Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
File: WLKee4oN25w2xuDj9JV3gXsOo6Y.mft (raw, json)
Hash identifier: 6pVSt5UAGPdwi+UCr+VJWbYqa6dF6qT01CIX2iWrYNk=
Subject key identifier: 5A:3A:C9:CE:A3:6F:FB:08:21:C1:4E:08:A1:8E:15:46:37:5E:67:BD
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Certificate issuer: /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial: 0198499C7091F27F1A204AF4F7A49ECCD51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
Manifest number: 0B9C
Signing time: Sun 27 Jul 2025 02:00:45 +0000
Manifest this update: Sun 27 Jul 2025 02:00:45 +0000
Manifest next update: Mon 28 Jul 2025 02:00:45 +0000
Files and hashes: 1: WLKee4oN25w2xuDj9JV3gXsOo6Y.crl (hash: nmtMjrur1rzQSEJxxeWC74hkpyEq94czg/WFOEvSAtY=)
2: sPVz6CXeimsgpxuXKMYY5ra1yXI.roa (hash: uGVCkdoP9XZVNq6UA53Y8OgwaBktr5jNaHV/XYvmoPk=)
3: xlkkoDtcxpoL9470SYUwdesBd0U.roa (hash: E5i1JoD4+1v4NgDajZkbyhzpzTtWx/xCOYZCaaoJ38U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:70:91:f2:7f:1a:20:4a:f4:f7:a4:9e:cc:d5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Validity
Not Before: Jul 27 02:00:45 2025 GMT
Not After : Jul 28 02:00:45 2025 GMT
Subject: CN=5a3ac9cea36ffb0821c14e08a18e1546375e67bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:89:a8:5f:d7:ce:b8:4d:7a:9e:3b:bb:65:
a2:eb:1e:57:8a:b8:1e:6f:d5:21:f4:e3:a9:99:32:
93:6a:77:45:f3:4a:9f:86:a2:2c:3c:7f:58:f1:f0:
8d:e8:3b:29:db:09:bc:a9:1d:7d:a4:96:46:ea:ea:
63:b0:7f:b0:02:32:46:81:e7:5d:6f:cf:58:d9:f4:
87:af:8a:38:11:b5:0d:fa:6e:7a:9a:c7:bc:be:aa:
3a:5a:a5:0f:41:87:08:82:e4:31:10:85:ac:1c:00:
3e:3f:7c:8b:da:64:0c:71:f9:ea:74:dd:c4:e8:02:
3e:33:2a:c6:82:a8:85:9a:5c:52:f8:c7:46:fa:75:
96:d9:c9:10:3a:dd:a9:9c:63:87:ac:4c:85:1d:8e:
2f:21:ec:3a:f9:f2:bb:6b:36:9f:ae:a2:6f:94:fd:
0e:58:05:31:d2:89:96:71:d9:78:6d:f1:24:d2:c0:
b5:02:bd:9d:64:f7:ad:57:96:40:12:bc:6b:23:e3:
79:51:ae:70:19:59:16:94:7b:f5:64:a4:48:d9:12:
71:33:76:25:7e:34:73:3f:30:3b:28:9d:63:25:08:
0a:03:b1:1f:f7:83:1a:11:29:cf:34:b3:86:61:8b:
96:fe:a0:cf:cf:fd:ac:d1:ea:2f:47:fd:db:19:b5:
fd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3A:C9:CE:A3:6F:FB:08:21:C1:4E:08:A1:8E:15:46:37:5E:67:BD
X509v3 Authority Key Identifier:
keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4d:c4:b2:07:9e:7e:53:4d:ca:78:98:5d:d3:63:79:43:a8:
fa:10:52:ff:cf:f4:72:c7:a6:4f:f9:1e:74:b6:5f:d9:f6:c4:
03:80:ea:e4:e0:2c:08:0a:78:17:13:ab:8b:41:2d:08:28:f2:
18:04:5e:84:bc:d4:91:c1:db:85:0a:8c:4b:94:47:9d:b7:1d:
e3:54:68:15:32:cd:ee:b5:33:42:1c:fd:23:86:2e:35:a7:dd:
c3:ac:40:d3:ee:20:b6:86:c1:16:c0:ee:8e:91:77:0e:f7:54:
1f:5c:6d:18:a3:27:37:92:27:a3:8e:e5:1e:5a:29:16:6b:f1:
55:7d:13:11:cf:ad:c6:01:c3:ae:9a:1a:15:25:36:a5:20:91:
a4:91:b8:60:6e:b2:9d:03:dc:26:96:74:26:5e:00:26:0b:4c:
13:1f:00:5d:70:ac:a0:75:2e:a8:6d:fa:83:d4:ce:ec:80:b9:
a4:7e:25:2e:f5:21:46:5d:13:0a:0f:e5:2a:3d:19:85:36:2e:
b8:b3:43:2f:84:d3:bc:b3:9c:ec:23:24:82:a4:65:83:f8:a9:
4d:b7:8e:87:7e:83:e2:aa:d9:08:6d:6e:93:d4:51:73:cc:ac:
de:44:e6:5b:8f:67:8b:e7:e5:f6:ee:4c:78:01:4f:ed:25:db:
cd:44:de:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:20:18 2025 by rpki-client