Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
File: WdCj-cNDB7Cls20ubRiZrv57vrQ.mft (raw, json)
Hash identifier: KottS3/pyemX/lS7opDbgh1PiocMxTW30i1fa/WGZ9M=
Subject key identifier: 89:4A:51:94:7B:3B:EC:15:90:26:28:FB:41:93:83:35:C7:4A:70:BE
Authority key identifier: 59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
Certificate issuer: /CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Certificate serial: 01976BF409EC29021B2ECD8CD6D6AB796CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 01:00:44 +0000
Manifest this update: Sat 14 Jun 2025 01:00:44 +0000
Manifest next update: Sun 15 Jun 2025 01:00:44 +0000
Files and hashes: 1: WdCj-cNDB7Cls20ubRiZrv57vrQ.crl (hash: PiRBPLSUt4j1Fq1K4axYTV3PT5zPiJCwzlGwliBrhbY=)
2: qnyT4xJfydWnP5jn7MY2v2jL3y4.roa (hash: OVzltJuTj7ZgLCXEnxygFrh+27k2M7PI7mlew2jPilY=)
3: rGsU2ZkcNAPfnTYcJ0xOGkEFav8.roa (hash: pob5Gk3ii6Z8pPugpFKGScd6y3cYxp1AE5yYcUpWbig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:09:ec:29:02:1b:2e:cd:8c:d6:d6:ab:79:6c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Validity
Not Before: Jun 14 01:00:44 2025 GMT
Not After : Jun 15 01:00:44 2025 GMT
Subject: CN=894a51947b3bec15902628fb41938335c74a70be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:f9:de:1b:e4:70:cb:e2:68:13:59:76:85:
69:b7:70:8e:74:8a:9a:50:61:42:46:17:76:2f:97:
87:b5:04:0e:af:ee:49:b6:b5:54:cd:ab:57:b9:49:
be:09:54:5e:dc:c6:51:64:e9:8f:32:0e:b4:71:23:
58:51:33:60:d2:a6:74:7e:e5:6d:de:ea:90:e0:37:
fc:ce:04:1a:11:54:8c:c1:bf:ba:ff:cb:88:4c:d2:
14:3f:5c:8a:7e:3d:05:b8:8a:a2:41:4b:17:3b:12:
78:24:88:f2:eb:0e:3a:55:70:4a:91:68:6f:de:66:
f4:60:a8:bf:55:c9:30:a6:2c:10:e4:24:e7:35:9b:
63:ba:6d:2e:4e:d4:0c:53:35:1b:59:c8:db:90:af:
2c:c5:f6:82:d4:c9:3e:36:05:5f:e7:8d:ae:ac:d4:
cb:4b:14:06:a3:f5:ea:2a:4d:3a:5f:61:83:23:54:
9c:07:e4:7c:45:05:3a:d1:83:a3:61:32:e7:a5:80:
45:ac:ee:07:4c:dd:bd:66:99:74:4d:40:9d:19:18:
e6:7c:7f:63:fc:4d:ee:ad:a5:6e:71:fa:6c:ff:b3:
32:17:3d:1f:00:1a:05:96:9b:15:40:54:63:1f:7a:
74:c5:2c:dd:66:46:33:8a:05:41:76:cb:f8:57:16:
e1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4A:51:94:7B:3B:EC:15:90:26:28:FB:41:93:83:35:C7:4A:70:BE
X509v3 Authority Key Identifier:
keyid:59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:18:cb:b1:b5:46:81:a1:f4:78:bb:ef:e8:0b:e0:bb:ec:a9:
a7:83:ac:14:ca:7d:18:d2:9f:fc:af:85:52:f8:0b:7e:de:11:
88:ce:32:4b:09:02:a4:b1:82:ce:5e:a9:a0:69:43:64:3d:90:
da:86:e8:e2:95:00:45:22:0f:cb:97:ec:7d:82:c2:2b:86:ca:
08:a7:ab:79:95:e3:4a:32:89:93:91:48:08:d6:ad:76:5f:32:
1c:25:85:c1:2c:3f:fb:6a:ca:44:4c:80:0f:0b:7e:dc:e6:6e:
39:d8:05:cf:87:36:0d:22:7d:55:f8:50:d5:4d:75:cb:1e:fd:
7f:a4:08:4f:d2:0a:48:c9:ac:0e:60:79:24:79:08:e3:1d:0f:
a9:47:8b:af:53:ea:dd:b1:e0:b2:ad:b7:d0:14:91:81:cb:1d:
0b:d8:28:73:d3:01:a1:85:68:6b:37:48:cb:5d:24:3d:eb:49:
0d:a9:ad:77:d0:f2:3d:7b:41:23:5e:3b:1d:2d:d4:7b:76:0e:
fa:fc:67:21:07:69:58:2e:81:41:03:ac:4d:82:92:43:46:e5:
d7:db:c5:cb:f8:c7:c6:e4:45:0d:dd:7c:4d:98:0e:67:e0:61:
04:c7:5c:b1:8f:09:83:a7:1f:0a:96:9b:93:cc:3a:b4:e5:4b:
d4:c3:a2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:51:02 2025 by rpki-client