Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
File: WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json)
Hash identifier: sZbPoppfqAf9JuO0MnA14d/f6Xxr51r2WBajyqt4FD0=
Subject key identifier: 20:A4:F3:36:B3:71:85:68:06:E1:53:8A:F0:6E:48:C5:D2:A2:28:1A
Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
Certificate issuer: /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Certificate serial: 0197583618CA27F90EDF5990E09893EFECA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
Manifest number: 0CEB
Signing time: Tue 10 Jun 2025 05:00:29 +0000
Manifest this update: Tue 10 Jun 2025 05:00:29 +0000
Manifest next update: Wed 11 Jun 2025 05:00:29 +0000
Files and hashes: 1: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: UvsvTdvMUW8S6VC5Tl7jQLA3wt4mXZIlPQrkOOWyt24=)
2: yaeOkPk5PAc3CyptDZFnR-9_TDc.roa (hash: U7LQZWfNIcJS/maFkqunUXfknCM0Oqd5HXcK5KxayII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:36:18:ca:27:f9:0e:df:59:90:e0:98:93:ef:ec:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Validity
Not Before: Jun 10 05:00:29 2025 GMT
Not After : Jun 11 05:00:29 2025 GMT
Subject: CN=20a4f336b371856806e1538af06e48c5d2a2281a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:40:02:9d:5b:4b:c6:6f:58:6c:db:8a:d6:
8a:ad:64:fc:b4:ec:66:27:08:2f:b7:00:81:3e:e0:
9e:c4:c8:18:ba:40:b3:1e:93:1c:93:aa:be:4d:2e:
51:4f:6a:d4:61:01:37:9c:a6:48:aa:d9:37:7a:81:
bf:34:9d:b1:26:b5:2c:ca:19:4e:9f:d2:f7:5c:11:
ce:c6:4b:13:53:80:1d:fb:6a:83:4d:35:ee:94:40:
68:66:67:9e:e5:52:ed:d5:8f:25:71:2c:c2:94:e6:
cb:14:8f:bc:ef:25:fc:38:ae:c4:a7:b9:98:af:be:
5d:66:d4:1c:b6:78:54:f2:05:a6:ee:54:0e:fc:8a:
c2:14:fc:15:01:d5:e3:7c:a3:81:fc:4e:06:7a:2b:
e6:62:e7:f8:a5:f6:3c:a9:11:54:09:af:a1:7d:7c:
7e:b6:9a:2e:cd:f7:d8:99:d8:3d:0c:9f:43:9a:bb:
6e:42:a3:42:86:72:ee:88:08:eb:b5:bf:2c:b6:0c:
bd:32:6c:56:3f:e7:06:c9:b9:84:97:90:73:06:50:
81:e6:e6:ef:58:4b:ee:0c:04:d9:45:55:4e:6b:73:
6f:65:3d:c8:7c:62:88:0d:16:b0:5b:b3:1a:85:7a:
88:93:5b:5d:d4:8b:cc:60:c9:4e:0d:65:65:e2:1b:
40:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A4:F3:36:B3:71:85:68:06:E1:53:8A:F0:6E:48:C5:D2:A2:28:1A
X509v3 Authority Key Identifier:
keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:43:f7:82:36:1c:6b:7d:2e:b8:34:85:83:e4:53:4d:70:a9:
f1:bb:3b:7b:af:1d:d1:23:42:71:ae:ee:d6:36:1e:b6:13:d9:
db:f2:3c:95:0d:22:f1:05:88:a5:67:ef:14:bc:eb:d4:f9:47:
f5:6f:4f:d2:ec:6a:0a:41:25:0c:f2:6a:15:aa:7e:ec:f2:13:
ba:58:09:6c:d8:26:c2:9a:10:d7:85:80:e4:28:f7:57:43:46:
41:cd:f7:7e:18:84:1a:5d:30:b5:7c:b7:77:f9:88:88:b5:26:
d2:e3:de:af:2b:6a:a6:88:05:fc:8b:e7:12:56:b5:f1:c8:6c:
7c:30:e5:d9:a9:c4:db:1c:d6:1b:9d:7c:c5:f5:6f:e0:40:1a:
08:b4:af:5c:91:50:c4:cc:6b:16:50:b8:29:f9:3e:1a:f3:16:
9d:ba:79:22:75:49:27:97:15:40:01:bc:53:79:f7:53:f5:a5:
bc:61:70:6c:c3:50:72:e6:2b:f2:e6:3c:c4:40:16:24:f2:22:
91:3e:1c:f3:0e:5c:d2:61:ed:a1:07:00:1e:5e:25:3d:d0:96:
69:61:6c:ae:16:1a:8a:38:68:5c:c1:a6:e3:6b:e6:20:00:7f:
c2:40:b4:af:db:fb:91:c3:07:fc:07:47:22:dd:b2:ae:8e:da:
8e:1b:ac:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYNhjKJ/kO31mQ4JiT7+ykMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTVlZDhlM2VjYzkyYTJkZThjODBhYmU5YTgxOTVkNWZm
OTk3ZTYwHhcNMjUwNjEwMDUwMDI5WhcNMjUwNjExMDUwMDI5WjAzMTEwLwYDVQQD
EygyMGE0ZjMzNmIzNzE4NTY4MDZlMTUzOGFmMDZlNDhjNWQyYTIyODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2VAAp1bS8ZvWGzbitaKrWT8tOxm
JwgvtwCBPuCexMgYukCzHpMck6q+TS5RT2rUYQE3nKZIqtk3eoG/NJ2xJrUsyhlO
n9L3XBHOxksTU4Ad+2qDTTXulEBoZmee5VLt1Y8lcSzClObLFI+87yX8OK7Ep7mY
r75dZtQctnhU8gWm7lQO/IrCFPwVAdXjfKOB/E4GeivmYuf4pfY8qRFUCa+hfXx+
tpouzffYmdg9DJ9DmrtuQqNChnLuiAjrtb8stgy9MmxWP+cGybmEl5BzBlCB5ubv
WEvuDATZRVVOa3NvZT3IfGKIDRawW7MahXqIk1td1IvMYMlODWVl4htA8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCk8zazcYVoBuFTivBuSMXSoigaMB8GA1UdIwQY
MBaAFFil7Y4+zJKi3oyAq+moGV1f+ZfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jNTgxODktZDU3ZS00MTVkLWI5Nzct
MDA2N2JjYWYzNzcwLzEvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jNTgxODktZDU3ZS00MTVkLWI5NzctMDA2N2JjYWYzNzcw
LzEvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0P3gjYc
a30uuDSFg+RTTXCp8bs7e68d0SNCca7u1jYethPZ2/I8lQ0i8QWIpWfvFLzr1PlH
9W9P0uxqCkElDPJqFap+7PITulgJbNgmwpoQ14WA5Cj3V0NGQc33fhiEGl0wtXy3
d/mIiLUm0uPerytqpogF/IvnEla18chsfDDl2anE2xzWG518xfVv4EAaCLSvXJFQ
xMxrFlC4Kfk+GvMWnbp5InVJJ5cVQAG8U3n3U/WlvGFwbMNQcuYr8uY8xEAWJPIi
kT4c8w5c0mHtoQcAHl4lPdCWaWFsrhYaijhoXMGm42vmIAB/wkC0r9v7kcMH/AdH
It2yro7ajhus5g==
-----END CERTIFICATE-----
Generated at Tue Jun 10 13:15:21 2025 by rpki-client