Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
File: WfJfgmyjg6C3pcA2eteB_id_Z88.mft (raw, json)
Hash identifier: SS2T/QwvLUqyHftRLnZpeKmVfEJ4mXAzZVq5IE3eges=
Subject key identifier: 1B:3D:AA:FD:EA:EA:F2:07:12:B7:43:3B:6E:E9:3F:60:27:1D:2F:47
Authority key identifier: 59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
Certificate issuer: /CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Certificate serial: 0197586D1CCA554941724B25DA4A7851C8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
Manifest number: 1584
Signing time: Tue 10 Jun 2025 06:00:35 +0000
Manifest this update: Tue 10 Jun 2025 06:00:35 +0000
Manifest next update: Wed 11 Jun 2025 06:00:35 +0000
Files and hashes: 1: WfJfgmyjg6C3pcA2eteB_id_Z88.crl (hash: CUaB2XNOOd6W6hcen2IYHyebHNF3/uCwDABIIrsJ0FU=)
2: Wmojj5WI86DdYFq5g4bYA7Nw2eQ.roa (hash: zUiZqLG6W26ho//gZg9iQz5Nrd2fw/u+RT7b1CbWXkM=)
3: kL9XeaVdFYIH8Ee21mjkEgEBZ5M.roa (hash: GmszFqPnsf/cmc4G3XaWK6S4KreytGM4kW7CsuDRkfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:1c:ca:55:49:41:72:4b:25:da:4a:78:51:c8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Validity
Not Before: Jun 10 06:00:35 2025 GMT
Not After : Jun 11 06:00:35 2025 GMT
Subject: CN=1b3daafdeaeaf20712b7433b6ee93f60271d2f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:7c:1f:f1:8d:51:85:18:5c:d5:02:97:da:
b9:4a:43:a1:0a:f8:dd:87:81:1c:21:a0:64:fa:c0:
40:fa:cd:e6:2d:6a:7c:5b:7d:f7:08:08:fb:dd:25:
8b:86:d5:e8:59:b0:4b:cd:5c:77:c8:43:3b:cb:4a:
a4:27:45:ef:7e:62:4c:78:bd:31:16:69:43:04:c2:
0c:92:07:e4:ea:df:ca:a7:21:48:80:bc:b6:f6:97:
24:05:be:2b:11:74:cd:a6:56:87:f8:60:4a:41:50:
81:b4:eb:70:70:59:01:65:a2:34:d3:b0:9b:b0:45:
84:95:70:84:8a:00:a7:47:ba:3b:b5:55:dc:09:08:
8e:3f:b1:40:ac:5f:38:d2:de:51:0b:05:ba:94:0f:
3b:47:e4:96:3f:6e:43:09:a7:cc:31:44:20:b7:60:
39:c4:ba:dd:34:7d:ba:15:04:b1:39:14:96:45:26:
ac:7f:fd:26:6a:79:ea:2c:f4:e4:29:95:38:ea:b6:
d1:a8:71:3c:1b:c8:6e:9e:99:97:0f:c3:5b:4a:69:
3d:b9:96:07:2e:59:ab:4f:89:98:8b:f1:40:00:3b:
4e:30:37:c2:0b:2b:ba:29:b7:3f:26:da:0b:fd:9f:
a7:0c:2c:8c:48:55:9f:19:af:04:62:70:76:8e:45:
e2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3D:AA:FD:EA:EA:F2:07:12:B7:43:3B:6E:E9:3F:60:27:1D:2F:47
X509v3 Authority Key Identifier:
keyid:59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8c:ee:c7:f0:e2:cc:cb:81:ea:b1:51:1d:8e:3c:82:5a:c0:
03:b8:e8:0f:44:af:5e:38:31:d3:a5:59:bf:a5:8d:93:1e:df:
cd:07:08:5d:f2:6b:bd:c5:88:dc:70:f0:dd:cd:ed:a0:65:1a:
c1:8f:a0:6a:ac:6a:2d:ee:7a:e9:64:1c:10:de:f2:57:95:c6:
67:50:a0:81:4a:55:85:b8:ee:7e:68:01:22:a1:31:19:ef:3d:
52:10:c1:02:1d:28:6b:f6:7f:42:38:ca:f6:47:94:4e:ac:5e:
ba:87:da:0b:2d:90:0a:32:74:61:21:5d:70:5b:1c:76:8e:75:
c4:75:7d:b3:5e:f3:2f:12:08:f3:f1:bb:8a:8c:7b:38:6c:74:
93:2f:3b:73:bd:c6:bc:df:c3:32:e1:c7:bb:4a:02:79:04:9a:
e1:24:86:ff:fa:14:18:d5:ab:ec:9c:c6:47:be:98:67:8b:04:
1c:1a:56:74:61:96:02:60:3b:49:1f:37:d3:4b:5a:67:dc:15:
c0:5d:44:eb:13:40:16:be:ba:46:db:70:d0:97:24:91:bd:cd:
77:22:b9:dc:e2:52:64:44:a1:2e:ea:1d:03:07:63:0a:ee:2b:
2f:5a:4c:14:48:9b:95:9b:79:65:3a:f7:5f:85:73:16:f8:bf:
5a:b5:b4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:54:22 2025 by rpki-client