Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.mft
File: WMTqejhe-jZyQZa0NDlguqR8vrc.mft (raw, json)
Hash identifier: X1chShLeHoKBuqV9/+99OgeCNYPbA2QwfM4YLgeafag=
Subject key identifier: 9A:77:96:C7:19:47:6E:56:37:FE:B3:66:D8:B3:07:AE:E2:82:AA:4E
Authority key identifier: 58:C4:EA:7A:38:5E:FA:36:72:41:96:B4:34:39:60:BA:A4:7C:BE:B7
Certificate issuer: /CN=58c4ea7a385efa36724196b4343960baa47cbeb7
Certificate serial: 01974CD6AD0805A918D7C204E5D6052DB163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.mft
Manifest number: 0E59
Signing time: Sun 08 Jun 2025 00:00:26 +0000
Manifest this update: Sun 08 Jun 2025 00:00:26 +0000
Manifest next update: Mon 09 Jun 2025 00:00:26 +0000
Files and hashes: 1: WMTqejhe-jZyQZa0NDlguqR8vrc.crl (hash: QlWcvj+4Fkrchb6cE/iUgF8Vy97OIHLB/94MmQgQKWs=)
2: mFnUZao6jHrrA3z87rGBpSOdTUg.roa (hash: 1fZ4TbgHvorfr9usJsO+SOpspxtknAWHwxdZ49h/ILc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:ad:08:05:a9:18:d7:c2:04:e5:d6:05:2d:b1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58c4ea7a385efa36724196b4343960baa47cbeb7
Validity
Not Before: Jun 8 00:00:26 2025 GMT
Not After : Jun 9 00:00:26 2025 GMT
Subject: CN=9a7796c719476e5637feb366d8b307aee282aa4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:5c:f4:cd:0a:fc:2f:92:c4:99:26:66:57:
f2:99:22:71:ef:31:32:b1:93:61:f7:37:12:f6:7c:
db:c8:9d:20:15:a3:a5:8d:e9:eb:d7:a6:82:c4:ec:
35:28:45:00:4b:93:cc:b2:76:c0:35:df:da:3b:fe:
dd:28:50:c0:e8:2f:39:84:4a:33:b1:6b:5c:d6:a8:
8e:3e:48:78:28:53:b2:66:31:e4:2e:dc:86:2c:f3:
19:58:4d:dc:7a:27:2e:ab:7e:a7:ed:01:69:a8:9c:
9f:09:4b:72:ec:a3:9a:31:52:3e:4b:72:eb:b1:85:
7a:01:eb:7a:25:55:a5:e1:45:93:be:01:3e:1c:0e:
4e:3a:86:a7:62:d9:34:e9:f0:d5:87:af:70:fb:02:
03:e7:96:75:d1:9d:09:d5:4e:6a:9e:4d:ba:3e:fd:
cc:58:f4:0e:f0:d3:90:26:67:c9:46:39:eb:27:b0:
49:f4:25:1d:4a:db:d1:06:37:09:60:bb:b7:e6:77:
36:f8:f1:d7:2e:5e:58:72:d5:d1:16:92:aa:ff:09:
fc:ed:80:f5:98:ed:c2:00:89:80:ca:76:e1:8c:e9:
f2:0b:73:ea:58:83:46:bc:2b:60:ce:a1:c9:f3:f2:
76:da:b2:04:2a:c9:d7:21:ef:5f:aa:3d:0e:c6:04:
3c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:77:96:C7:19:47:6E:56:37:FE:B3:66:D8:B3:07:AE:E2:82:AA:4E
X509v3 Authority Key Identifier:
keyid:58:C4:EA:7A:38:5E:FA:36:72:41:96:B4:34:39:60:BA:A4:7C:BE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:22:23:0c:22:1b:88:fa:8b:e7:61:46:2a:f4:5e:7f:42:03:
94:5d:98:a9:63:60:15:58:14:78:83:df:68:da:ec:00:39:a9:
43:75:f6:d5:37:23:1c:25:f6:39:29:76:d4:0d:71:be:22:88:
0b:17:a3:b6:fe:d1:a8:9d:79:9f:65:b0:a6:fa:1f:bd:16:d3:
dc:c0:e5:52:41:ba:15:df:92:a0:92:04:35:7b:76:92:4f:f7:
90:ce:29:fd:6c:81:d3:6d:f3:ca:26:39:78:12:f8:bb:b2:e1:
23:28:98:2c:f2:c0:5e:7c:61:34:72:da:15:39:0f:a7:70:a7:
5d:5c:2f:df:d8:1c:97:a4:bc:1a:16:ca:92:a4:3c:eb:fe:91:
56:df:ec:91:6f:ed:52:c5:29:b7:50:b4:fc:6e:9f:39:0a:27:
36:ad:38:8e:df:bc:53:af:72:c0:3d:41:8a:95:f3:3e:3f:bf:
9f:38:19:ea:8b:61:26:6d:13:7f:90:28:6c:38:06:49:41:c7:
5c:f5:f5:ee:eb:a1:9e:2b:04:9b:a3:60:40:25:af:dd:26:eb:
e3:cc:07:ca:fe:cc:46:22:8c:cf:1b:8c:65:3a:ec:91:f8:d1:
be:d6:0d:10:7d:68:c2:4e:d0:5c:0a:66:a2:a7:4b:67:ca:f5:
c6:0f:6b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:53:10 2025 by rpki-client