
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
File: WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft (raw, json)
Hash identifier: 6B6EgBBt3OJFJE4qoj/gPHXihvYJ+gt6O3lZge2Xsos=
Subject key identifier: A7:ED:4E:30:C3:30:15:C5:19:7E:98:B6:79:A3:19:A5:FF:61:70:CF
Authority key identifier: 58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
Certificate issuer: /CN=58dd42ab3460279709c134b570f76e34e4d95b91
Certificate serial: 01976E1920D4F163BE333EE19D69D8B3B9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
Manifest number: 12B4
Signing time: Sat 14 Jun 2025 11:00:29 +0000
Manifest this update: Sat 14 Jun 2025 11:00:29 +0000
Manifest next update: Sun 15 Jun 2025 11:00:29 +0000
Files and hashes: 1: WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl (hash: Vdssv5J4+e7w3sm4BUL4eFaxin5u7ef9w0dqwQ9xBMs=)
2: fyfyl5NsL0BWisw7TSdl5mH8Mlw.roa (hash: /XQvoo54R4s6GryMB7e6F8gsZAvkqlu3TTwYzBkmBbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:20:d4:f1:63:be:33:3e:e1:9d:69:d8:b3:b9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dd42ab3460279709c134b570f76e34e4d95b91
Validity
Not Before: Jun 14 11:00:29 2025 GMT
Not After : Jun 15 11:00:29 2025 GMT
Subject: CN=a7ed4e30c33015c5197e98b679a319a5ff6170cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:9d:d7:66:37:2b:de:c4:38:71:a3:75:1f:
54:8f:ad:39:3d:3a:e9:63:33:bd:0c:fa:5d:46:bc:
73:42:a4:15:5b:65:ce:a8:6b:fe:86:22:f6:9c:aa:
cf:cf:be:13:af:a8:f4:a3:9c:1d:28:19:27:42:67:
1a:6f:35:4b:13:04:09:7a:a2:8c:0f:0d:b8:69:26:
cc:50:c1:e8:65:df:4e:ef:20:bb:43:71:cc:09:e8:
ef:d9:a8:81:4c:64:91:67:4b:c1:25:5e:f7:46:dc:
a8:e7:a7:82:0d:4a:22:b9:2a:32:d6:2f:39:66:c4:
92:0b:12:e5:7c:e2:3a:9e:83:7d:71:b4:57:1a:86:
2a:6e:99:d9:e6:79:44:2d:ee:f2:79:44:bb:e0:c7:
b5:c8:5f:97:5a:ca:c0:e5:c6:15:9f:fb:24:e2:0c:
77:03:7f:90:7b:87:d7:37:b9:c9:b4:3e:3b:d5:3f:
e6:9f:c5:c4:a6:bb:41:da:25:00:56:f0:bc:a2:e3:
40:c2:ca:aa:73:58:60:0d:9f:27:31:15:9a:f2:7c:
bf:a9:58:ad:03:61:14:e9:a2:e9:a9:62:e8:e7:fa:
b2:0f:9d:7b:28:90:90:69:06:45:17:74:13:8f:f9:
a6:ab:e9:94:8f:37:87:2b:d7:7e:71:4d:0a:ab:a6:
54:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:ED:4E:30:C3:30:15:C5:19:7E:98:B6:79:A3:19:A5:FF:61:70:CF
X509v3 Authority Key Identifier:
keyid:58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:17:c9:6c:eb:97:2f:12:c0:63:85:14:1a:6b:5e:e1:73:63:
54:e1:30:f3:76:3a:0e:0e:bd:8d:cd:43:af:b4:52:3d:77:3b:
cc:bc:0e:51:96:b8:41:94:1d:29:74:88:5b:ef:b9:6b:ed:62:
8a:b8:15:e5:44:50:aa:2e:08:e5:ed:bc:ad:63:b9:70:47:0f:
8d:be:11:07:56:81:f5:43:fc:8d:ca:8c:ae:1c:75:7a:dd:1f:
f1:78:c5:86:17:84:52:74:b5:74:fd:5b:03:f4:a6:3b:ef:4f:
8c:18:bf:7a:40:6f:3e:e5:5e:c8:3e:d9:15:bc:10:ed:25:96:
64:f6:f7:3d:79:2c:a8:2b:28:7a:7a:23:16:2a:3c:ed:eb:d9:
61:67:8e:19:05:a7:47:52:2c:f7:5e:84:8a:a9:93:66:8e:03:
6d:35:15:f3:a8:06:3b:69:89:1f:86:8a:03:96:d2:5e:6d:6f:
46:83:64:53:ae:5b:5c:b7:65:06:fc:dc:ad:c8:ab:d5:ca:47:
42:f9:1e:18:1b:41:10:c1:1f:ff:88:f2:5b:ab:10:57:8f:36:
63:f8:cc:c7:3c:03:c1:7b:a7:3e:76:c7:1f:1b:52:9d:9d:0f:
da:65:5f:b8:d2:32:ef:e3:a1:91:1c:86:c1:d7:83:33:bd:42:
54:0c:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:49:53 2025 by rpki-client