Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
File: wl1D3N4QuSMXnVsb106kOswiEJM.mft (raw, json)
Hash identifier: Aiat+eijM0t3HoiuiT2Uc22ikjtUtnrCyhn7HJu4oDo=
Subject key identifier: 02:AF:33:D2:A8:4D:F5:2B:90:F7:59:7C:CB:1C:E9:60:77:E6:5E:A1
Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
Certificate issuer: /CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Certificate serial: 01975C80D6C723564C40268E2FC947043BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
Manifest number: 0AFB
Signing time: Wed 11 Jun 2025 01:00:36 +0000
Manifest this update: Wed 11 Jun 2025 01:00:36 +0000
Manifest next update: Thu 12 Jun 2025 01:00:36 +0000
Files and hashes: 1: wl1D3N4QuSMXnVsb106kOswiEJM.crl (hash: aguzg9zJTm8T2zI+cfEfRrRxuAelciNLfIQdlJInVsw=)
2: yZvcP-Ps4yo6pgIgUKI5eTzNp2U.roa (hash: MDG4N8hqJwJQSXIs3A2EDMOqJcbMoF8xcYaXQrrz3Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:80:d6:c7:23:56:4c:40:26:8e:2f:c9:47:04:3b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Validity
Not Before: Jun 11 01:00:36 2025 GMT
Not After : Jun 12 01:00:36 2025 GMT
Subject: CN=02af33d2a84df52b90f7597ccb1ce96077e65ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:3e:e8:31:e4:de:28:b0:e9:89:26:7a:18:
60:5d:65:37:ea:6b:4f:0b:46:3b:d9:07:7a:b8:ca:
03:cf:10:7b:a1:29:a0:41:9d:38:21:58:49:dd:63:
1b:8b:17:1b:0c:b0:44:c6:b1:77:25:3d:ae:f8:6f:
8b:49:0e:e5:53:d5:6b:db:5a:f3:32:b9:40:a9:7f:
43:c3:af:80:89:8c:61:54:f0:5b:33:7c:3a:d7:43:
a3:f2:2e:8b:94:77:55:2e:b4:23:6f:53:64:fc:44:
b7:31:c4:11:61:30:a7:28:59:1b:87:33:4a:e0:21:
29:bb:5c:86:f6:f8:cf:31:4f:6a:5a:1f:b4:e5:97:
db:10:88:33:97:b0:b6:4a:1e:a6:22:e1:a6:67:26:
44:0a:81:ee:39:99:97:56:05:ab:39:06:c6:37:38:
cc:9b:9b:01:c5:95:14:1e:43:01:82:60:8f:78:86:
ce:e8:e4:5e:c7:c7:42:1c:75:45:57:2e:42:fd:e2:
99:20:4c:2b:c2:55:da:6b:12:0b:98:4b:04:0a:0d:
60:c5:db:59:1b:21:92:51:82:48:78:a9:ae:f0:47:
1b:4e:ff:ec:9d:0f:f8:bf:c5:96:cb:72:1c:67:9a:
16:e3:b2:09:9c:d2:44:9b:4b:96:97:89:d6:09:c0:
9f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AF:33:D2:A8:4D:F5:2B:90:F7:59:7C:CB:1C:E9:60:77:E6:5E:A1
X509v3 Authority Key Identifier:
keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f9:b0:16:a1:ad:46:d7:41:72:a5:11:5b:47:91:df:4b:7c:
27:3a:41:f6:5a:bf:d0:89:17:29:68:f8:83:ff:08:08:16:71:
00:d7:16:39:91:7e:51:e8:3a:f7:c5:a4:53:7b:af:42:ff:c3:
2b:92:95:a8:4b:d5:51:86:ba:9b:c1:36:37:7b:2b:71:81:e9:
05:44:f8:c1:31:31:83:17:8f:83:35:76:46:93:11:3b:a2:3d:
a8:88:7a:ea:ae:73:40:e6:6e:7d:c9:1b:cd:26:3e:30:86:04:
f1:e2:42:3a:b9:83:22:e7:67:6d:f4:df:67:b5:63:f7:b2:0c:
81:58:6e:bc:3c:90:3d:7c:c1:f9:fb:d7:1e:0a:5b:ff:35:3a:
6b:03:ac:49:22:03:f2:0f:b1:8a:7d:5b:aa:b8:69:8d:17:99:
b2:96:b3:4c:54:a2:81:ac:ee:ae:63:3c:39:e1:ae:43:e3:a1:
3b:91:8b:c9:b9:bb:f0:50:ad:25:7d:6f:18:76:71:40:05:84:
11:34:f7:33:9a:90:95:9d:f4:2c:9f:4a:28:6d:9a:fe:4a:94:
7b:a1:b3:f2:96:51:f5:a6:1a:d5:5c:7c:1c:fb:f2:43:94:14:
c3:8f:e0:e5:90:18:de:e0:b2:82:91:1a:00:14:6f:28:08:dc:
14:c9:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:46:31 2025 by rpki-client