Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
File: WAFhHoC63kAvvWDnhvNPtxctIlo.mft (raw, json)
Hash identifier: fyLGeYDR/yscbxiSYjVZPIjMBo5Kd5QTSh5qew1TfYk=
Subject key identifier: 6F:F8:38:66:B6:45:EE:7D:44:D7:00:56:A4:50:4B:7B:FB:D3:4D:06
Authority key identifier: 58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
Certificate issuer: /CN=5801611e80bade402fbd60e786f34fb7172d225a
Certificate serial: 0197684E3B59D76CBA9325E09E1D20958245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
Manifest number: 12EC
Signing time: Fri 13 Jun 2025 08:00:46 +0000
Manifest this update: Fri 13 Jun 2025 08:00:46 +0000
Manifest next update: Sat 14 Jun 2025 08:00:46 +0000
Files and hashes: 1: WAFhHoC63kAvvWDnhvNPtxctIlo.crl (hash: Ws1Lh6ppFsEyfZ+9nG6NBfShnq/Kp2/ogyB24j6TG4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:3b:59:d7:6c:ba:93:25:e0:9e:1d:20:95:82:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5801611e80bade402fbd60e786f34fb7172d225a
Validity
Not Before: Jun 13 08:00:46 2025 GMT
Not After : Jun 14 08:00:46 2025 GMT
Subject: CN=6ff83866b645ee7d44d70056a4504b7bfbd34d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fa:38:73:07:f5:2d:ad:f6:a3:56:0e:6d:dc:
84:6f:2c:f8:fd:ed:f4:dd:3a:d9:ff:22:18:90:38:
67:10:63:13:1b:f1:77:53:6f:41:10:40:69:0a:a0:
ff:ba:e2:63:35:12:82:d7:cd:09:c4:8b:8a:3b:2b:
59:dc:16:a4:28:64:b1:b4:61:d2:c7:57:e6:34:17:
c8:c8:a5:c2:ea:34:e4:1c:1e:51:85:7c:14:8e:b1:
88:d6:92:21:de:3f:e3:88:ef:96:33:d0:f8:47:1f:
8a:f7:20:54:19:12:bc:14:2b:bd:12:eb:08:52:ad:
09:1e:5e:a2:b9:42:d1:1b:94:12:5f:ad:0c:2a:5e:
44:c5:f7:20:d8:c4:28:d4:e2:41:1f:57:16:74:64:
83:c0:17:65:bb:f1:08:6d:09:74:85:55:33:6f:76:
d5:ad:0a:96:a3:3d:a2:40:51:f9:e1:34:75:0f:c0:
5b:c8:5d:4c:14:ac:c6:d0:ed:1f:90:d2:9c:e6:bd:
b8:c9:4e:a7:6a:d2:91:66:62:ee:a7:be:f9:fe:15:
16:ec:41:e9:1e:b3:92:06:b3:7c:62:7d:35:75:a6:
26:de:da:e6:70:4c:62:bd:60:37:0e:ab:90:c3:51:
de:37:f9:b7:8c:74:c6:a8:59:fe:76:f8:09:88:35:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F8:38:66:B6:45:EE:7D:44:D7:00:56:A4:50:4B:7B:FB:D3:4D:06
X509v3 Authority Key Identifier:
keyid:58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5c:fe:4b:12:4c:33:21:b7:17:fc:7f:b3:61:12:64:8d:3e:
30:02:63:48:eb:85:36:78:cd:e6:eb:af:9f:f0:c7:ff:a7:72:
55:a0:6d:cc:51:33:ab:26:a3:60:eb:05:30:6e:d3:72:a0:73:
c2:2b:42:ed:b4:ed:9a:84:2a:a2:3f:fa:9c:fc:98:59:92:0a:
9c:93:f3:c7:b5:9c:54:ee:16:e6:69:99:b9:c3:67:eb:0c:72:
a0:f9:35:1b:16:cf:9a:10:d5:3e:65:89:ae:5c:6c:4d:e1:14:
a2:12:78:c3:a5:e8:1a:7d:b1:e6:1e:e5:ea:35:98:48:9c:ea:
b8:d9:7b:dc:aa:d1:40:58:f2:73:ee:17:9e:06:e2:c8:30:cc:
6a:c6:76:83:b2:02:94:55:99:37:fe:e9:e2:9b:62:a5:1e:8a:
31:49:9d:7a:c0:36:3e:70:70:2e:9f:ff:3b:b0:bc:25:fa:dd:
a9:ee:36:fd:e7:0f:75:a4:f0:40:05:48:0d:4e:bb:30:8a:9e:
c9:d4:7b:c2:f5:15:c2:0d:ec:93:29:01:5c:8e:f9:0b:28:45:
e5:2f:e9:0b:bd:26:10:6e:44:41:d4:b9:9b:34:ee:9d:1d:f8:
0a:d6:d6:c6:0f:07:48:ae:d0:bf:ac:38:a1:35:e5:53:9c:67:
3e:d8:d5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:04 2025 by rpki-client