Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
File: WCXq-3jz1WkmUXwqPNUzmqUTht4.mft (raw, json)
Hash identifier: ndcdkwG9V1GDW8MIfCG3/ynJlKmjgM0j9bw+/uKRqcU=
Subject key identifier: 73:CA:68:4B:CE:76:83:A1:6C:81:8E:94:4A:38:DA:EB:66:A4:F9:40
Authority key identifier: 58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
Certificate issuer: /CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Certificate serial: 01974CD6EBABF7AB55EF22C79E7D8D073E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
Manifest number: 0125
Signing time: Sun 08 Jun 2025 00:00:42 +0000
Manifest this update: Sun 08 Jun 2025 00:00:42 +0000
Manifest next update: Mon 09 Jun 2025 00:00:42 +0000
Files and hashes: 1: WCXq-3jz1WkmUXwqPNUzmqUTht4.crl (hash: C5a1g15tOQHEZtybydYLj/K0wuuxca3IwNTui2VYT9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:eb:ab:f7:ab:55:ef:22:c7:9e:7d:8d:07:3e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Validity
Not Before: Jun 8 00:00:42 2025 GMT
Not After : Jun 9 00:00:42 2025 GMT
Subject: CN=73ca684bce7683a16c818e944a38daeb66a4f940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:60:a0:4b:8f:47:f6:63:35:b6:45:68:f3:
16:24:d8:a1:0a:94:a2:ea:7c:c8:54:22:4e:de:64:
6c:8e:b1:95:fd:b8:dd:b0:f1:d8:56:5e:a0:f8:fa:
38:cb:ae:f3:20:20:b1:09:b4:8c:5f:b1:6e:ae:c1:
7c:e9:17:8f:90:fa:fd:07:74:ca:14:35:7f:fb:a9:
16:c3:4f:3b:0a:bd:20:2b:b5:b2:b9:d0:e8:18:e1:
25:c4:cf:ff:5d:a4:97:58:96:a6:14:ae:d9:8d:7b:
49:14:3b:e4:41:ca:47:71:aa:53:d6:62:5e:b8:f3:
ea:46:e3:f0:3b:4e:a1:85:0d:49:f2:91:e1:06:68:
99:0e:7c:a2:ff:da:c1:f5:c7:b2:fc:70:9e:4c:c9:
40:6d:1c:d8:1d:1b:c0:4b:f7:4a:3b:1c:92:96:8a:
a0:fc:3a:2f:16:97:fa:4a:c3:06:3b:d1:c4:e1:22:
d2:65:8c:6b:b2:e7:f4:2a:0f:f8:f3:a7:a5:f4:a5:
ff:86:f7:74:ea:76:a1:61:96:7e:c8:7d:c2:80:13:
35:9d:4e:dc:c8:9f:b3:dc:2c:0c:03:cd:dc:10:0b:
73:24:05:38:37:48:1a:33:ef:9b:30:86:a0:86:22:
7b:ba:ca:1f:15:d2:e8:3e:93:52:1d:d5:6b:90:e1:
a4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CA:68:4B:CE:76:83:A1:6C:81:8E:94:4A:38:DA:EB:66:A4:F9:40
X509v3 Authority Key Identifier:
keyid:58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:54:70:1d:8b:5c:b0:c9:fb:d4:fa:56:fa:d1:51:f2:61:35:
46:c1:5f:88:8a:bb:e6:57:59:52:a5:1f:42:83:8c:3f:84:aa:
ec:96:87:3c:2d:25:99:19:d0:e1:40:f5:bc:b5:dc:6c:79:a9:
0b:b0:93:4f:6d:9d:13:bc:75:54:81:a9:cc:51:bd:08:ad:10:
14:c0:a2:d2:58:7a:a3:5e:d6:d7:fa:4b:4d:f6:4c:a0:86:11:
67:58:61:00:3c:3d:d7:bc:27:fe:07:7f:8b:8a:0a:fc:35:91:
f6:dc:3e:d7:12:54:cc:dd:3f:2c:db:60:e1:48:bc:2f:36:fc:
0e:68:46:5c:1f:0d:9e:ae:d3:e6:f5:14:c7:03:58:16:b1:66:
60:f4:dd:00:0a:bc:e2:d9:6e:8c:75:f0:d7:59:00:61:ca:4f:
a7:2c:e0:25:c9:a3:26:0c:3f:22:48:b4:6d:d7:a8:99:b1:96:
66:05:45:ea:99:71:82:73:21:dc:58:47:11:6b:b1:e5:f8:44:
98:21:25:1f:2a:92:03:71:2c:9b:04:b0:53:e5:a2:05:f4:21:
c2:07:c8:8f:3b:7c:e9:ef:30:f8:0e:43:78:73:97:de:9e:11:
6a:e0:67:26:ff:f0:d2:c8:17:ef:63:d8:48:a5:97:1c:da:c9:
95:89:a2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:29:25 2025 by rpki-client