaluvpGP6q8aVLxZJj1/cNAns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:b1:cd:58:b3:ce:a0:62:d4:9d:1c:e0:9c:6c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Validity
Not Before: Jun 6 23:00:46 2025 GMT
Not After : Jun 7 23:00:46 2025 GMT
Subject: CN=d707353ca2a75790ee60a19a187b49d6fe8a02b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0b:75:7c:a4:78:2a:ee:a0:3c:4c:f4:bd:55:
53:65:cd:22:c2:33:04:e5:f8:25:57:c1:6e:0c:7a:
f1:a7:a9:ee:8f:13:93:11:25:99:5b:32:45:be:56:
a6:bb:2f:ec:18:c4:b7:d3:bc:aa:82:99:b2:ea:47:
49:00:78:1a:fb:b6:35:fc:27:9d:ab:a3:d9:7e:98:
ba:d5:f8:fd:fc:3a:b3:19:e3:2a:df:9b:6b:62:eb:
10:d3:7f:fb:42:55:69:4a:40:a1:a8:cd:51:b4:8a:
d7:31:2d:47:42:ce:86:28:65:72:d0:f2:e9:1f:9d:
03:6c:f1:d1:10:f0:81:55:a8:bd:bf:88:58:9e:5f:
b0:da:c6:7e:a3:56:c5:ad:c7:57:24:89:6f:5a:e4:
bf:71:77:44:29:c0:fb:d8:36:f1:72:ee:7e:47:8a:
66:8b:33:02:b6:35:a6:b9:25:07:5c:c9:60:e9:e5:
1c:46:4f:f8:92:15:25:49:fc:5f:80:0c:b8:d6:11:
53:b7:1a:80:15:65:64:b8:d8:ff:f2:e2:16:c7:45:
38:2c:02:70:b5:d3:9c:c3:84:84:60:cb:de:fa:7d:
33:d3:83:3d:2e:67:7b:e5:56:32:70:6c:83:7c:aa:
9b:f8:46:a6:34:fd:5c:11:dd:d0:10:cb:2e:e1:ae:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:07:35:3C:A2:A7:57:90:EE:60:A1:9A:18:7B:49:D6:FE:8A:02:B5
X509v3 Authority Key Identifier:
keyid:58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:72:9c:d0:91:11:96:0f:69:3e:7d:01:b6:0c:d2:9a:27:d5:
f4:39:90:29:14:b0:44:f5:8c:2c:b5:b6:5a:f0:84:10:68:f4:
08:58:0a:32:8e:ec:bd:d3:88:b0:6e:6d:15:8c:6c:58:b9:80:
dc:1d:51:d1:65:0a:e8:07:1e:74:54:10:4b:9a:d6:31:79:a9:
74:b8:44:60:24:6f:80:7d:ee:7f:f2:20:51:a6:6a:af:1e:b4:
89:90:47:c8:bc:50:03:79:e5:47:03:35:75:ab:07:20:03:54:
95:1d:cd:77:b4:d6:d4:32:65:c1:53:6c:dd:24:d0:a1:ef:c3:
08:9a:e8:33:f6:e6:8f:ee:6b:f4:b4:77:3e:e8:83:ad:18:8b:
49:38:5c:66:97:e2:37:8a:a4:b5:74:88:4a:2e:32:7f:89:da:
9f:1d:78:72:70:d3:99:89:0f:32:ba:34:fe:d1:cf:44:25:94:
db:9c:ac:02:a2:ce:18:59:48:ba:db:60:3f:d2:21:74:35:64:
25:45:ef:67:5d:6c:3d:aa:ed:bd:c3:3e:4d:53:c1:26:4b:c9:
2b:a9:9e:46:32:ee:ce:90:0d:89:24:1f:bb:14:bd:f3:db:18:
57:17:8f:f0:75:74:ca:25:24:8c:04:69:0d:f8:11:65:21:af:
f4:e3:fe:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:33 2025 by rpki-client