Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
File: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft (raw, json)
Hash identifier: 0HE/8aY0abotfxQnEA4DBrlEmWqG7/b135WAVhsqfCU=
Subject key identifier: FA:1A:FD:85:3B:04:09:46:7E:7C:BF:BA:9F:79:A2:99:10:5A:A6:26
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Certificate issuer: /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial: 01975D25FE102549636042751D4F985AF292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
Manifest number: 1587
Signing time: Wed 11 Jun 2025 04:01:00 +0000
Manifest this update: Wed 11 Jun 2025 04:01:00 +0000
Manifest next update: Thu 12 Jun 2025 04:01:00 +0000
Files and hashes: 1: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl (hash: zHtSaZu44V3qWvHOy8oa9fDL0ss9MVZETv43CCmOFmM=)
2: aiBw7mg-7iWQbjUD1MChAVL_Coo.roa (hash: KeivAY3qo56HW2nMzFcSP1tB4CHei3XM2+AGnhTVVP0=)
3: jqsja3Ig_Inj8Kr-paXhHO8forw.roa (hash: lgk++/8/iHEqAJTqQrY78sNZtOq1z4JSDJP8vNMWH0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:25:fe:10:25:49:63:60:42:75:1d:4f:98:5a:f2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Validity
Not Before: Jun 11 04:01:00 2025 GMT
Not After : Jun 12 04:01:00 2025 GMT
Subject: CN=fa1afd853b0409467e7cbfba9f79a299105aa626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:39:ca:47:87:8a:08:ef:3d:ea:5b:04:e7:
cb:fb:00:c7:ee:57:ec:27:49:f3:aa:61:c1:17:b7:
58:cc:99:fd:1b:2c:f4:60:16:15:49:71:68:03:4f:
0b:ce:0b:fd:9e:50:da:bb:c1:7f:be:c2:4c:95:15:
97:4d:c2:6e:0f:71:93:2f:3c:eb:2b:b3:e8:af:33:
96:4e:88:1c:cb:0d:0a:ac:e0:5c:68:e4:42:e8:0f:
29:f2:f7:3a:39:f2:2d:13:02:35:23:e4:db:4a:fa:
86:c7:c7:37:f9:93:00:ae:44:d8:48:1b:d8:f1:dd:
23:03:63:c8:65:6e:4b:5f:14:00:00:6d:2e:38:03:
60:93:17:6d:7a:04:7b:ae:f6:ce:28:f1:ee:40:68:
88:1e:e6:01:59:fc:f0:30:12:ad:ab:1a:87:48:d7:
63:33:48:36:00:58:20:1f:5a:61:af:14:2d:9f:a7:
ec:d5:d7:06:00:f6:60:ec:3b:38:84:18:3d:85:00:
12:b3:2a:5d:6d:a6:f3:14:ee:ef:05:79:f6:5b:06:
fc:a4:30:ea:84:22:45:2d:91:48:15:fc:fd:a9:9a:
db:29:38:3f:06:77:3f:99:f1:ac:84:d0:38:36:c8:
bb:2f:4e:b2:41:97:a8:48:8d:f6:75:2a:63:00:be:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1A:FD:85:3B:04:09:46:7E:7C:BF:BA:9F:79:A2:99:10:5A:A6:26
X509v3 Authority Key Identifier:
keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:84:56:06:71:6e:44:cf:55:15:bd:5a:d3:f8:ee:d3:13:c7:
b1:b7:80:cf:47:c2:f5:8e:64:a9:48:ef:47:d2:bb:bd:5e:75:
00:0c:3a:31:0f:6f:87:44:57:78:53:69:3c:b0:20:39:ce:3a:
ae:eb:2a:f4:f1:43:1b:20:41:28:5b:bd:fa:10:3e:5b:0a:da:
d1:37:b9:77:6e:13:68:72:15:2a:92:d5:2e:b3:74:9b:20:00:
da:98:08:e3:67:3d:46:34:bc:81:60:72:46:99:43:bf:ba:76:
d0:9c:a0:18:94:68:a4:2e:fa:38:33:73:31:89:3e:72:0e:a6:
be:b0:21:ae:f9:e8:24:4a:f1:48:3c:62:ed:d9:f7:12:10:b0:
7c:80:ff:1e:b6:c4:1a:48:81:eb:bc:6d:e4:6e:36:03:83:f5:
a5:db:e1:b5:bc:23:a4:30:68:bb:4a:33:8c:16:7e:60:c1:8b:
69:ad:a4:54:1b:b2:45:ce:fe:e5:50:55:df:27:3b:10:ba:17:
ef:0f:d3:f7:c3:bc:50:49:3b:9c:05:e5:56:da:45:fa:2f:d0:
fe:8b:21:50:0a:47:27:4c:b2:52:1c:07:a6:45:47:a0:c1:68:
60:e9:17:61:4b:3a:fe:43:5d:51:2c:b3:c8:10:e0:e3:b7:06:
7c:12:48:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:06:09 2025 by rpki-client