Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
File: WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft (raw, json)
Hash identifier: qdcGoVYOFrIkC1HZVMGdzMd9uuMDtbb2VSBNr39Gv7M=
Subject key identifier: EB:50:AA:53:09:B6:A0:5B:5C:6F:CB:65:B7:BE:52:49:E1:9B:C4:F5
Authority key identifier: 5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
Certificate issuer: /CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Certificate serial: 019748C31EA044757B1C09933F0A1F3E39A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
Manifest number: 11D9
Signing time: Sat 07 Jun 2025 05:00:36 +0000
Manifest this update: Sat 07 Jun 2025 05:00:36 +0000
Manifest next update: Sun 08 Jun 2025 05:00:36 +0000
Files and hashes: 1: Oh-cQnXBc3lf8_SsKrCv90dr1do.roa (hash: /clQdBNjFo+DPpzGiAtMduHa7oP5zjEdGJ0IRP2uvgo=)
2: WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl (hash: 645TvKbkS+rFyVEH+p2v0usuggukLlArkk4nl+QpCs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:1e:a0:44:75:7b:1c:09:93:3f:0a:1f:3e:39:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Validity
Not Before: Jun 7 05:00:36 2025 GMT
Not After : Jun 8 05:00:36 2025 GMT
Subject: CN=eb50aa5309b6a05b5c6fcb65b7be5249e19bc4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:02:78:07:3a:1f:0c:b0:c1:49:dc:bd:ae:21:
06:53:9a:66:f0:4d:91:6a:70:44:0e:f5:bb:30:00:
22:ef:b2:9e:d8:c2:6d:12:35:5b:96:05:00:46:59:
a1:87:3e:a1:3e:09:fe:e0:3d:bd:1b:71:14:4c:92:
2b:ed:05:fd:8a:55:e3:32:1d:00:b8:ea:57:68:d7:
de:a9:35:e5:32:e8:6c:8c:af:90:3c:eb:a9:a8:b2:
98:32:44:99:ce:a7:5b:4c:65:35:a7:54:1b:ec:7a:
68:30:e3:06:0d:e0:ce:e9:f3:ab:60:06:1e:bd:9b:
87:05:1c:54:96:35:9b:61:83:c4:cb:03:34:b5:40:
50:09:dc:7e:6e:0e:fc:04:6a:fe:37:91:f7:c9:09:
c4:4b:dc:26:d6:be:5b:07:6c:b6:d9:fd:75:e3:a4:
bb:67:1d:ab:15:0f:2f:08:b2:06:6e:62:77:c9:01:
dd:c8:73:72:4b:c3:75:64:19:6e:37:a1:c0:d9:bb:
32:56:c3:78:8b:97:cc:63:fb:bb:28:0d:8d:a0:f4:
cd:f4:8d:d9:4f:27:96:0e:06:34:bb:e3:5a:15:57:
a9:fc:79:a8:c0:17:81:f1:49:34:de:04:5c:08:fe:
42:35:e5:a9:e6:d1:8e:dd:98:ea:44:45:6f:f1:9e:
30:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:50:AA:53:09:B6:A0:5B:5C:6F:CB:65:B7:BE:52:49:E1:9B:C4:F5
X509v3 Authority Key Identifier:
keyid:5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4a:e3:b7:bc:ce:5d:08:6c:1f:66:ad:b2:e1:14:fe:cf:df:
1d:a7:64:0a:90:94:6b:8b:85:ea:ef:22:b6:db:7e:7e:05:93:
46:0e:99:f4:38:86:cd:29:1e:82:4d:bb:b8:f1:71:c0:1a:19:
d2:73:67:22:9b:2c:59:30:00:93:a3:04:f4:1f:d9:48:84:e7:
e7:38:94:17:f7:b5:6e:48:df:97:14:3a:6a:32:73:fe:49:77:
b0:dc:97:c0:73:c3:b6:a7:8d:cc:da:8d:48:1d:31:fb:cb:99:
f4:95:62:8d:df:d7:9f:03:aa:72:41:80:05:7f:d3:d7:4d:0b:
7c:a0:79:8c:cb:b2:98:42:23:30:b8:ec:60:fb:ca:e0:54:e6:
91:f5:ca:46:a2:9f:dc:84:65:e5:5a:4e:01:ac:9f:16:f9:08:
3b:af:7e:8c:d0:d2:43:b5:99:00:34:b9:6e:1e:5a:df:a6:71:
9d:8f:9c:5a:af:8f:b4:6b:2c:5b:cf:00:93:70:7b:7b:5d:82:
d1:f1:3b:aa:11:83:48:16:f2:df:e8:d8:98:6c:4d:90:68:e9:
2f:f7:9c:cd:1f:99:9b:13:38:8e:1c:39:86:c7:24:cd:f4:09:
bb:ec:c7:6b:03:2d:9a:13:c7:8d:40:46:04:a3:28:0e:7e:f2:
bc:b5:0d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:34:28 2025 by rpki-client