Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
File: Wik9777xDXPPEfK-hlVYjtpopEw.mft (raw, json)
Hash identifier: vOpCT2QXIMwLRmy8GY2EfBrBY5O6cphlk+EsMpq91F8=
Subject key identifier: A1:E3:88:1E:FB:E7:69:4E:56:AE:EC:25:2B:89:71:7A:CA:4C:D7:0A
Authority key identifier: 5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
Certificate issuer: /CN=5a293defbef10d73cf11f2be8655588eda68a44c
Certificate serial: 0197499EEBE1C8C041FCD8BCEA9800CDB8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
Manifest number: 9C
Signing time: Sat 07 Jun 2025 09:00:41 +0000
Manifest this update: Sat 07 Jun 2025 09:00:41 +0000
Manifest next update: Sun 08 Jun 2025 09:00:41 +0000
Files and hashes: 1: Wik9777xDXPPEfK-hlVYjtpopEw.crl (hash: aYK7P9XQzsxhTUUXGEbhUMigIgW95hzBVTopagN2kjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:eb:e1:c8:c0:41:fc:d8:bc:ea:98:00:cd:b8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a293defbef10d73cf11f2be8655588eda68a44c
Validity
Not Before: Jun 7 09:00:41 2025 GMT
Not After : Jun 8 09:00:41 2025 GMT
Subject: CN=a1e3881efbe7694e56aeec252b89717aca4cd70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ac:54:85:db:d9:5d:86:72:6e:37:e7:14:13:
1a:4c:44:73:e1:2f:b6:c3:4b:c1:dd:7a:84:22:47:
62:7a:e7:35:5b:e3:7f:3e:80:4a:cd:6c:70:13:92:
72:e6:f8:a4:28:c8:61:da:87:e1:7f:aa:c9:03:be:
f5:fb:45:da:13:59:ca:0f:d2:ea:c0:bd:8b:66:17:
39:0b:db:ff:d5:03:75:21:ea:67:31:21:b9:44:f8:
a1:3f:cb:75:c5:c8:dc:17:45:67:f4:70:1f:3e:e4:
4b:dc:59:c9:bc:86:8b:cd:fc:45:d0:5e:a0:0b:0b:
bf:8e:33:9e:a0:16:34:51:5b:d1:a7:bc:83:73:c6:
a8:b5:0b:ab:58:f2:55:0e:b4:4e:2b:b5:a2:6d:06:
19:23:a8:99:1d:7c:9d:48:1e:a1:71:22:1a:7a:66:
e0:fc:e3:77:3d:28:c9:79:80:6a:b4:87:cd:79:00:
31:e6:b5:64:ca:6b:35:0a:e4:cc:f3:e8:2c:64:74:
ff:b6:bc:c9:f7:a9:e6:8c:2b:80:c7:90:58:7e:dd:
ff:2f:02:32:47:77:dc:0a:14:e0:e8:fc:8d:b1:c2:
2f:ac:0f:dd:32:16:4c:b5:91:95:d9:73:a4:bb:58:
15:7c:9d:62:15:e5:72:08:69:e0:0b:c6:81:63:22:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E3:88:1E:FB:E7:69:4E:56:AE:EC:25:2B:89:71:7A:CA:4C:D7:0A
X509v3 Authority Key Identifier:
keyid:5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e2:a4:80:45:57:18:22:57:48:8e:7d:a1:58:44:8e:25:6d:
08:0e:33:ee:18:af:3f:79:46:af:d6:08:54:b2:93:7b:21:2a:
6e:fc:08:6f:25:03:91:c9:cc:89:6b:e0:fe:9d:d9:e4:e3:bd:
b3:87:8e:e2:3f:82:09:30:02:d8:f2:bd:8a:aa:e0:c2:17:2b:
81:71:2d:1a:e6:79:00:dd:a0:65:a8:a0:55:c4:41:b6:1b:8e:
fa:90:8a:63:45:49:12:ff:7b:9a:4c:05:89:97:88:a1:c0:16:
08:21:21:93:4d:2c:86:9f:c1:84:15:ec:6c:a4:a8:a2:d9:c0:
b9:33:aa:ab:43:23:31:50:9a:38:76:49:73:cc:e8:17:73:d5:
e0:9b:c3:5c:ce:bd:75:db:50:74:a4:53:b3:1e:3c:7a:16:b4:
fd:2e:15:59:d6:de:e5:bf:d1:75:67:20:1e:e2:6e:f8:65:07:
8f:af:8f:e2:4d:ea:fb:82:6c:81:6f:75:31:0e:bf:58:0a:1e:
12:5a:c2:40:80:78:b7:13:d7:a5:b5:b5:5b:e4:11:6d:50:c9:
1e:53:f0:a0:f1:ce:4c:f8:49:b9:a2:59:11:58:2c:4c:d1:3f:
67:e5:a0:58:f2:ce:f3:3f:99:2b:be:fb:7d:4c:1f:3f:a2:2f:
19:45:2a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:22:20 2025 by rpki-client