Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
File: WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json)
Hash identifier: ahNFbJ2/yKy4tsgQ8looIPrEPlL+XQCvUDpTaijK1wM=
Subject key identifier: F5:CF:11:D1:44:AD:CE:28:88:8F:A7:31:6A:51:41:77:B8:C8:66:48
Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
Certificate issuer: /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Certificate serial: 019767A96BE8906B1FF15292554F7D9B8B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
Manifest number: 0CF3
Signing time: Fri 13 Jun 2025 05:00:45 +0000
Manifest this update: Fri 13 Jun 2025 05:00:45 +0000
Manifest next update: Sat 14 Jun 2025 05:00:45 +0000
Files and hashes: 1: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: f4pqQIG056PiU9FggsAjoaJRf82rkhzD6cZdlxdOo0I=)
2: yaeOkPk5PAc3CyptDZFnR-9_TDc.roa (hash: U7LQZWfNIcJS/maFkqunUXfknCM0Oqd5HXcK5KxayII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:a9:6b:e8:90:6b:1f:f1:52:92:55:4f:7d:9b:8b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Validity
Not Before: Jun 13 05:00:45 2025 GMT
Not After : Jun 14 05:00:45 2025 GMT
Subject: CN=f5cf11d144adce28888fa7316a514177b8c86648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:f2:8a:93:a7:71:89:7d:94:5e:8f:a9:2b:
ac:78:53:5e:fd:0e:5a:15:a3:d3:a4:be:06:21:7c:
5e:7c:9b:fa:4d:c4:66:79:59:d7:7d:40:de:3b:2f:
9b:65:97:6b:76:f1:89:04:c2:a7:85:90:d0:5a:bb:
13:fe:8e:a7:0c:4a:12:60:59:dc:48:4a:4b:e6:a1:
c1:a9:52:73:4c:d3:3e:45:71:6c:bc:da:25:97:f5:
97:9f:20:9c:d7:18:b7:70:6a:f1:40:87:1d:e7:80:
7d:5a:01:79:d3:54:20:fa:fb:a6:03:03:66:18:26:
fc:67:af:4f:2d:53:c7:64:79:c7:17:4c:5a:f0:6b:
70:60:06:fe:d0:45:34:ae:20:35:a1:58:4a:9d:1a:
6c:6e:28:c6:5b:d8:98:18:c6:cd:aa:ac:00:45:f5:
8d:0f:6f:23:fd:b3:28:54:9f:3b:0d:11:10:34:d1:
c8:57:06:df:31:4c:90:47:60:85:f7:f3:94:10:b1:
54:ed:b2:49:96:3d:ad:7c:bb:62:bd:ef:bd:29:f0:
f8:d0:57:af:d0:0f:07:b9:f8:5d:ac:89:57:6b:c2:
bc:67:40:35:51:cf:4c:c1:fe:62:42:3b:3d:39:3a:
8f:12:80:27:29:fb:9f:e5:63:cc:26:93:4d:af:6e:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CF:11:D1:44:AD:CE:28:88:8F:A7:31:6A:51:41:77:B8:C8:66:48
X509v3 Authority Key Identifier:
keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a3:50:c6:ee:f2:38:4c:d2:25:cf:7e:b3:75:30:3c:2b:08:
79:5d:30:3f:b8:01:a0:ee:f8:c6:49:bf:06:f0:3a:32:f8:cf:
4d:47:da:8b:aa:13:03:2a:fe:c8:59:15:70:fb:0e:2b:0f:9f:
0c:c2:c7:ab:44:f8:2a:7e:6e:c1:20:1a:39:83:6d:87:e3:68:
98:26:e3:1c:be:e2:6b:b6:a4:29:70:58:ba:04:9e:2b:bb:e0:
98:e9:ca:a3:f9:59:ee:80:35:42:26:dc:0f:6a:85:18:a6:c6:
01:f7:c2:10:0a:df:61:ef:7c:0b:8a:1e:3b:f3:4f:3b:7b:bb:
a6:34:1e:1b:ed:b1:83:11:89:1b:40:14:af:50:41:4c:65:8e:
05:89:59:94:df:2a:cb:40:76:84:05:58:74:2b:85:c8:3b:87:
77:fd:ca:c8:41:37:a2:cd:79:30:d4:58:11:96:66:03:c6:b9:
9b:66:e8:aa:9c:3f:10:33:86:16:08:41:3e:3d:ec:b7:70:d8:
77:b8:1f:54:bf:b4:0b:c1:71:1c:64:0f:88:2b:d8:99:72:e5:
af:13:68:2b:2e:59:51:fc:02:39:3e:d8:e0:e2:fe:89:f7:91:
9b:3a:42:1e:45:24:4a:52:89:26:40:9f:34:ce:76:a6:2a:35:
9c:e3:2b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:38:07 2025 by rpki-client