Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
File: WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json)
Hash identifier: robcVVCbBH+QCTi8mpTzcLyx0WJr17I/qWjIJTldtHM=
Subject key identifier: 0E:80:8D:06:EC:B9:CC:D7:27:2A:8E:32:84:BC:97:88:38:3F:D7:78
Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
Certificate issuer: /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Certificate serial: 01975FEFF44022A76A3F4324ECC4A69C869D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
Manifest number: 0CEF
Signing time: Wed 11 Jun 2025 17:00:50 +0000
Manifest this update: Wed 11 Jun 2025 17:00:50 +0000
Manifest next update: Thu 12 Jun 2025 17:00:50 +0000
Files and hashes: 1: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: MyJ/v0BN63cKPXnC4EWLDFVCOnXc8ygFej53c347jao=)
2: yaeOkPk5PAc3CyptDZFnR-9_TDc.roa (hash: U7LQZWfNIcJS/maFkqunUXfknCM0Oqd5HXcK5KxayII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:ef:f4:40:22:a7:6a:3f:43:24:ec:c4:a6:9c:86:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Validity
Not Before: Jun 11 17:00:50 2025 GMT
Not After : Jun 12 17:00:50 2025 GMT
Subject: CN=0e808d06ecb9ccd7272a8e3284bc9788383fd778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:cb:e4:c3:ef:8a:dc:c4:9c:d5:c5:41:49:
f0:a8:a9:96:6d:b4:9a:da:7c:17:fc:20:db:08:79:
df:39:b1:b5:5c:16:42:7b:c5:e6:56:c8:83:20:5f:
cb:76:12:1f:1f:d8:ac:5d:51:a8:58:f4:75:cb:ed:
c3:c7:ef:26:ce:88:d5:bf:93:e6:23:3e:67:c0:ee:
0d:ed:d4:1a:10:10:03:83:5e:dd:14:f4:fb:e7:e1:
fe:96:2c:be:43:e1:57:dd:92:49:80:1b:8e:d8:a9:
ba:f3:42:1b:c7:9f:a8:eb:95:ac:22:8b:07:a4:a3:
3d:4b:ec:d1:03:a1:d3:9b:cb:d7:da:74:b2:d2:e4:
4a:1f:d7:eb:5f:e9:44:91:8c:1e:f8:ae:4e:d8:5f:
c8:c3:d2:ec:59:07:32:a7:0a:7e:f3:f6:06:55:52:
5b:fd:b1:e4:5d:9e:3b:ab:76:2f:6c:bf:8e:5b:6a:
cb:90:90:ee:f4:8d:d9:a4:a0:65:a0:61:2f:dd:94:
46:df:26:60:89:95:c4:e4:f4:ab:8c:dd:ec:69:c4:
8a:8c:44:9f:4a:98:57:b5:90:2e:a4:17:9f:a4:95:
1a:8a:fe:cf:2e:bc:b9:45:f4:91:32:94:e8:d8:68:
e7:c6:06:0c:28:3c:33:95:8f:d1:c3:69:c3:d5:16:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:80:8D:06:EC:B9:CC:D7:27:2A:8E:32:84:BC:97:88:38:3F:D7:78
X509v3 Authority Key Identifier:
keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8e:bc:7c:82:52:60:d0:71:d3:f9:8c:b7:15:82:d8:87:e9:
e6:63:f0:32:c1:68:cf:4f:41:60:a5:87:02:19:f9:2e:f8:c5:
15:43:5d:cc:f8:f5:9e:ae:fc:08:d2:ec:a6:ec:d1:cd:1b:4e:
fe:0b:e8:20:ff:ac:22:66:81:ff:ee:72:46:16:6b:6e:ef:da:
3f:1f:d2:42:07:68:e2:4f:48:77:8d:69:83:8f:c7:b1:74:e9:
ef:df:fd:d6:44:d9:86:4f:08:d1:ea:68:30:c1:79:29:a6:e0:
d7:a6:18:64:d2:2e:43:37:ac:1c:63:c8:7a:7e:72:8b:fd:f5:
8c:a7:ac:e3:96:7a:42:a5:d6:ad:1b:a1:1a:b1:b5:6f:d5:aa:
64:16:18:ad:94:d7:57:06:31:38:f0:00:91:fc:14:ec:6c:b3:
ea:3b:d4:12:a6:5c:4b:7a:47:dc:33:84:e4:57:e4:9c:7d:c3:
8a:18:83:8e:a7:e9:ec:17:72:32:48:32:38:eb:3b:43:f0:aa:
cd:cc:c1:e2:9e:52:9f:44:4b:c4:0c:da:5c:c0:5a:82:04:e0:
f7:0e:b7:28:81:ac:d7:ed:71:9e:91:98:c8:2d:21:9e:6d:14:
e5:3d:f3:28:8a:b5:44:93:23:c2:10:7d:22:11:02:b5:6e:83:
b0:8c:90:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:23:49 2025 by rpki-client