Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
File: WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json)
Hash identifier: 1lESjAtxgEZVk+F+8OYo6cqNAhQVn9IJVntQfBQiW+0=
Subject key identifier: 99:A7:F7:6E:A0:1C:48:61:93:B1:5C:AA:0F:87:65:06:B1:D9:F3:AA
Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
Certificate issuer: /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Certificate serial: 01975648043E43CE3117FB8CAE54C6877A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
Manifest number: 0CEA
Signing time: Mon 09 Jun 2025 20:00:49 +0000
Manifest this update: Mon 09 Jun 2025 20:00:49 +0000
Manifest next update: Tue 10 Jun 2025 20:00:49 +0000
Files and hashes: 1: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: 3xfdxTpyjhT4fugh+c5eB5KSyh8SCdtOWJBiG/OXXsM=)
2: yaeOkPk5PAc3CyptDZFnR-9_TDc.roa (hash: U7LQZWfNIcJS/maFkqunUXfknCM0Oqd5HXcK5KxayII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:48:04:3e:43:ce:31:17:fb:8c:ae:54:c6:87:7a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Validity
Not Before: Jun 9 20:00:49 2025 GMT
Not After : Jun 10 20:00:49 2025 GMT
Subject: CN=99a7f76ea01c486193b15caa0f876506b1d9f3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:68:e3:f8:4f:9c:6f:f5:7e:b6:f7:2a:f6:25:
63:6b:03:85:4d:5a:4f:70:d1:94:f4:8d:38:d4:d2:
a6:59:d4:f4:9d:db:89:59:b9:2c:bd:96:c2:7a:80:
2c:5c:ff:c3:19:da:7a:a5:8b:ca:b3:ed:46:3c:73:
17:51:4a:f3:f3:06:e7:57:0f:e5:89:76:52:2b:44:
fa:09:36:31:48:ea:39:9d:39:30:8e:a8:83:df:96:
c6:6c:2b:99:bb:14:03:d9:f5:b2:60:d5:88:6c:3b:
d6:f8:f1:a9:8f:7e:cf:fd:57:3f:73:61:48:01:5a:
6b:69:4a:7a:40:ad:1d:c1:aa:19:96:85:fe:8f:20:
7e:b1:00:e3:a5:48:e2:e1:c4:f6:30:36:bf:0e:b9:
99:5f:f9:df:90:e7:d9:06:c3:1a:d8:aa:d4:63:16:
06:71:4c:80:8f:0b:82:c2:ba:94:56:a4:76:4d:bd:
e5:e5:16:e7:7a:29:12:41:ad:ff:23:98:5e:92:fc:
2b:10:ee:be:28:99:43:dc:3a:c0:35:18:a6:dd:5a:
43:b4:c5:d3:51:45:10:bc:97:e8:01:55:be:c6:fe:
23:7c:c6:12:f9:5b:4d:74:2d:5f:a1:3b:76:d8:db:
04:30:fd:f8:44:f3:5b:40:c9:29:ee:19:1a:a8:7c:
70:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A7:F7:6E:A0:1C:48:61:93:B1:5C:AA:0F:87:65:06:B1:D9:F3:AA
X509v3 Authority Key Identifier:
keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4f:2c:c2:6b:01:65:15:c6:1e:e1:e7:2a:3f:8b:65:e4:d8:
81:e3:87:80:87:1c:ad:57:5b:e9:48:c7:6b:6d:bd:3d:aa:a2:
aa:98:10:c7:7e:e6:e4:bd:d0:f9:97:6d:8e:a4:30:7f:c2:05:
ea:0c:7a:71:71:b0:85:a9:b7:0f:0b:f9:95:12:e3:c9:64:e3:
0c:97:8f:48:65:de:4e:a0:0f:e7:00:16:fd:dd:99:ae:65:3f:
d4:c2:51:bf:ac:63:6d:8f:68:d7:10:06:52:fb:d3:a3:38:12:
42:20:00:8c:14:8f:77:0a:0d:a7:9e:b9:4c:72:bd:18:03:ed:
53:f3:bd:4d:a3:b1:32:d4:13:7f:de:71:71:90:aa:f4:71:3f:
38:31:a1:00:53:11:f8:ee:76:30:15:65:d7:20:a3:99:91:f8:
ea:34:14:e5:5e:10:c3:7f:14:1a:de:d8:f5:68:b4:4b:cd:e6:
c6:e7:77:22:ae:ee:59:67:92:e7:41:be:55:0e:f9:e4:83:f9:
3c:29:23:e5:8d:e0:a2:06:e4:af:67:05:14:c7:16:d5:78:e5:
2d:df:de:b3:a0:56:a1:64:3d:06:85:20:f0:45:5a:2f:9b:ad:
8c:23:c6:d3:27:b4:f4:ea:79:a3:94:a9:02:8f:ec:cb:48:82:
5c:76:19:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:21:00 2025 by rpki-client