Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
File: wl1D3N4QuSMXnVsb106kOswiEJM.mft (raw, json)
Hash identifier: P8sNZ+bo8obTi//Au91IMjmFdTAcH+3Tked3E+PZcPo=
Subject key identifier: 8B:FC:34:29:2C:83:21:EA:C1:EA:51:62:86:34:7C:D2:61:6F:37:BA
Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
Certificate issuer: /CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Certificate serial: 019752D90338D8C8ADBFB80C8ED14DEAF49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
Manifest number: 0AF6
Signing time: Mon 09 Jun 2025 04:00:43 +0000
Manifest this update: Mon 09 Jun 2025 04:00:43 +0000
Manifest next update: Tue 10 Jun 2025 04:00:43 +0000
Files and hashes: 1: wl1D3N4QuSMXnVsb106kOswiEJM.crl (hash: V2UNpSYBAMpS/xvphkClKBVOPvAw7BRQo5TC9m5LNnI=)
2: yZvcP-Ps4yo6pgIgUKI5eTzNp2U.roa (hash: MDG4N8hqJwJQSXIs3A2EDMOqJcbMoF8xcYaXQrrz3Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d9:03:38:d8:c8:ad:bf:b8:0c:8e:d1:4d:ea:f4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Validity
Not Before: Jun 9 04:00:43 2025 GMT
Not After : Jun 10 04:00:43 2025 GMT
Subject: CN=8bfc34292c8321eac1ea516286347cd2616f37ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:dd:2d:e6:a0:3f:1e:0f:1d:76:49:62:8a:
60:d9:6c:80:e0:33:1c:66:c4:a0:80:80:c1:1f:23:
89:39:c9:d7:51:45:2c:0e:c9:af:82:1a:2f:18:b0:
8c:7a:cd:a2:6f:23:6b:fd:45:e7:88:2c:ce:02:c3:
4a:0b:a0:18:96:4f:be:e7:ef:87:98:21:82:3c:a9:
35:6c:b9:83:06:1b:c2:19:42:9d:7c:02:49:13:61:
2d:01:0b:e8:40:2d:58:f3:94:79:15:13:3c:91:4c:
8c:93:e6:60:64:12:a5:e9:e4:e8:70:1e:25:7a:b8:
c6:fa:e8:2d:60:4d:17:aa:fd:05:6c:9b:30:91:dc:
7f:55:d9:70:cb:49:cb:8b:7d:8a:5b:d3:c6:98:fb:
15:b0:36:58:86:2b:1b:32:8b:b2:b7:d6:4e:2c:65:
7a:f5:0c:24:77:0c:62:a7:0b:65:fc:22:fb:65:53:
a9:67:0f:63:ab:94:95:ca:f7:d0:12:5b:47:7e:56:
14:d5:86:45:02:bf:b5:48:a3:8a:84:96:ac:f0:cc:
f8:1e:ac:5f:03:5f:25:0d:ce:00:e2:81:39:2b:f6:
76:13:77:f0:7b:fa:c8:35:2f:7d:53:88:a8:e9:0c:
a9:b1:e3:df:30:82:8e:ea:82:f7:d7:79:a7:4e:c3:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FC:34:29:2C:83:21:EA:C1:EA:51:62:86:34:7C:D2:61:6F:37:BA
X509v3 Authority Key Identifier:
keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:39:a4:9d:f7:6d:a6:bc:af:1b:3c:15:80:0c:56:ac:1d:3a:
36:3b:d1:29:a7:5f:96:d2:fa:df:55:f8:99:d0:14:e4:32:df:
ec:f2:c2:be:d0:b9:f4:74:f7:a0:2d:ef:6a:e5:ee:7b:3c:1a:
d4:53:5a:34:d6:e9:d8:3c:11:4f:ff:d7:32:ef:26:d4:21:b8:
d9:54:d8:75:ed:ee:5a:cc:91:07:c8:bd:fd:a5:ee:de:59:54:
c9:24:41:16:0c:2d:de:ae:88:f5:33:3a:bb:34:95:e5:45:4f:
b2:c0:a3:0a:e8:22:9d:fe:a1:6b:b1:f8:d5:34:4f:c3:92:86:
74:1e:4c:85:ca:a2:60:93:d1:3c:c4:24:03:b3:b9:0c:2e:74:
7b:03:10:8f:9c:71:28:e0:9d:02:22:87:40:8a:eb:1d:8d:51:
50:1e:ea:87:a0:dc:f7:db:5f:f7:bb:a9:6e:c3:3f:b0:fe:1c:
50:85:e8:cb:2b:ce:95:f6:be:14:e9:dd:36:4d:4f:3c:13:a4:
1d:23:3f:5e:14:b7:5e:2c:6b:b1:dc:92:b8:19:88:2a:62:d8:
73:de:57:1c:89:09:c2:21:9e:68:de:e7:24:27:ae:0e:67:35:
42:cd:f0:b8:28:e8:dd:cd:7d:19:9c:46:20:db:bb:c9:fa:00:
55:c5:19:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:44:24 2025 by rpki-client