Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json)
Hash identifier: JgmR/+VCDcJvasAWi98YhobWQBZhvdSOLTAAD4bR3gg=
Subject key identifier: B8:86:66:5C:F9:4A:D6:E9:F4:C8:14:A0:CF:5B:2D:34:CA:9D:A4:A3
Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba
Certificate serial: 0197463002EBD1CBE70FED6632161E3DDBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
Manifest number: 2F
Signing time: Fri 06 Jun 2025 17:00:40 +0000
Manifest this update: Fri 06 Jun 2025 17:00:40 +0000
Manifest next update: Sat 07 Jun 2025 17:00:40 +0000
Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: yUWKmk3VuJOIlSsZPEsrVFoG+i0LVrZYpXjyR1QDmnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:02:eb:d1:cb:e7:0f:ed:66:32:16:1e:3d:db:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba
Validity
Not Before: Jun 6 17:00:40 2025 GMT
Not After : Jun 7 17:00:40 2025 GMT
Subject: CN=b886665cf94ad6e9f4c814a0cf5b2d34ca9da4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:57:f2:e3:ed:64:90:6c:48:fc:5c:33:69:
26:7a:12:25:f6:f0:86:ce:96:73:0f:66:b6:05:8e:
31:75:a3:29:f2:e8:ca:7f:cf:c7:2f:4d:3a:3f:e2:
7c:0c:cc:fe:3a:a9:56:5d:2e:6d:a6:6c:3c:3a:99:
9c:d8:9b:cb:24:5c:c7:34:b1:2d:b6:e8:26:23:ed:
08:2f:5b:55:08:b0:db:81:26:f6:c6:e3:82:5a:9f:
21:df:c0:bf:d8:b3:f1:ed:a0:74:cb:e6:73:e6:e1:
51:15:f5:64:ca:ab:84:1d:9c:35:d4:5b:58:8b:d1:
39:6b:ab:d5:b2:55:f6:a0:f3:0e:3a:09:fa:d8:26:
01:a8:94:5b:22:7f:23:7c:c5:fe:45:a6:5d:a5:b3:
14:8e:02:86:ae:0d:65:54:b9:6b:47:d4:70:49:de:
5d:ee:ef:91:31:df:a5:3c:cc:e5:97:44:47:9b:ab:
0d:96:62:ee:2b:35:0e:10:30:21:fc:f7:d7:7a:cf:
2f:ff:cc:db:22:f7:44:d7:2a:b9:5f:c8:48:48:16:
b1:ff:24:51:4f:95:10:c7:2a:da:4b:5b:d7:9a:08:
ea:ce:5e:57:e1:0d:b5:fc:7d:9d:ae:34:b3:68:02:
0a:d2:56:4e:97:b4:b7:2d:86:14:67:eb:e1:73:7d:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:86:66:5C:F9:4A:D6:E9:F4:C8:14:A0:CF:5B:2D:34:CA:9D:A4:A3
X509v3 Authority Key Identifier:
keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:78:30:af:71:94:1e:96:e5:ad:80:f9:ac:e5:a9:c8:7d:9c:
32:10:fb:d3:eb:7f:69:c1:91:dd:38:f4:8d:88:6a:ff:5d:99:
2c:72:9c:70:1e:45:0a:fb:dd:5a:f4:ab:ca:4c:fa:74:00:72:
9a:49:8e:78:ec:da:90:4d:a0:0a:fd:4a:62:ed:0e:27:00:38:
84:cc:b0:88:e4:49:5f:d4:4d:15:e9:78:7e:86:ea:9d:99:47:
58:72:43:9e:49:16:52:c7:2b:0c:6a:e3:b5:74:82:84:cd:60:
43:96:8d:1f:76:aa:90:45:fa:57:9f:0f:da:56:a1:7d:67:f3:
3a:a0:67:fc:e7:d1:cf:47:52:05:23:f5:d6:46:d0:99:56:b2:
55:16:6b:6a:b9:7d:ad:a2:1e:f1:50:1d:65:e2:08:86:42:32:
83:a2:f6:e7:21:c8:6c:b6:23:00:a9:87:15:29:0f:72:c5:90:
73:2a:e2:7f:7e:18:46:e6:0d:d5:fa:55:02:70:cf:66:66:3d:
96:83:1a:87:77:e0:c9:02:cb:f1:ba:7a:5c:e4:c5:9e:0f:c5:
54:ad:cb:ea:72:ea:a6:c2:40:8c:c0:e6:e4:36:d5:56:37:1a:
cb:72:c2:a2:66:61:ba:25:df:e7:17:eb:43:c8:0a:7d:06:7f:
1c:5c:3d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:53:31 2025 by rpki-client