Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier: rMbWmCTr5IpgIHXhINog8VBE34SkaIVNf7NZ3ME708o=
Subject key identifier: A6:05:B3:48:1A:70:EE:A2:A8:6B:15:48:1B:AA:80:35:4C:10:A3:47
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial: 019748FA0D1EBB22030BC63FD9C5A6E784AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number: 0EFA
Signing time: Sat 07 Jun 2025 06:00:36 +0000
Manifest this update: Sat 07 Jun 2025 06:00:36 +0000
Manifest next update: Sun 08 Jun 2025 06:00:36 +0000
Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: fNXymTTwtCjdnc8jXyOp0igVu+6N/6U4QSjzLnjXgnE=)
2: rwRRPql1rIQzsq_i06yzoO2wgHQ.roa (hash: 0FdnTsSRRUfY+3q4ZnKlxf+D+uYOXphiuhAQtxiPw20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:0d:1e:bb:22:03:0b:c6:3f:d9:c5:a6:e7:84:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
Validity
Not Before: Jun 7 06:00:36 2025 GMT
Not After : Jun 8 06:00:36 2025 GMT
Subject: CN=a605b3481a70eea2a86b15481baa80354c10a347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:ac:dc:4c:6d:1d:3e:34:da:37:92:8a:01:
68:9b:c1:3a:aa:9d:4a:e9:97:5d:df:2a:21:13:4f:
b0:f0:67:9e:4f:1a:76:08:c5:8a:89:a2:eb:4c:b7:
3f:a8:11:2a:91:77:5d:d1:86:33:2f:9e:c4:cc:b6:
cd:53:fe:43:34:67:39:d3:c2:d7:ae:47:74:fd:0e:
82:13:67:8e:0b:f5:44:a8:35:df:a8:8a:f4:34:1a:
5c:2d:7c:f1:44:0f:30:46:cf:55:11:31:9c:6a:1c:
29:71:6a:d9:22:18:de:50:14:bb:29:24:2c:44:93:
c5:e2:0b:61:d3:4e:0b:77:7c:ae:44:3f:8c:1b:45:
9c:18:a9:8c:ec:1c:c2:37:02:c0:9f:1c:09:65:2e:
aa:d6:c2:6e:e6:fb:95:6d:12:7b:ce:f0:56:ac:c3:
db:74:2c:4a:de:1a:12:46:cf:9e:12:22:e0:27:a1:
f7:e3:77:26:63:a7:15:10:99:59:c6:9d:7c:0e:27:
1b:40:f8:5a:70:8c:15:81:82:48:23:92:eb:4d:c0:
87:72:91:94:20:90:7a:39:e6:c6:f7:c0:d3:e8:63:
29:3b:76:ac:5a:ab:13:64:fd:43:50:79:78:5a:4f:
0a:70:fd:e7:80:84:dc:0e:a9:aa:db:92:99:19:13:
96:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:05:B3:48:1A:70:EE:A2:A8:6B:15:48:1B:AA:80:35:4C:10:A3:47
X509v3 Authority Key Identifier:
keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3b:69:91:4b:44:7f:7f:4d:d5:85:e5:de:f0:59:31:f4:75:
5e:91:a0:21:76:27:73:a7:3c:d3:e4:b3:af:09:b2:6d:95:b8:
7a:f1:30:45:7e:bb:33:35:99:aa:4e:ba:94:8a:e9:a0:b2:47:
d4:ea:50:47:96:e7:1f:6c:35:c6:c9:f5:f8:86:2d:31:70:4e:
07:c3:31:73:39:65:60:8b:76:6d:b8:f2:44:98:5d:bd:e0:8f:
31:50:ef:64:9d:0e:0b:3a:62:54:42:31:e9:67:b8:e8:c5:ed:
57:96:10:aa:ed:4f:54:59:2a:d5:ae:c7:71:7a:29:1d:47:2c:
f3:de:96:66:3e:3a:17:68:d4:b1:90:7a:1b:9e:21:6f:2f:4d:
25:0c:0c:f7:cf:6f:5b:7a:e7:f1:f0:e1:b8:49:ec:9a:9c:3c:
56:46:1d:50:8f:f3:02:e5:30:d5:64:fd:8e:af:9d:67:30:d2:
d8:3f:92:e3:d4:e6:e3:dd:b4:d9:65:69:c2:c6:d4:1a:0d:63:
3b:52:3d:f7:d5:be:51:97:85:cf:75:40:95:a0:9e:44:a0:82:
67:4e:5c:2d:6e:8a:c1:c8:b3:8b:ee:5d:7f:50:10:9e:4b:50:
b0:5f:5c:4d:6a:6d:6f:b7:de:d4:73:fd:a4:5a:f2:fc:74:9b:
30:0f:43:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:35 2025 by rpki-client