Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: Hwe3I5xGayyKyxYO5db19XXmw5ATyFyxkDbhLgcZf+U=
Subject key identifier: 8A:4C:32:89:E1:90:8D:08:CF:D2:9C:7E:E6:4A:0A:B2:3C:46:59:19
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 0197624BD184499A8CCB5716B6565B96055A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0697
Signing time: Thu 12 Jun 2025 04:00:25 +0000
Manifest this update: Thu 12 Jun 2025 04:00:25 +0000
Manifest next update: Fri 13 Jun 2025 04:00:25 +0000
Files and hashes: 1: 2symQxt9tiTp5JPRu9SVrhpHnoI.roa (hash: ETxwfWEk5Ji119X6QNRzmnwtDjfSz5qCO5WUq2I4qpI=)
2: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: fGa3Y9XWohAhyYz3OAi4EyrvdrHMEiAxqwGujo4+Fpg=)
3: aiepDcInSC7XQM1NAo38Ltggcos.roa (hash: 6COc/WNOkQasZPkjRm4nKC/vd3bNAbojTsGDQ+J1+tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:4b:d1:84:49:9a:8c:cb:57:16:b6:56:5b:96:05:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Jun 12 04:00:25 2025 GMT
Not After : Jun 13 04:00:25 2025 GMT
Subject: CN=8a4c3289e1908d08cfd29c7ee64a0ab23c465919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2b:e8:be:fc:51:e1:d9:c7:df:8e:a1:6c:4e:
a0:b8:e1:51:e7:ac:cd:bf:f5:bc:de:ac:a8:03:23:
9a:9e:f4:e6:a9:d5:7c:05:b9:c1:dd:9f:8d:bb:5c:
a0:56:a5:81:4d:d5:06:30:ca:18:6e:81:66:33:14:
9c:8e:78:62:b2:98:22:44:33:6d:f8:1c:80:2d:0b:
cd:ab:73:65:1d:4b:31:06:1b:fa:ed:2b:4d:b0:ea:
52:dd:6e:e6:68:0b:c2:ed:3a:7e:bc:89:da:1d:94:
02:07:00:d3:70:ea:09:c0:ff:9e:cb:63:7d:b7:b2:
7a:b9:b4:10:fe:40:54:f0:66:72:fe:da:fe:a0:55:
99:a0:3f:43:77:1e:90:c0:ad:5c:e6:76:ae:4d:43:
29:17:cd:dd:db:84:fa:64:ff:20:58:e1:67:5d:f7:
0c:a2:56:66:6b:b1:23:2f:0f:62:b1:24:45:37:22:
bf:b5:99:29:93:8d:ca:2c:12:de:15:21:44:ba:6d:
d6:bf:e9:55:df:4c:50:64:e5:e3:2d:3b:a9:3a:4e:
5b:5f:88:23:b2:bd:13:58:c8:ec:9b:5d:82:81:02:
d3:b4:37:bb:94:71:ed:be:31:76:d0:1f:3e:1a:de:
b8:c6:fa:7a:15:e2:14:46:73:9f:37:c9:a6:f6:50:
76:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4C:32:89:E1:90:8D:08:CF:D2:9C:7E:E6:4A:0A:B2:3C:46:59:19
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7c:ec:7f:7c:51:52:0d:00:f9:a5:fa:5e:b0:64:93:89:b6:
c5:61:a2:21:fc:c4:95:d4:d8:8d:83:cc:f3:07:32:44:96:0b:
bd:73:ff:9b:ad:12:c5:6c:bd:15:b7:1b:40:73:3a:eb:9e:e9:
6f:ec:64:e3:97:28:17:d3:94:45:54:e9:42:0e:ad:96:36:f8:
62:c1:c6:c6:58:f9:23:14:c0:c2:96:5a:c3:14:9c:0a:7b:f2:
35:f9:e1:47:c2:3d:29:4f:19:90:b5:66:1a:b8:ce:b1:6d:b3:
27:e9:2d:0b:4e:3a:b5:6f:e9:96:63:f0:59:9f:76:9f:4c:34:
8d:e0:ec:60:52:d3:f2:5a:b2:6e:63:09:d7:fd:17:36:14:ec:
9b:6e:07:60:38:00:83:b4:f3:b7:5a:6e:01:23:35:10:56:14:
01:e4:9a:0c:89:ac:2d:00:91:c7:ee:30:b8:32:bf:b9:36:02:
0d:e9:a5:df:ea:70:37:90:51:5a:4d:02:8e:74:3d:37:01:ab:
79:db:7f:5a:8b:de:f2:61:05:92:07:d4:6a:45:a7:b1:fe:d3:
8f:aa:43:b5:46:64:2d:2e:2b:cf:66:3b:32:6f:5a:92:7f:54:
86:9c:62:8a:e8:fc:40:7a:fb:2d:05:a4:e8:7f:e2:55:26:3d:
59:31:12:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:06:31 2025 by rpki-client