Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: CigN2SwBQoZw3InSA07jA75VoOQG3wWMd3lOU23ou8o=
Subject key identifier: 09:94:2D:E7:99:57:F6:37:49:95:77:36:0E:76:61:5E:23:DF:CF:CF
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 01976BF3EA1F107D7695EFC86E813D7F406D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 069C
Signing time: Sat 14 Jun 2025 01:00:36 +0000
Manifest this update: Sat 14 Jun 2025 01:00:36 +0000
Manifest next update: Sun 15 Jun 2025 01:00:36 +0000
Files and hashes: 1: 2symQxt9tiTp5JPRu9SVrhpHnoI.roa (hash: ETxwfWEk5Ji119X6QNRzmnwtDjfSz5qCO5WUq2I4qpI=)
2: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: VC5aOBdCiXMbk6wFMoTxpj7seK0+6OX7u2K2EcW/YMY=)
3: aiepDcInSC7XQM1NAo38Ltggcos.roa (hash: 6COc/WNOkQasZPkjRm4nKC/vd3bNAbojTsGDQ+J1+tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:ea:1f:10:7d:76:95:ef:c8:6e:81:3d:7f:40:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Jun 14 01:00:36 2025 GMT
Not After : Jun 15 01:00:36 2025 GMT
Subject: CN=09942de79957f637499577360e76615e23dfcfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0f:9f:a5:d0:de:6f:ef:da:b2:0d:e5:f5:02:
33:4f:43:48:87:b1:86:a7:2c:bd:97:86:46:40:fb:
61:0e:1a:47:75:90:f5:11:60:a6:f7:54:57:f7:6b:
6c:44:1d:ef:17:21:fe:a8:84:0d:5d:d1:bd:51:d2:
d1:26:05:0e:58:a6:1a:bb:b5:eb:e4:c5:22:1d:70:
73:87:66:73:78:18:3b:4a:c0:8f:10:2f:15:8c:7e:
d5:ad:a6:8d:3b:28:7e:df:d7:b6:5a:e1:35:36:34:
cb:c4:cb:d7:f3:52:22:fe:74:ac:bd:1f:ce:37:d7:
01:a2:84:c1:5f:69:6e:71:27:5b:f5:6e:1a:f2:0a:
8d:61:b2:cf:df:74:47:30:e3:3c:c1:d5:04:bd:f9:
fb:d3:2f:73:7d:f1:71:e0:78:cd:7c:d6:f2:ae:cb:
6c:50:f6:32:2c:7c:00:5b:40:01:d8:2d:f2:4b:13:
41:76:98:00:e9:b8:80:34:b0:4e:27:ac:c9:35:f9:
e0:95:ee:18:27:3f:1e:24:21:ea:11:db:c7:08:44:
b0:cc:f4:8b:e8:2b:11:79:da:c7:ec:4b:44:3c:db:
4e:e4:cd:b9:9c:37:14:81:1d:19:c1:13:1a:52:26:
13:c8:e0:5e:3f:dc:0c:d5:5c:87:86:83:09:ba:fb:
b6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:94:2D:E7:99:57:F6:37:49:95:77:36:0E:76:61:5E:23:DF:CF:CF
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:eb:f4:5f:e0:1a:d3:c5:6c:76:f2:cf:e4:db:68:95:aa:61:
4d:df:03:8e:39:0a:10:e7:1a:e7:d5:b9:52:d8:d3:61:ab:5a:
2b:cd:d6:f6:20:15:d7:34:c4:75:f5:38:67:fb:fa:4f:26:d8:
86:eb:80:87:c8:0b:8e:0a:3a:44:05:61:24:51:3e:be:df:d6:
5e:77:db:7f:42:9d:d3:12:54:a5:8b:56:ac:72:70:b3:71:c5:
91:3e:2e:18:77:a2:da:88:92:3f:74:7e:22:2c:32:9a:bf:31:
c6:7f:0b:00:37:16:20:31:1c:c3:1b:c2:c3:97:12:a0:69:b5:
03:54:5a:75:4b:d1:fe:c7:d1:93:5f:3d:1f:ae:b8:c8:f6:15:
6c:c5:95:1e:82:78:01:ab:9b:d9:fb:16:67:b7:78:68:36:0d:
11:07:6d:3e:3b:96:0d:f6:0a:c8:34:a4:89:ef:ee:c6:9b:81:
ee:e3:2c:8c:06:b9:2d:6c:81:5e:2a:e2:ba:ff:2b:29:d7:9d:
fd:34:90:85:1b:81:4d:c3:67:8e:7d:a8:9d:b7:02:10:13:61:
c0:28:6a:c0:cf:9e:16:3a:53:4c:9d:9c:af:06:e4:d2:e9:86:
bd:22:3c:13:76:4a:c5:6d:96:43:d3:40:eb:cd:63:38:1c:6e:
40:97:95:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:04:38 2025 by rpki-client