Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
File: WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft (raw, json)
Hash identifier: AyJif3zTvc71AOb4D5clGDB+68FlmoW16DGBbzJRiuw=
Subject key identifier: CB:74:F0:28:57:C9:8D:B9:1A:36:A4:16:9E:AE:62:B4:06:E4:98:EB
Authority key identifier: 58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E
Certificate issuer: /CN=58afedfef67918490634be4e2b75c11b70c2ea2e
Certificate serial: 019A71B79CAFEDB91BA5940784B96AFEF90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
Manifest number: 0B4A
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl (hash: iukF+bgWAfUFgQbJvQFCJ/Odl8A48+NJGokP6NuPaXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9c:af:ed:b9:1b:a5:94:07:84:b9:6a:fe:f9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58afedfef67918490634be4e2b75c11b70c2ea2e
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=cb74f02857c98db91a36a4169eae62b406e498eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:42:26:a6:ad:4e:3c:c5:16:a1:8a:fa:68:
0a:b5:b9:25:e7:fe:b8:b6:92:fd:dc:d0:0a:3e:49:
24:7b:35:03:97:11:b9:54:4c:98:09:4a:1b:32:e3:
c5:1d:de:c8:01:a5:f3:f1:a7:4c:07:29:6c:a6:16:
f7:ec:b0:df:5f:4a:58:09:5e:1a:3b:9b:d1:bf:de:
7d:1c:02:dc:52:bc:57:6d:37:0b:1d:6a:36:c1:6b:
63:df:ff:70:06:4f:1f:6b:87:b9:e9:f8:8b:f2:b0:
39:ed:68:0a:86:25:25:d0:e5:12:c1:b3:f0:f1:37:
35:c4:55:e0:6d:6f:92:59:59:5e:45:ee:7d:3c:53:
61:87:a6:27:ab:a9:f9:47:11:79:d4:c0:4a:fd:d3:
a4:af:d6:57:df:6b:e5:2f:85:db:f7:6c:eb:2f:76:
8a:7d:69:f0:b2:a4:e6:fe:94:ed:2d:87:ea:e7:cb:
29:6f:3a:c0:cc:70:49:e7:a4:bd:de:b4:f4:62:cf:
83:8f:af:20:64:be:0f:93:a7:ca:4d:66:d5:88:24:
34:65:77:de:b3:0d:08:23:1e:c8:a4:dc:36:de:32:
0b:7a:47:06:23:95:6e:3f:02:a5:74:de:e7:b8:60:
bb:6a:54:b3:51:7c:85:87:ce:de:e1:84:09:c5:a8:
94:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:74:F0:28:57:C9:8D:B9:1A:36:A4:16:9E:AE:62:B4:06:E4:98:EB
X509v3 Authority Key Identifier:
keyid:58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c0:d0:9e:ef:2f:cc:c0:45:f6:01:5b:21:64:d3:0a:05:63:
b7:5e:e4:a6:61:9a:f8:80:10:48:f3:03:19:06:e2:ef:24:6f:
5c:52:bf:0a:da:77:dd:10:48:e1:79:32:c7:58:23:71:ee:04:
a2:88:45:0a:b4:e0:35:03:bf:c9:89:ae:d4:68:90:82:0b:2a:
c9:50:50:71:c0:7a:39:2b:8a:b5:96:aa:8b:1b:6c:6e:a8:4e:
95:f4:b9:53:5c:12:b6:c4:f2:80:fe:23:7a:78:65:e1:43:bd:
7f:81:81:d2:2e:6a:24:99:ac:3e:4c:5f:db:50:b8:4c:af:99:
b0:bf:22:e4:f7:d8:9e:ea:65:0f:3a:9b:9b:64:99:46:da:d1:
76:cf:8b:11:45:29:a3:7a:ac:03:99:74:42:cc:1c:b3:49:fa:
ea:6b:ca:7a:26:6b:90:47:b0:8f:dc:5d:02:aa:eb:5b:99:96:
3c:65:ae:bc:10:5e:00:a2:77:36:6a:88:c3:66:ef:64:b0:9c:
30:d5:9e:be:5c:2c:d6:ed:d1:92:03:a7:c4:e9:26:39:03:8a:
8d:38:7c:68:8c:4d:c7:5e:4a:e6:c3:b7:76:04:01:6d:37:19:
18:6d:67:ea:2f:23:97:3c:62:a3:c7:4b:82:51:3d:ba:b5:42:
da:dd:0b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:17 2025 by rpki-client