Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: DFJIDr8QlvPN0i2xy8ZQkefPItBBJv7wY++HKAofGdo=
Subject key identifier: EB:A1:A8:22:4E:73:F0:D7:6F:AC:9D:91:03:0D:64:FE:50:2A:D2:B4
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 019752D935F0AE81308E9E3AFA5F076788DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 068F
Signing time: Mon 09 Jun 2025 04:00:56 +0000
Manifest this update: Mon 09 Jun 2025 04:00:56 +0000
Manifest next update: Tue 10 Jun 2025 04:00:56 +0000
Files and hashes: 1: 2symQxt9tiTp5JPRu9SVrhpHnoI.roa (hash: ETxwfWEk5Ji119X6QNRzmnwtDjfSz5qCO5WUq2I4qpI=)
2: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: zoddJE4vyZceOdQSRm28++H3CGMdEbYWzfkUDJpcD3s=)
3: aiepDcInSC7XQM1NAo38Ltggcos.roa (hash: 6COc/WNOkQasZPkjRm4nKC/vd3bNAbojTsGDQ+J1+tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d9:35:f0:ae:81:30:8e:9e:3a:fa:5f:07:67:88:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Jun 9 04:00:56 2025 GMT
Not After : Jun 10 04:00:56 2025 GMT
Subject: CN=eba1a8224e73f0d76fac9d91030d64fe502ad2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:fd:32:85:b4:23:9c:a4:6a:4f:aa:54:6d:
1d:c1:67:1c:08:a6:b4:9c:01:d6:d0:79:97:a8:ad:
ff:de:b8:19:ef:97:02:c1:1f:31:41:7e:7a:4c:67:
30:54:60:fd:dc:f0:57:20:82:2c:9b:5b:c7:e4:f6:
d4:9b:d3:1d:4d:99:3e:19:6c:e4:9f:7a:93:08:29:
e3:d6:8f:bd:c6:82:11:c2:24:69:a1:42:1e:94:f0:
45:59:51:cb:de:fd:e7:7b:3b:8e:ae:96:b9:4c:b0:
17:7e:ea:4d:92:f4:8d:fe:99:a2:f1:e3:06:22:78:
a5:24:c8:7d:c1:10:8d:2f:84:81:20:d7:9d:2c:98:
4e:b8:29:43:24:9e:e0:fd:23:71:1f:0b:7e:66:71:
7e:18:9a:ca:48:39:df:79:cd:10:f0:70:ce:5c:62:
e8:dd:d6:b6:1a:99:4d:cd:e9:33:2c:f2:32:e1:36:
ff:c1:04:ca:bd:51:95:d6:b4:0a:99:04:35:24:57:
8c:68:1f:16:d4:ca:70:b0:96:c6:20:6f:ff:ca:85:
6e:f9:f2:e7:cd:a7:d4:b9:0e:71:ce:1d:4b:6f:c3:
62:b9:67:1f:f0:04:2f:99:7c:60:5a:71:7f:05:24:
28:0c:b2:81:9c:0f:67:3f:c5:45:cb:c3:db:fa:ec:
8d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A1:A8:22:4E:73:F0:D7:6F:AC:9D:91:03:0D:64:FE:50:2A:D2:B4
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d1:46:fb:d2:75:37:f0:2a:47:00:38:78:62:81:27:74:d8:
b9:88:2b:64:e7:ef:9e:f7:bb:12:98:7d:1c:e6:e3:0c:82:3c:
f6:c1:69:26:81:e6:95:e2:f4:23:35:e9:e8:37:32:13:7f:22:
2a:9d:d2:46:c1:21:4a:71:e2:9d:1c:7f:c8:4a:4a:88:b0:9a:
8b:63:b0:81:0a:da:a8:1b:c3:09:4c:eb:1a:b0:b5:b2:2c:e0:
c9:3f:50:b2:12:18:66:91:60:6c:9d:7b:f3:38:1a:96:1a:3a:
2f:be:f7:f9:c1:70:b1:89:68:00:7f:2d:e2:38:38:4c:ef:c1:
d7:67:e4:6c:1b:56:4a:e7:cb:40:31:1d:60:e5:8c:a1:2a:e8:
ef:df:ae:2b:84:0c:e4:63:1f:d3:6d:8b:bf:85:7f:3d:65:a9:
8b:9d:93:8d:0f:05:59:23:b3:64:68:94:85:1c:6a:4e:91:be:
13:55:81:ad:4d:37:d4:11:55:78:bb:bb:d6:6a:6b:b3:47:7a:
c3:93:f7:fd:39:b3:b3:38:47:9d:81:e2:93:dc:d8:54:e6:1b:
2d:99:01:36:59:a3:7d:8a:3e:06:90:94:dd:f2:86:a1:d7:4f:
43:a8:d1:e9:4a:7b:62:04:aa:ee:a7:a4:27:f3:f9:2d:1d:b4:
f2:61:39:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:22:25 2025 by rpki-client