Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
File: WKhqbHH7c0xwW15m50rBxWu5YF4.mft (raw, json)
Hash identifier: ZXD/WAFQDJJ4o3kc0d+CI+up/JGBvgHnf60uAa9K9Fg=
Subject key identifier: 9E:8E:30:6C:BF:BD:D8:F7:1A:94:4F:97:7F:9E:32:98:AE:6D:8C:FE
Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
Certificate issuer: /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Certificate serial: 019770E3530FF2E8011E627B240D4DC6A5D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
Manifest number: 0BAC
Signing time: Sun 15 Jun 2025 00:00:35 +0000
Manifest this update: Sun 15 Jun 2025 00:00:35 +0000
Manifest next update: Mon 16 Jun 2025 00:00:35 +0000
Files and hashes: 1: WKhqbHH7c0xwW15m50rBxWu5YF4.crl (hash: xwc4aWKjSuk6V2Mfq6JyvDs6InZmMq0ihzCZtO2vvAA=)
2: eTD5X7eUVxPbE-bCRH9QGxLRZDs.roa (hash: IG853MFkGaq1sWpTd3DWggMITF7We7r2IbsZKj9lAZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:53:0f:f2:e8:01:1e:62:7b:24:0d:4d:c6:a5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Validity
Not Before: Jun 15 00:00:35 2025 GMT
Not After : Jun 16 00:00:35 2025 GMT
Subject: CN=9e8e306cbfbdd8f71a944f977f9e3298ae6d8cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:08:03:11:9f:59:09:c3:b2:91:76:ee:08:
99:de:b4:68:dc:e3:75:b6:db:10:0a:d0:28:08:b6:
9a:06:e7:3d:d6:1f:09:eb:0c:25:7d:76:7d:c7:a7:
9c:49:06:7c:fa:18:46:0f:39:62:ed:f1:77:98:74:
3b:09:1b:f8:2b:fc:58:e1:83:7b:42:58:57:d4:82:
10:63:4f:d1:bc:70:55:03:4b:de:b8:cc:cd:3c:db:
9d:63:7a:f7:ab:70:20:eb:c6:e0:db:72:81:2a:22:
71:c1:b9:51:23:16:78:e8:83:b2:8a:ee:5c:ec:13:
ae:a1:58:43:b1:93:d6:9f:5d:b5:5b:69:c0:9a:1a:
52:b2:39:fe:b8:f0:79:69:91:53:fa:bc:42:11:29:
ad:4f:fe:7d:d0:44:e2:c7:bc:b9:34:cf:b2:ce:9d:
a2:ae:ed:cd:2f:04:33:8f:4a:f6:bc:a1:82:a3:2e:
25:62:31:b9:da:53:d0:22:87:bd:7b:12:cd:d4:c2:
cc:d1:42:74:a6:63:6d:a8:8b:20:a7:e3:49:43:1d:
8d:d9:75:f0:5f:90:f6:99:c0:8b:e0:a8:ab:c1:d4:
d3:af:46:37:5c:89:62:04:72:ef:94:64:9a:bc:76:
5a:95:39:12:dc:c9:da:1c:18:35:c5:44:b3:88:9b:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8E:30:6C:BF:BD:D8:F7:1A:94:4F:97:7F:9E:32:98:AE:6D:8C:FE
X509v3 Authority Key Identifier:
keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:79:b2:1c:cc:f7:c6:62:c1:f7:a0:b1:94:7d:8a:73:86:84:
5c:04:62:1e:58:00:e6:dd:93:37:5c:03:c5:ab:b4:ba:67:32:
1e:39:f2:9f:2f:3c:9c:df:75:8f:7f:d6:62:91:d4:a2:5b:db:
3f:41:42:a0:47:ad:c5:61:55:90:02:4b:69:ce:ed:1f:f2:14:
85:c8:a8:15:69:c5:86:70:75:43:8c:ae:d1:63:40:db:48:bb:
36:ca:16:1e:85:3e:0d:41:0e:b3:b0:f5:f7:a0:4c:3a:c6:a3:
97:11:80:1d:80:5c:3c:f0:af:9d:22:97:20:6e:4b:a2:a6:dc:
42:98:cf:a9:dc:64:ec:ef:bd:6c:6c:dd:8f:52:d3:d3:a7:2d:
2d:48:ab:3d:c9:33:41:2f:5e:00:0a:42:a3:88:9d:85:67:20:
fd:7e:88:4b:d3:21:4c:2f:43:ea:ef:70:ea:f9:59:b5:5d:5c:
d6:fc:15:d4:8e:78:ec:a6:4f:fd:1c:04:34:05:2a:13:81:89:
c0:59:d5:a8:69:9a:dd:ea:dc:d9:68:4d:ee:f2:fe:3c:5f:f3:
c3:24:81:f8:f7:66:2f:f5:30:27:79:7e:c6:80:1f:7c:0d:3d:
c7:6b:09:6b:20:40:5f:1e:df:87:11:77:6a:69:32:de:b9:fe:
44:97:6e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:12:39 2025 by rpki-client