Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
File: WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft (raw, json)
Hash identifier: m0zohKmA0jOFfzxQ0YRhKIEeGHB2QUCQ6ysfg1Ffv7o=
Subject key identifier: 9B:96:B3:4B:A9:85:AE:2A:2A:4C:34:D2:B8:E5:E1:66:0A:DE:37:DD
Authority key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
Certificate issuer: /CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Certificate serial: 01961132F0A6D5A0B2EB93C210DCD9745C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
Manifest number: 0672
Signing time: Mon 07 Apr 2025 17:01:13 +0000
Manifest this update: Mon 07 Apr 2025 17:01:13 +0000
Manifest next update: Tue 08 Apr 2025 17:01:13 +0000
Files and hashes: 1: WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl (hash: hmx2GWpTDwRxPuDlxPIjH59CuCa497ubpBMibnFBF7Y=)
2: Z4U4s6npqkkGcLAYBUlzliN7I6c.roa (hash: jhktH3rMjXeFPaMYfnlQRVzXRWKx1pb7NI8qgNj/AcI=)
3: mzKfcsB_6SZ92dtoyTzdmZT_D5Q.roa (hash: W3oo5zZMXU2kzBLMgAMNFTy/16dWodtGflb0+ZEqPmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:32:f0:a6:d5:a0:b2:eb:93:c2:10:dc:d9:74:5c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Validity
Not Before: Apr 7 17:01:13 2025 GMT
Not After : Apr 8 17:01:13 2025 GMT
Subject: CN=9b96b34ba985ae2a2a4c34d2b8e5e1660ade37dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a3:6e:bb:e4:1d:66:ad:45:ce:a8:15:30:a1:
09:90:15:f0:bd:61:e7:a1:23:df:3c:d8:03:cd:82:
a9:80:3a:03:57:b9:33:29:3c:b7:c8:38:24:70:0b:
1c:6c:2a:2a:47:be:a7:a6:5f:08:c3:bb:ea:f0:1c:
8a:aa:4f:66:42:4a:84:28:33:d7:a0:ba:7f:aa:86:
5a:aa:d7:29:88:14:19:8e:ea:1e:c4:35:a3:ed:b6:
fe:db:c4:97:60:dc:08:a7:ec:81:14:a5:4c:32:90:
62:d4:c8:2d:77:dc:63:58:9c:b6:63:e1:f1:b2:cd:
d6:01:d1:e9:22:e2:bf:d4:8c:c0:0f:fe:ae:e6:7d:
70:79:08:fa:04:b6:19:22:a2:89:b0:4e:9b:64:73:
cc:0b:c8:f3:d5:d4:bf:c6:17:9d:2e:04:ae:8c:8b:
39:15:e9:3a:04:67:b4:a0:d3:f5:c3:dd:eb:e2:01:
69:74:81:d2:16:af:e1:51:24:04:da:a0:5f:22:c7:
47:37:6c:08:0c:82:a0:54:51:73:d8:dc:ee:63:02:
c4:dc:b4:b8:30:d7:6c:80:b8:77:1a:2a:45:de:24:
d0:9b:e3:86:7d:74:43:8a:40:c0:54:f5:50:9a:fb:
43:81:04:23:99:22:97:e5:05:f0:3b:1d:f4:7e:34:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:96:B3:4B:A9:85:AE:2A:2A:4C:34:D2:B8:E5:E1:66:0A:DE:37:DD
X509v3 Authority Key Identifier:
keyid:58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:44:da:f9:70:62:3b:6d:e3:66:9d:e8:bc:1f:a9:ac:de:cc:
26:46:c8:8f:88:92:6c:78:90:a7:b9:53:66:97:f4:dc:b5:b2:
08:80:01:f2:59:a1:86:c7:38:6e:08:a4:b4:eb:42:3b:99:d2:
98:9a:1c:43:6d:dd:40:9c:44:69:76:07:c9:13:bf:67:a9:16:
4b:81:4a:fb:2f:d3:75:00:a0:b1:e2:41:b3:eb:43:e2:3f:a2:
f7:00:c2:0a:50:ef:fb:19:8b:41:b4:bc:0a:fb:1b:b5:db:e4:
ef:70:da:23:1a:5b:7b:0b:78:4f:80:e5:a5:11:21:56:62:6e:
fa:a3:8e:41:df:31:b6:fd:3f:c9:53:5a:59:22:37:90:d6:f5:
fd:e9:3c:f7:c4:e3:9b:0d:b0:15:33:47:b6:35:be:fc:88:c0:
27:85:37:d7:f1:81:b7:da:36:ef:3c:49:cc:be:5c:e3:fd:fe:
f6:cb:8b:9f:d1:da:0c:b8:61:2a:39:8d:20:43:1b:aa:8c:d8:
89:bf:5e:8e:27:35:27:5a:ec:02:2f:8d:38:4d:03:9d:b1:37:
7a:3a:c8:6f:87:cf:35:b0:c8:5b:f7:e6:ae:04:cc:50:65:b5:
d4:26:9a:c5:b6:6d:ea:31:58:8a:c1:76:1e:fd:75:55:fa:93:
1d:ec:cd:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYRMvCm1aCy65PCENzZdFwnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4N2Q4YjBlNzU0NjM1MTE3NmNjMGM2ZTUxZWQ0NTIwYWJl
MDRlZjEwHhcNMjUwNDA3MTcwMTEzWhcNMjUwNDA4MTcwMTEzWjAzMTEwLwYDVQQD
Eyg5Yjk2YjM0YmE5ODVhZTJhMmE0YzM0ZDJiOGU1ZTE2NjBhZGUzN2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qNuu+QdZq1FzqgVMKEJkBXwvWHn
oSPfPNgDzYKpgDoDV7kzKTy3yDgkcAscbCoqR76npl8Iw7vq8ByKqk9mQkqEKDPX
oLp/qoZaqtcpiBQZjuoexDWj7bb+28SXYNwIp+yBFKVMMpBi1Mgtd9xjWJy2Y+Hx
ss3WAdHpIuK/1IzAD/6u5n1weQj6BLYZIqKJsE6bZHPMC8jz1dS/xhedLgSujIs5
Fek6BGe0oNP1w93r4gFpdIHSFq/hUSQE2qBfIsdHN2wIDIKgVFFz2NzuYwLE3LS4
MNdsgLh3GipF3iTQm+OGfXRDikDAVPVQmvtDgQQjmSKX5QXwOx30fjS+2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuWs0upha4qKkw00rjl4WYK3jfdMB8GA1UdIwQY
MBaAFFh9iw51RjURdswMblHtRSCr4E7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0gyTERuVkdOUkYyekF4dVVlMUZJS3ZnVHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84MWRjNjItYjNjYy00Zjk5LWFhNDIt
YzEwZjc4MmZiMDdmLzEvV0gyTERuVkdOUkYyekF4dVVlMUZJS3ZnVHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC84MWRjNjItYjNjYy00Zjk5LWFhNDItYzEwZjc4MmZiMDdm
LzEvV0gyTERuVkdOUkYyekF4dVVlMUZJS3ZnVHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu0Ta+XBi
O23jZp3ovB+prN7MJkbIj4iSbHiQp7lTZpf03LWyCIAB8lmhhsc4bgiktOtCO5nS
mJocQ23dQJxEaXYHyRO/Z6kWS4FK+y/TdQCgseJBs+tD4j+i9wDCClDv+xmLQbS8
Cvsbtdvk73DaIxpbewt4T4DlpREhVmJu+qOOQd8xtv0/yVNaWSI3kNb1/ek898Tj
mw2wFTNHtjW+/IjAJ4U31/GBt9o27zxJzL5c4/3+9suLn9HaDLhhKjmNIEMbqozY
ib9ejic1J1rsAi+NOE0DnbE3ejrIb4fPNbDIW/fmrgTMUGW11CaaxbZt6jFYisF2
Hv11VfqTHezN/Q==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:52:34 2025 by rpki-client