Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d27b3a-3cec-4139-87e8-3518d806ffc3/1/WKNa-48AdsEVWKz_QGPy9YooF8o.mft
File: WKNa-48AdsEVWKz_QGPy9YooF8o.mft (raw, json)
Hash identifier: A7rIRTtAF3kpb4kpMn7k75PC7BCI1925inCem9wxA50=
Subject key identifier: 10:8F:5E:27:43:0B:F0:BE:F8:9D:95:EF:34:EB:DB:3F:DF:B8:C5:69
Authority key identifier: 58:A3:5A:FB:8F:00:76:C1:15:58:AC:FF:40:63:F2:F5:8A:28:17:CA
Certificate issuer: /CN=58a35afb8f0076c11558acff4063f2f58a2817ca
Certificate serial: 01984A415590C3299FA4E4269E11BBE138D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKNa-48AdsEVWKz_QGPy9YooF8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d27b3a-3cec-4139-87e8-3518d806ffc3/1/WKNa-48AdsEVWKz_QGPy9YooF8o.mft
Manifest number: 03E8
Signing time: Sun 27 Jul 2025 05:00:52 +0000
Manifest this update: Sun 27 Jul 2025 05:00:52 +0000
Manifest next update: Mon 28 Jul 2025 05:00:52 +0000
Files and hashes: 1: WKNa-48AdsEVWKz_QGPy9YooF8o.crl (hash: McHrj3JFEkcg6iPkDE3cQLQGkdDO89shAhkFBrrlf4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d27b3a-3cec-4139-87e8-3518d806ffc3/1/WKNa-48AdsEVWKz_QGPy9YooF8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/d27b3a-3cec-4139-87e8-3518d806ffc3/1/WKNa-48AdsEVWKz_QGPy9YooF8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKNa-48AdsEVWKz_QGPy9YooF8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:55:90:c3:29:9f:a4:e4:26:9e:11:bb:e1:38:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a35afb8f0076c11558acff4063f2f58a2817ca
Validity
Not Before: Jul 27 05:00:52 2025 GMT
Not After : Jul 28 05:00:52 2025 GMT
Subject: CN=108f5e27430bf0bef89d95ef34ebdb3fdfb8c569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:e7:fc:63:ca:85:db:58:db:3f:d4:dc:6c:
6a:ab:10:01:1b:8c:b6:c7:21:86:02:06:a9:ec:95:
14:79:35:2f:34:16:fe:fb:7f:29:92:78:08:f2:d8:
c4:58:86:9c:07:94:15:d3:c9:ef:9b:dc:11:0c:ad:
1c:da:a1:00:5d:a2:b6:ad:e1:4d:aa:0d:37:e7:22:
f5:28:43:75:4d:e9:3b:be:45:04:ad:ce:a0:7f:c8:
5e:58:4a:8a:5c:85:0b:94:54:d9:e8:d8:41:be:84:
b8:f9:02:27:d4:12:77:12:59:32:04:4e:5b:d2:b6:
4b:6e:1a:68:b0:03:32:e1:2a:65:d0:91:ad:9d:a1:
1f:fc:d3:5a:bf:63:ff:86:0b:d5:28:f3:e1:b5:f4:
4a:0a:3a:71:2d:c8:ed:33:7b:2a:86:1a:47:97:db:
64:49:c7:cb:30:cd:d6:c3:f4:96:00:e8:33:7f:35:
42:77:e7:46:12:47:55:45:d5:22:7c:19:08:03:ee:
4a:8d:89:6f:b7:27:c7:90:2b:9a:0f:fb:6b:94:55:
df:7f:cc:6e:c8:93:3a:a3:1b:72:f6:1c:98:4c:79:
74:31:39:27:4e:bb:27:d3:4a:8f:e6:b9:80:43:00:
d5:35:68:97:56:12:22:05:07:12:66:fe:09:09:a0:
64:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8F:5E:27:43:0B:F0:BE:F8:9D:95:EF:34:EB:DB:3F:DF:B8:C5:69
X509v3 Authority Key Identifier:
keyid:58:A3:5A:FB:8F:00:76:C1:15:58:AC:FF:40:63:F2:F5:8A:28:17:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKNa-48AdsEVWKz_QGPy9YooF8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d27b3a-3cec-4139-87e8-3518d806ffc3/1/WKNa-48AdsEVWKz_QGPy9YooF8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d27b3a-3cec-4139-87e8-3518d806ffc3/1/WKNa-48AdsEVWKz_QGPy9YooF8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d7:44:c2:75:3d:51:b1:ca:36:51:d8:b4:3e:f7:51:37:6b:
ce:c1:b9:2a:9e:41:0f:55:96:0f:d8:b7:61:a4:00:b8:ac:46:
ad:d8:e4:08:12:20:59:1b:1a:80:65:2c:98:ab:32:30:99:cb:
8e:bf:81:07:f1:9d:4d:1e:36:1a:89:32:5c:d7:6a:0c:6c:74:
23:bb:a1:45:ec:a2:89:43:e7:d7:87:b8:9c:2d:d7:6c:24:2e:
9e:74:13:c0:bd:c4:4e:5c:6c:9a:98:4a:79:92:71:76:0c:93:
b2:6a:d6:3f:f5:43:b3:d4:36:9d:39:ce:9c:d7:6e:8c:bf:55:
73:1e:fe:b7:70:ff:d2:42:88:05:c0:0f:06:af:94:5c:ee:18:
fc:4c:32:5d:d8:61:d0:b9:0a:13:f8:f3:22:d4:06:53:b8:2f:
9d:1d:24:e2:c0:d2:bc:d4:d7:0f:0c:f8:4d:f1:99:8a:16:ef:
08:cc:29:93:f8:aa:b4:e3:ef:43:89:fb:b2:3b:c6:d8:6f:21:
f1:a1:30:65:3b:59:73:9f:b2:44:f8:11:07:5f:be:50:ac:ab:
8d:33:02:f4:1d:d1:43:2d:79:59:a6:2e:ff:e3:1c:0a:6c:2b:
cc:62:08:ba:82:89:6e:98:2d:23:d8:be:33:a2:e0:03:eb:fe:
71:9f:76:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:55:54 2025 by rpki-client