Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
File: WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json)
Hash identifier: ZfI5BwzIkpWDJkjNHjD/n49xFXDKOGd49gHJEafajaU=
Subject key identifier: 0A:B2:4D:C9:95:E3:E1:A8:5A:C6:40:9F:92:EB:2A:5F:99:08:AE:44
Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
Certificate issuer: /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Certificate serial: 01976997D196372255BF4AD81D8DAE930EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
Manifest number: 0CF4
Signing time: Fri 13 Jun 2025 14:00:46 +0000
Manifest this update: Fri 13 Jun 2025 14:00:46 +0000
Manifest next update: Sat 14 Jun 2025 14:00:46 +0000
Files and hashes: 1: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: bd/xZy0yagVdJFSANtcftVrDcDGbzluuZ0X7wpixVdM=)
2: yaeOkPk5PAc3CyptDZFnR-9_TDc.roa (hash: U7LQZWfNIcJS/maFkqunUXfknCM0Oqd5HXcK5KxayII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:d1:96:37:22:55:bf:4a:d8:1d:8d:ae:93:0e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Validity
Not Before: Jun 13 14:00:46 2025 GMT
Not After : Jun 14 14:00:46 2025 GMT
Subject: CN=0ab24dc995e3e1a85ac6409f92eb2a5f9908ae44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:e7:74:c7:8f:1a:a3:00:75:26:7e:21:e1:
1f:21:57:6a:8f:65:f8:45:aa:9d:d6:d3:6b:e8:ba:
c3:55:f9:d3:dc:61:7d:29:b8:2f:4a:08:80:a4:93:
9a:bf:fa:6b:60:cc:ee:68:36:26:45:bd:98:d7:88:
b9:84:0f:0c:da:54:57:13:a4:2c:87:ec:18:6f:00:
8f:0e:2d:33:32:76:19:bf:16:e1:32:67:cc:86:99:
7b:cb:5f:40:70:7a:97:79:6a:12:02:61:e6:bc:94:
1a:49:27:e8:c0:cd:0b:81:d5:3b:a7:52:9d:7b:9e:
76:95:c3:e2:8f:81:90:d3:39:7b:53:6a:2e:5a:23:
db:98:cd:ca:f7:85:38:79:56:d7:64:80:16:be:bd:
bb:07:77:57:a6:02:40:15:ce:e0:db:85:aa:b0:c7:
69:4c:3f:dd:34:7c:9d:f9:c9:8d:de:96:d8:eb:0e:
39:5b:ab:e1:b4:82:e1:54:67:31:70:97:77:e6:09:
b8:ec:9d:0e:49:36:e8:cf:b3:27:44:76:45:41:e4:
39:1f:45:65:cc:a7:81:f5:6b:79:45:99:26:87:d2:
43:9d:38:c9:80:09:37:30:e8:aa:59:50:96:86:b5:
35:53:0c:8e:18:e9:3b:65:90:c6:63:b2:70:fb:08:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B2:4D:C9:95:E3:E1:A8:5A:C6:40:9F:92:EB:2A:5F:99:08:AE:44
X509v3 Authority Key Identifier:
keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ac:9c:ff:b7:46:05:f4:98:8d:43:88:e4:4b:a0:20:c7:cf:
8a:fa:f1:55:60:e7:50:10:60:c2:cb:90:7f:76:70:8e:06:c0:
9a:22:65:4c:8c:10:6e:6a:cc:bf:ae:ac:f9:e1:f5:ce:03:eb:
48:b6:a4:53:64:f3:bf:b8:76:27:4c:08:12:30:74:3a:4c:f0:
3d:0f:a9:71:6c:6a:c2:fc:a3:52:d3:91:50:35:98:c1:92:f2:
54:d6:4f:f8:a3:97:aa:b7:e7:14:d1:9d:ca:3a:3f:49:09:95:
84:e1:7f:2f:91:32:4c:12:ef:46:0f:3f:2c:20:54:31:46:32:
07:75:5f:06:25:14:e8:92:68:6c:61:08:83:ec:2e:48:ee:37:
0a:ab:5a:47:49:b9:85:f3:b5:dd:92:c8:9e:75:35:82:31:6e:
09:98:89:bb:5b:95:57:1a:a2:0f:7a:c3:fa:0e:b3:6d:1c:94:
24:30:5b:ff:8a:21:7a:8f:24:5d:8b:30:75:a8:89:f6:34:20:
dd:db:e7:1e:a3:25:86:f6:fb:91:6d:ff:35:4e:1f:97:61:73:
72:62:44:ad:aa:5b:2f:89:55:a4:d7:cb:13:53:39:34:7a:d9:
93:7f:15:04:1b:2e:8a:88:8e:fd:f4:f2:1c:14:88:23:96:17:
62:b4:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 23:13:23 2025 by rpki-client