
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
File: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft (raw, json)
Hash identifier: hJB/ONkf6rTnuMAQvpa8tysVbmDQW4NBmdj6u0/KOzY=
Subject key identifier: 54:A4:01:82:4F:F8:BF:B3:60:8E:64:0F:D7:05:6F:D8:7B:24:EB:5F
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Certificate issuer: /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial: 0197556C462E78E53076BA86AFCAC5357028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 16:00:48 +0000
Manifest this update: Mon 09 Jun 2025 16:00:48 +0000
Manifest next update: Tue 10 Jun 2025 16:00:48 +0000
Files and hashes: 1: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl (hash: 5ZYyFbtLiIkPdqSGaDb7i8naGR40ULQwX1QCForTSwI=)
2: aiBw7mg-7iWQbjUD1MChAVL_Coo.roa (hash: KeivAY3qo56HW2nMzFcSP1tB4CHei3XM2+AGnhTVVP0=)
3: jqsja3Ig_Inj8Kr-paXhHO8forw.roa (hash: lgk++/8/iHEqAJTqQrY78sNZtOq1z4JSDJP8vNMWH0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:6c:46:2e:78:e5:30:76:ba:86:af:ca:c5:35:70:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Validity
Not Before: Jun 9 16:00:48 2025 GMT
Not After : Jun 10 16:00:48 2025 GMT
Subject: CN=54a401824ff8bfb3608e640fd7056fd87b24eb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0c:64:9f:9b:0b:4d:8b:19:8b:d2:3e:4a:34:
70:45:32:87:bf:93:bb:46:65:d2:27:05:db:6e:85:
54:c2:25:59:16:85:53:28:1c:ec:2d:0e:5a:25:c1:
21:b1:fe:b8:35:76:a7:83:73:53:0b:f7:01:a1:32:
5e:34:11:fe:08:a9:c6:2c:58:12:37:52:d9:48:98:
9d:bf:f9:cb:73:f0:61:d8:b7:6c:fa:15:cb:99:f1:
66:2e:fb:29:8b:e5:af:11:7f:40:5b:1e:45:7c:61:
ac:46:41:7f:5e:b1:4d:f3:61:ce:72:37:0e:1c:9d:
19:ad:00:33:24:25:0d:82:9e:6e:84:70:56:d0:87:
82:f3:e0:49:cc:0f:7f:f2:93:ac:35:39:80:a4:05:
4c:4d:d7:9c:2d:9a:00:6d:33:12:f7:4f:62:bd:f1:
9f:3a:1e:a0:b7:b6:71:08:4c:f4:09:9a:10:b6:e1:
3d:2a:b1:72:c6:ef:54:4c:a5:32:0f:54:e5:aa:c1:
70:e1:ea:7e:e6:23:96:52:a0:58:6a:c8:00:7c:8d:
fa:75:f6:76:c5:60:fc:14:f1:0f:cd:1f:74:74:96:
92:35:a9:d6:59:07:bf:7f:5c:64:73:ec:61:af:80:
e2:a4:5d:56:2a:af:29:f4:62:26:40:03:e0:4b:8f:
7c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A4:01:82:4F:F8:BF:B3:60:8E:64:0F:D7:05:6F:D8:7B:24:EB:5F
X509v3 Authority Key Identifier:
keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c5:5b:4b:dc:ff:13:b3:9a:22:15:82:54:67:b6:26:8a:2c:
ba:86:85:66:ce:eb:0d:09:e3:b9:ae:4f:6b:11:57:99:0f:3c:
e5:a3:3d:44:fe:f7:be:4f:d6:93:32:eb:ea:0f:d8:7b:e4:5d:
0f:cd:6c:a8:53:d0:68:11:36:36:6b:0e:64:af:8b:bb:63:08:
fb:9a:cb:41:1e:44:5a:40:4c:c7:34:c6:9f:2c:62:de:41:d2:
57:53:85:6a:64:4b:b7:59:e7:9d:a0:a8:12:a0:ee:65:23:68:
47:37:2f:f5:61:f3:08:81:fc:f7:03:40:8c:cc:e8:da:84:d1:
05:cc:ab:a5:18:8f:a1:2f:cc:d7:3c:32:18:0d:c3:2a:6c:c0:
47:19:0d:dd:37:a4:f8:a2:68:3a:a7:06:f8:84:d6:3f:fb:4a:
87:8d:83:1e:a2:61:90:f7:a1:a6:ef:e2:22:89:4a:1c:4c:2a:
46:f0:1d:69:d5:7d:a4:e6:5f:be:fe:ce:02:64:1d:e8:be:b3:
45:4d:9c:eb:3b:96:32:92:45:23:da:f2:4f:78:5f:57:d4:0d:
c1:ee:d6:62:72:06:d8:70:5b:e6:b2:04:8e:b2:19:93:0d:fb:
1e:42:fe:8c:ad:1f:6b:bd:21:bc:d9:d4:ba:1f:08:90:c7:4a:
d4:08:a4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:43:27 2025 by rpki-client