Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
File: WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json)
Hash identifier: /pftSIRLE/vy6hjLJLHo7bVEYD3BqPLC0N2lONZ5jLw=
Subject key identifier: 7D:DC:F7:28:2B:83:29:E5:33:3C:F3:44:00:42:DB:78:0A:56:91:5F
Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
Certificate issuer: /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Certificate serial: 019763CCA2E1587C71EE71DDA77B63AA220B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
Manifest number: 0CF1
Signing time: Thu 12 Jun 2025 11:00:44 +0000
Manifest this update: Thu 12 Jun 2025 11:00:44 +0000
Manifest next update: Fri 13 Jun 2025 11:00:44 +0000
Files and hashes: 1: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: gBu2OxGD2MXWXTYKkY9+38rAgfYTOfjr8GqiIYHkxKs=)
2: yaeOkPk5PAc3CyptDZFnR-9_TDc.roa (hash: U7LQZWfNIcJS/maFkqunUXfknCM0Oqd5HXcK5KxayII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:cc:a2:e1:58:7c:71:ee:71:dd:a7:7b:63:aa:22:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Validity
Not Before: Jun 12 11:00:44 2025 GMT
Not After : Jun 13 11:00:44 2025 GMT
Subject: CN=7ddcf7282b8329e5333cf3440042db780a56915f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:34:60:f6:ed:38:10:b3:a6:be:87:27:fc:61:
76:26:0c:57:44:77:e0:65:f0:f9:fa:45:ce:08:30:
44:9a:44:a2:fd:81:05:f9:e9:5e:43:e8:8b:82:66:
8f:f9:0b:f5:6b:a5:76:7d:7b:91:61:e9:b2:f1:d7:
3b:0c:84:24:eb:f0:64:45:59:a1:07:bf:d4:2e:50:
d3:41:35:2b:5c:33:e7:50:20:ac:91:b0:a0:bd:3f:
64:41:bf:cc:a2:16:ed:f2:35:4a:a7:e1:1c:bf:fd:
b0:ec:b3:48:e9:26:1c:ae:1c:ef:60:a4:dc:14:c6:
0d:09:72:17:1f:5a:a2:a6:ac:d7:b7:70:c4:31:87:
0b:27:a6:a9:81:f0:c8:ef:93:b0:e1:43:64:86:ed:
81:35:9f:90:98:b8:57:ae:f7:cf:71:80:90:f6:ae:
97:78:e5:2b:cb:6a:1e:22:bb:1a:e2:93:30:fe:e2:
08:52:4e:d0:6a:21:02:2f:cd:0d:40:b7:39:98:29:
f9:d7:11:d7:d0:3e:00:63:1e:1a:3e:21:25:29:8f:
1c:e7:a0:c8:33:40:9d:2a:d9:c7:50:1a:4f:dc:2e:
75:50:af:bc:6d:9d:19:88:2e:0f:b6:5c:31:fe:13:
95:dc:42:ee:d6:1c:0b:5c:36:09:df:5e:e5:aa:56:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DC:F7:28:2B:83:29:E5:33:3C:F3:44:00:42:DB:78:0A:56:91:5F
X509v3 Authority Key Identifier:
keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:40:e3:2e:80:ea:a7:71:8f:bf:c6:a3:2b:78:f2:44:6f:92:
8e:9b:e4:9c:c9:ca:c7:2c:43:ab:20:a9:ec:7c:db:5e:aa:ce:
48:bc:f5:71:16:ca:cf:de:27:6d:19:f4:90:17:78:68:ab:db:
a9:28:e3:1d:a9:b2:e4:bd:17:24:1b:c8:20:ed:69:a0:64:1d:
eb:d6:5e:d0:6d:ac:49:a3:3e:c4:23:89:3b:29:a2:da:87:9e:
bb:fb:d7:50:77:a0:d2:df:fd:26:8d:2e:9b:d9:98:1f:e3:db:
99:db:23:55:84:5a:3d:99:7c:a2:39:8b:20:4b:a3:90:db:b8:
4d:32:2a:cd:a6:bd:4d:a8:6f:41:45:e4:41:36:c8:44:7b:73:
c4:d3:1d:00:69:94:57:de:4e:4e:f3:aa:5d:6e:07:57:83:a9:
04:7e:6e:eb:77:e2:62:1c:fb:33:fa:9f:34:7a:e7:55:e6:f7:
ae:a6:26:aa:40:ae:08:ba:91:f5:37:1c:c6:80:8b:8c:ad:85:
72:bc:c3:47:9b:fb:4e:78:62:dc:e5:47:67:ae:51:bb:02:7e:
f1:8c:1b:f9:20:9b:37:33:71:b1:43:91:d7:4f:c4:79:47:60:
60:45:99:b1:bd:4f:a6:f2:36:d5:47:5c:b2:aa:bf:29:5c:a3:
50:42:5d:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdjzKLhWHxx7nHdp3tjqiILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTVlZDhlM2VjYzkyYTJkZThjODBhYmU5YTgxOTVkNWZm
OTk3ZTYwHhcNMjUwNjEyMTEwMDQ0WhcNMjUwNjEzMTEwMDQ0WjAzMTEwLwYDVQQD
Eyg3ZGRjZjcyODJiODMyOWU1MzMzY2YzNDQwMDQyZGI3ODBhNTY5MTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zRg9u04ELOmvocn/GF2JgxXRHfg
ZfD5+kXOCDBEmkSi/YEF+eleQ+iLgmaP+Qv1a6V2fXuRYemy8dc7DIQk6/BkRVmh
B7/ULlDTQTUrXDPnUCCskbCgvT9kQb/Mohbt8jVKp+Ecv/2w7LNI6SYcrhzvYKTc
FMYNCXIXH1qipqzXt3DEMYcLJ6apgfDI75Ow4UNkhu2BNZ+QmLhXrvfPcYCQ9q6X
eOUry2oeIrsa4pMw/uIIUk7QaiECL80NQLc5mCn51xHX0D4AYx4aPiElKY8c56DI
M0CdKtnHUBpP3C51UK+8bZ0ZiC4Ptlwx/hOV3ELu1hwLXDYJ317lqlb7hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3c9ygrgynlMzzzRABC23gKVpFfMB8GA1UdIwQY
MBaAFFil7Y4+zJKi3oyAq+moGV1f+ZfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jNTgxODktZDU3ZS00MTVkLWI5Nzct
MDA2N2JjYWYzNzcwLzEvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jNTgxODktZDU3ZS00MTVkLWI5NzctMDA2N2JjYWYzNzcw
LzEvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0DjLoDq
p3GPv8ajK3jyRG+SjpvknMnKxyxDqyCp7HzbXqrOSLz1cRbKz94nbRn0kBd4aKvb
qSjjHamy5L0XJBvIIO1poGQd69Ze0G2sSaM+xCOJOymi2oeeu/vXUHeg0t/9Jo0u
m9mYH+PbmdsjVYRaPZl8ojmLIEujkNu4TTIqzaa9TahvQUXkQTbIRHtzxNMdAGmU
V95OTvOqXW4HV4OpBH5u63fiYhz7M/qfNHrnVeb3rqYmqkCuCLqR9TccxoCLjK2F
crzDR5v7Tnhi3OVHZ65RuwJ+8Ywb+SCbNzNxsUOR10/EeUdgYEWZsb1PpvI21Udc
sqq/KVyjUEJdhA==
-----END CERTIFICATE-----
Generated at Thu Jun 12 18:26:59 2025 by rpki-client