Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: 2s3ZS0F7Z2NFKwAXNegc3/PMM4vLiX26yDZ7FRHSjyU=
Subject key identifier: 58:AE:B6:6C:75:BC:97:DE:3B:F5:B6:2B:BC:18:8C:80:08:B1:D3:2E
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 01976DE2A1BDC341CB19787A268D8C7DFACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 069D
Signing time: Sat 14 Jun 2025 10:00:58 +0000
Manifest this update: Sat 14 Jun 2025 10:00:58 +0000
Manifest next update: Sun 15 Jun 2025 10:00:58 +0000
Files and hashes: 1: 2symQxt9tiTp5JPRu9SVrhpHnoI.roa (hash: ETxwfWEk5Ji119X6QNRzmnwtDjfSz5qCO5WUq2I4qpI=)
2: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: YpWJosxBerojTLG6kj2Yj7KnZoQ7hg+tdeuh5ZEPMW4=)
3: aiepDcInSC7XQM1NAo38Ltggcos.roa (hash: 6COc/WNOkQasZPkjRm4nKC/vd3bNAbojTsGDQ+J1+tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:a1:bd:c3:41:cb:19:78:7a:26:8d:8c:7d:fa:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Jun 14 10:00:58 2025 GMT
Not After : Jun 15 10:00:58 2025 GMT
Subject: CN=58aeb66c75bc97de3bf5b62bbc188c8008b1d32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:54:c8:85:78:c9:81:89:c2:12:15:15:0c:cf:
d3:dd:1a:93:53:c4:ac:88:d8:78:db:eb:c7:25:a6:
2e:be:49:46:72:f5:cb:b5:6b:5c:f9:6b:09:f9:4b:
f3:1c:1b:ff:ec:fe:2d:81:d0:77:b3:d9:a9:c3:95:
fb:0c:9d:53:d1:a7:48:30:aa:e3:44:8f:f7:7f:b4:
a7:30:d7:9a:97:0f:c7:b2:ee:01:6e:4d:f5:d8:81:
3f:83:a1:ea:d7:d3:21:58:db:c7:e8:dc:9d:3b:39:
3f:d3:52:5c:af:7c:44:3d:b0:62:d5:df:04:f2:5a:
72:e6:f3:0d:89:af:31:07:b2:ad:f8:5a:c3:23:66:
69:e5:e8:3a:39:55:5b:47:4d:9b:c3:2a:63:28:2e:
79:5e:eb:b5:1d:7a:c7:c7:1b:11:eb:e2:f9:45:c5:
02:0d:74:5f:74:cd:fa:fb:31:fe:d3:41:9d:17:fd:
b5:2f:30:d3:03:2a:27:1f:97:0f:e4:3a:f4:ab:94:
43:05:ed:86:e6:51:31:79:2e:54:71:5e:0b:de:86:
ad:15:dc:81:a9:c2:4b:45:2d:7d:72:9c:14:d3:77:
5d:b8:76:4b:ed:2a:32:e4:c4:27:12:51:b3:05:27:
22:a5:20:55:6c:62:e6:93:34:cc:aa:d4:59:fc:49:
99:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AE:B6:6C:75:BC:97:DE:3B:F5:B6:2B:BC:18:8C:80:08:B1:D3:2E
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:47:ac:00:1b:5d:63:66:7c:b1:4d:aa:a8:a4:8e:49:e5:84:
3c:df:b0:54:1a:c0:31:a7:42:92:e9:d1:95:68:6d:8d:a1:2d:
3e:76:2d:e4:98:fb:cf:63:df:a6:f1:a9:6b:09:9e:9b:c2:b5:
09:ef:24:fe:e9:3d:48:4e:d5:b6:ac:e5:f1:e0:6f:0e:52:59:
89:33:37:a9:78:a3:4c:67:dc:67:04:33:9e:6b:4d:89:8b:37:
e5:34:a6:fe:34:95:f6:59:a3:48:63:d5:68:b9:43:0e:08:32:
e5:3c:d3:2f:2e:46:b6:ef:ff:66:76:eb:da:7b:62:f8:01:dd:
bd:c7:44:17:61:8e:8b:e6:93:b0:16:16:ce:67:06:bc:d6:c2:
0c:07:7d:67:42:91:f8:68:32:83:07:8c:8e:54:dd:d2:3c:21:
80:65:76:9c:c4:0b:5d:3e:e7:c3:96:51:77:9f:1c:0e:8a:5b:
ed:08:27:c1:a7:69:3b:69:01:34:69:0d:53:c4:04:78:64:54:
82:76:dc:db:eb:75:a4:93:05:9e:6f:c2:42:32:95:1c:23:71:
d2:fe:c5:8b:30:ac:5c:af:eb:31:46:2c:b3:30:46:20:e5:9f:
0b:40:55:90:7c:08:9f:92:32:31:35:e7:8e:ad:b3:d6:50:72:
d9:f0:5b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:37:29 2025 by rpki-client