Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
File: WFRbn70B0owOptCPW0cts0-tLqM.mft (raw, json)
Hash identifier: pvKsGjIxVqiQTkBecHI4Q1zlP8z+Hxugflr+eqP7+yU=
Subject key identifier: 4B:80:33:6A:FA:A6:87:F7:71:2B:1D:BD:A1:B0:84:8B:55:86:B8:9C
Authority key identifier: 58:54:5B:9F:BD:01:D2:8C:0E:A6:D0:8F:5B:47:2D:B3:4F:AD:2E:A3
Certificate issuer: /CN=58545b9fbd01d28c0ea6d08f5b472db34fad2ea3
Certificate serial: 019847E46660C05DEA8CB17B695D974E8E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
Manifest number: 15C6
Signing time: Sat 26 Jul 2025 18:00:07 +0000
Manifest this update: Sat 26 Jul 2025 18:00:07 +0000
Manifest next update: Sun 27 Jul 2025 18:00:07 +0000
Files and hashes: 1: WFRbn70B0owOptCPW0cts0-tLqM.crl (hash: WUpZeqcTE+fYdt76IOWSBS6MZW1/EiCxYyzVrkFYL3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:66:60:c0:5d:ea:8c:b1:7b:69:5d:97:4e:8e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58545b9fbd01d28c0ea6d08f5b472db34fad2ea3
Validity
Not Before: Jul 26 18:00:07 2025 GMT
Not After : Jul 27 18:00:07 2025 GMT
Subject: CN=4b80336afaa687f7712b1dbda1b0848b5586b89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:82:2b:bc:7b:8b:08:b7:9d:4e:cd:6d:b5:e5:
94:e1:b0:31:f2:79:88:68:1c:1b:1d:46:ec:0a:66:
2f:1c:ff:1a:13:36:f5:c6:bc:24:86:d4:da:cd:9d:
b3:2a:09:66:02:d2:b8:3f:2f:5b:73:6d:3b:22:56:
ae:49:ea:03:75:ba:3f:50:da:cb:83:bc:49:b7:2b:
75:c7:3b:29:47:88:2c:2d:22:6f:b6:9b:d0:c3:26:
85:59:26:bf:b8:dd:83:13:80:bc:ec:c0:93:8a:5b:
8c:27:c3:30:e1:db:a9:e0:aa:a2:05:a5:29:78:3c:
42:83:8d:b2:23:e7:af:24:41:4b:2a:d9:c1:12:a9:
9c:c6:1f:da:61:28:45:89:56:9c:ed:66:2f:4f:77:
a6:4a:55:9c:0f:be:1b:94:19:84:3f:f5:4b:e1:72:
00:7a:5c:dc:eb:fe:52:32:fb:9e:78:d1:ef:29:c5:
00:88:73:71:7d:09:0a:9b:47:00:dc:a0:03:4b:74:
54:08:e4:d2:76:bd:88:9f:fe:d1:e5:7a:8c:6d:1b:
ca:b2:e6:37:1c:60:da:1c:8a:1b:cb:94:24:7d:b9:
94:0a:8f:a4:d9:00:80:24:1d:45:38:53:2a:94:4e:
07:8c:77:fa:dc:52:d1:bd:cc:a9:36:ee:c5:8f:d7:
3c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:80:33:6A:FA:A6:87:F7:71:2B:1D:BD:A1:B0:84:8B:55:86:B8:9C
X509v3 Authority Key Identifier:
keyid:58:54:5B:9F:BD:01:D2:8C:0E:A6:D0:8F:5B:47:2D:B3:4F:AD:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3d:84:92:36:27:35:1a:ba:92:21:85:92:df:bf:0f:9f:37:
09:87:af:5f:de:25:12:93:5b:e7:8b:ad:dd:ff:17:b7:ad:05:
9c:34:e0:33:b5:4b:de:93:db:60:93:b7:33:1d:0d:24:23:69:
34:27:3d:5c:82:19:d0:13:1a:eb:a4:ea:09:b0:91:a4:72:8d:
ae:af:fd:3a:4e:aa:32:48:a4:e9:3b:56:41:33:82:47:c6:2b:
88:ce:0c:cc:79:3e:84:be:90:6a:c1:05:dc:41:56:dd:30:23:
17:a3:42:15:ae:b0:2a:63:20:ce:0b:bd:d5:6e:e4:5e:3e:1d:
7d:2f:64:45:5c:30:6f:43:5b:50:1f:d9:f1:c9:ee:f5:0e:11:
47:4a:de:f1:86:27:51:ce:55:75:37:17:95:f0:ed:a5:40:ef:
cb:85:08:c1:ca:93:cc:de:d8:5e:56:ed:1e:f2:16:c1:d0:87:
03:9f:6e:60:ce:ed:80:a3:09:60:67:25:40:42:d7:56:94:b3:
98:ea:41:6b:1b:f2:75:98:ec:ad:22:04:0b:69:1c:6d:c6:1e:
0e:55:fd:75:bf:ca:6d:43:f2:ac:6e:3f:3a:cf:26:c8:5d:82:
7c:1a:76:71:69:52:82:67:48:a8:85:49:da:e4:78:89:2a:14:
81:43:f4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:55:59 2025 by rpki-client