Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
File: WKJsK8UDp8aBKNKuGrTNN965kyU.mft (raw, json)
Hash identifier: uahPh+mHs9gGFX0G7DN3pu5dCjHfb8Sczrj6tdwFTIQ=
Subject key identifier: 4D:E7:F2:2C:0E:6A:93:91:5A:18:F7:C2:E8:7E:06:02:C1:81:2C:5F
Authority key identifier: 58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
Certificate issuer: /CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Certificate serial: 019768850F581DFDB646AB4DA30947132F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
Manifest number: 0CAC
Signing time: Fri 13 Jun 2025 09:00:39 +0000
Manifest this update: Fri 13 Jun 2025 09:00:39 +0000
Manifest next update: Sat 14 Jun 2025 09:00:39 +0000
Files and hashes: 1: WKJsK8UDp8aBKNKuGrTNN965kyU.crl (hash: sq6UdUOMllzi3stDEVS/cb7uQbO9zOOCgIliVTAqI/k=)
2: hNIAp98aMKo8_sMHQg1HRKY3DlY.roa (hash: rldqTVSbz4XdzrBIUsjcfeUfYNq78azu2krskuL3dgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:0f:58:1d:fd:b6:46:ab:4d:a3:09:47:13:2f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Validity
Not Before: Jun 13 09:00:39 2025 GMT
Not After : Jun 14 09:00:39 2025 GMT
Subject: CN=4de7f22c0e6a93915a18f7c2e87e0602c1812c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:b2:7b:9a:19:e6:75:62:bf:6b:32:b1:4f:
e1:76:06:ec:57:61:33:66:ab:d9:d7:01:7a:32:57:
aa:ea:7a:e0:be:54:4c:bc:fd:9a:28:2d:09:a1:82:
48:d3:02:cb:64:2c:ed:b1:da:b2:3e:5e:0d:20:4c:
81:ed:24:25:56:91:ed:26:69:8e:95:61:19:4b:6e:
60:4c:16:08:82:1b:5f:10:52:cc:70:af:d5:69:ba:
97:98:1a:2e:6b:14:00:a3:31:98:8f:34:8e:82:af:
6c:80:e5:b9:9b:f0:e3:d5:95:a2:b2:6f:12:1f:29:
c4:e2:c7:d6:55:1c:24:5e:71:a6:f3:71:da:32:86:
07:b3:00:72:2d:7c:da:1f:2a:f4:7b:4a:f8:76:f9:
4e:86:17:cd:4c:02:ae:02:cc:81:1d:f1:21:b7:8d:
ed:89:d9:02:76:b0:f4:e7:b4:ed:e8:f2:93:30:b9:
0d:19:eb:b1:e2:71:19:ae:49:7b:91:77:44:e6:5f:
74:9d:27:f3:c2:2c:3d:35:ea:fe:f6:3d:7d:c2:b8:
e5:9b:a1:c4:22:ee:8b:bd:17:9c:c0:57:b1:81:a2:
25:ec:a5:52:61:85:55:8f:aa:21:8f:01:db:77:9e:
59:b7:5e:4a:23:ac:08:2f:e1:70:33:41:fb:41:73:
95:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E7:F2:2C:0E:6A:93:91:5A:18:F7:C2:E8:7E:06:02:C1:81:2C:5F
X509v3 Authority Key Identifier:
keyid:58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:90:00:68:07:76:12:dd:e0:d4:87:c1:4d:07:10:e9:de:4d:
b6:c1:65:df:88:bd:c8:e8:9b:92:cb:f9:e9:b2:e6:66:14:5f:
92:ca:92:b5:8e:81:6e:d8:26:6e:57:7f:9d:e2:b8:e7:68:09:
14:6b:e8:99:f8:a5:25:d9:0a:d8:91:e2:28:40:6b:de:1a:2a:
e4:fb:51:57:a2:2b:d2:b3:55:26:d4:4d:79:b2:44:30:ad:e4:
a7:68:d3:2a:de:f1:7c:bc:5c:5f:9a:58:6d:7a:70:8c:20:e6:
dd:ea:09:57:01:e0:f4:f6:24:40:0c:da:7e:9b:73:32:a0:e8:
7c:c3:30:0a:83:57:60:90:f5:12:60:8f:c6:cc:d7:16:5c:37:
3c:02:7c:56:0c:55:1b:d3:17:7d:8f:fb:8f:52:50:7d:07:d7:
fb:bf:3a:24:1e:f5:d6:88:63:14:3b:30:33:01:0e:1a:cd:5d:
21:34:4d:73:7b:a8:b8:e3:bd:d8:1a:55:f3:08:00:e8:a8:b0:
6e:22:77:09:9e:f4:7d:52:ee:78:98:41:15:cf:15:81:84:c7:
50:4c:5b:52:a0:4f:02:1c:ed:b1:1b:da:61:c8:be:b8:6c:7c:
91:b3:9f:1d:cb:fb:43:5d:1e:a2:bd:eb:d7:08:36:75:0b:01:
08:1e:d2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:51 2025 by rpki-client