Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
File: WGesaYXMCz_qIWlFyS6y6TIYlAM.mft (raw, json)
Hash identifier: ElevV3ZoV9Nz3pfpffkgYXsioINuzMm921Xz6xzeMYY=
Subject key identifier: 9C:CA:34:C4:E6:D9:4F:79:1D:59:FF:54:2D:5D:45:4B:AE:13:C3:11
Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
Certificate issuer: /CN=5867ac6985cc0b3fea216945c92eb2e932189403
Certificate serial: 01973F88D2A9E36E36B66CB87E69FCA5279C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
Manifest number: 0756
Signing time: Thu 05 Jun 2025 10:00:20 +0000
Manifest this update: Thu 05 Jun 2025 10:00:20 +0000
Manifest next update: Fri 06 Jun 2025 10:00:20 +0000
Files and hashes: 1: WGesaYXMCz_qIWlFyS6y6TIYlAM.crl (hash: +t9GxBEb2vUHADVtbiOfJLB1LdcOMwW7ObB5i6T0OZg=)
2: bnhhztuxFibvur8FNpe0Q4uP7wo.roa (hash: KQsITvPg/PJVER0mAbZoTouNCOSRyBSHFqtg7Z3silI=)
3: hPuuxvG6wf_iyGajLZm0PrPRNTE.roa (hash: SqhFWrnGhewNDVxVRZLbY/mjVnrnZ6zHK448/hSwl8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:88:d2:a9:e3:6e:36:b6:6c:b8:7e:69:fc:a5:27:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403
Validity
Not Before: Jun 5 10:00:20 2025 GMT
Not After : Jun 6 10:00:20 2025 GMT
Subject: CN=9cca34c4e6d94f791d59ff542d5d454bae13c311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ee:1d:fc:fc:6d:71:01:88:1d:7e:62:c9:8a:
ef:4e:c9:d1:26:c3:fc:d4:73:99:b9:f6:bc:5c:6c:
ac:af:25:c8:bf:0b:d7:2d:b0:8d:bf:1f:62:2d:29:
5c:64:29:df:45:44:36:93:28:be:83:98:d7:2c:5c:
be:58:34:bf:16:99:d6:35:37:19:11:4b:3f:3c:38:
be:11:17:df:41:32:c6:6b:f7:99:89:54:6a:27:04:
b7:b8:19:55:2b:c4:b0:ec:4e:9c:0e:3d:0b:0b:50:
86:b2:c7:00:11:fb:7b:7d:13:e3:44:da:67:23:bd:
1f:57:0e:f0:e7:6b:e0:12:f1:91:63:04:29:0d:cb:
6d:a0:94:ae:b1:b5:5d:99:29:46:29:4c:5e:97:08:
80:20:cc:00:6e:33:80:6a:de:03:d9:6d:84:d7:63:
6a:b4:98:e8:5a:98:76:52:4e:ec:51:92:07:91:44:
45:77:fb:eb:5a:9f:a0:62:7e:ef:cb:38:01:b5:52:
d3:ff:26:99:5e:fd:18:31:c3:78:ba:95:64:7a:28:
85:fd:1d:6c:35:a0:8e:8d:17:2c:25:e1:5f:92:2f:
23:4b:9f:2c:c2:6f:71:e5:cf:87:f2:53:b0:df:25:
bf:06:69:db:92:5f:94:66:45:94:56:79:35:90:f1:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CA:34:C4:E6:D9:4F:79:1D:59:FF:54:2D:5D:45:4B:AE:13:C3:11
X509v3 Authority Key Identifier:
keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:34:b3:04:c9:9e:a1:cc:d3:01:86:23:bd:89:08:21:43:45:
12:d6:23:d4:29:97:a4:18:f7:b0:92:3a:6e:4e:3f:30:a5:58:
28:3c:ce:ac:ef:66:16:04:86:c3:89:cb:21:26:8d:ad:2d:48:
c0:3f:5f:20:c1:d1:bb:70:d3:72:f7:3c:ab:5a:6d:c8:1e:1b:
56:7f:b4:86:b1:c9:8b:71:13:ec:88:94:0c:4b:5f:77:9e:3a:
7b:05:26:d2:66:e7:56:9d:8f:47:de:64:ed:37:98:4e:99:d1:
09:5b:35:9a:37:6e:28:66:be:a1:69:f0:23:43:c2:59:82:43:
09:9e:30:7e:b0:ac:1f:b4:2c:cd:6d:25:b5:8a:95:d6:2e:b8:
16:3a:31:91:85:64:4c:99:49:a6:48:b2:9b:b8:79:c0:dc:d4:
74:10:0e:28:e4:ed:60:72:3a:b4:8d:19:93:67:ea:95:28:78:
03:db:9a:b3:fc:56:ad:d5:40:76:58:54:85:00:73:7f:97:bb:
09:25:ea:92:31:ed:b6:82:f3:89:f8:44:49:64:7c:fd:16:61:
96:19:5b:09:3f:45:3f:e3:b9:9b:dd:ff:02:d1:e9:9d:30:6a:
34:8c:25:f1:d7:7f:e1:1f:f8:fb:87:5b:81:37:d4:34:5a:8d:
22:a2:50:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:21:24 2025 by rpki-client