Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
File: WNKjVqVHgVW-qovGJWqG9tWz9zw.mft (raw, json)
Hash identifier: sgSN6NJNAqDfD2WCo1cL+AZ3smS5xyoveziTcz7qkCM=
Subject key identifier: B4:E0:E0:09:7B:AC:FC:3F:B0:9F:87:17:FD:A9:AF:E9:D1:08:EF:62
Authority key identifier: 58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
Certificate issuer: /CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Certificate serial: 01976884ED7E56BF38434F4D66193D12B3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 09:00:31 +0000
Manifest this update: Fri 13 Jun 2025 09:00:31 +0000
Manifest next update: Sat 14 Jun 2025 09:00:31 +0000
Files and hashes: 1: WNKjVqVHgVW-qovGJWqG9tWz9zw.crl (hash: +3KuRLatrF3xjdFUQF5fQ0o56hTNy8k6qkXl4xDo43I=)
2: g4DPD_TlI2jk4YtUIO3nppJCypo.roa (hash: 1cUob6Ttj1c9mZCdpqGoW3x2UVNqUiWBsqfqlcDpGkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:ed:7e:56:bf:38:43:4f:4d:66:19:3d:12:b3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Validity
Not Before: Jun 13 09:00:31 2025 GMT
Not After : Jun 14 09:00:31 2025 GMT
Subject: CN=b4e0e0097bacfc3fb09f8717fda9afe9d108ef62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a8:65:63:8f:d4:de:36:aa:a8:df:e9:93:d4:
04:87:3f:a2:54:33:42:02:bf:e5:2f:88:36:ce:39:
25:35:fd:e8:ce:21:3a:65:79:5f:2e:fe:bf:49:9d:
d7:7e:4c:45:57:c6:41:6f:88:20:33:48:79:6b:40:
07:eb:bc:0c:e9:ca:a0:a7:43:03:37:23:29:6e:ba:
60:1f:b1:e7:e2:4e:5a:30:0b:aa:7c:58:c1:ce:28:
3d:9d:c3:9e:fc:81:bd:fb:ca:c5:51:4c:64:a4:20:
bb:b1:4a:80:fb:bb:87:e5:7e:78:fd:a7:ef:a2:3f:
3c:26:a1:61:7f:9f:22:09:cd:bb:46:c8:04:39:f9:
e5:82:49:76:46:a5:44:81:75:c1:42:de:0f:30:9f:
18:09:9e:8d:fa:90:6a:f5:ec:07:0d:a2:0b:c5:0d:
56:b1:64:83:20:93:ed:a4:fa:68:57:89:91:74:87:
85:dd:dc:43:5d:21:81:8e:42:ab:34:01:a0:8d:a5:
82:4f:69:0b:e6:5e:07:81:7c:50:6d:70:57:e5:27:
be:fe:cd:a9:d5:6c:47:23:e9:7c:53:37:ec:ee:71:
53:e4:8e:2d:83:6d:56:02:d0:53:97:cc:23:85:6c:
37:e7:cc:37:28:e1:15:37:96:db:b3:aa:10:10:ee:
c2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E0:E0:09:7B:AC:FC:3F:B0:9F:87:17:FD:A9:AF:E9:D1:08:EF:62
X509v3 Authority Key Identifier:
keyid:58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:82:da:09:e7:4b:50:18:39:ab:4a:55:8a:96:bc:b1:b7:5b:
95:f2:1c:c1:ad:f3:3f:7b:14:f3:ad:9d:86:09:1f:76:d0:55:
b7:16:6b:74:e9:f7:8e:66:ad:25:e4:3e:51:5c:71:30:2f:d3:
01:80:37:bb:48:7c:9f:6d:49:dc:c0:96:35:76:7e:ec:c6:43:
7b:3c:28:15:20:ae:78:35:85:fd:0a:04:7b:1f:1a:76:e3:04:
62:03:58:94:28:f2:32:c5:94:88:a6:3c:a7:67:c5:62:b0:54:
d8:45:5a:b7:18:68:8e:7c:42:8b:41:22:4d:6a:ce:0b:35:70:
56:c6:f9:be:3d:a3:66:c4:4d:82:fb:43:eb:61:0b:1e:3a:b4:
6b:74:6f:66:2b:27:5c:63:c0:ea:d6:02:0d:8d:97:a1:56:da:
7f:a3:02:63:fa:c0:ac:e1:3b:09:9b:d2:41:0f:3b:30:e1:ea:
0f:22:9e:4b:cb:f5:d9:d5:4c:fa:1d:21:a8:fc:31:5e:8a:85:
a8:f9:11:95:ed:10:4a:a4:1d:01:01:99:0b:7e:b3:39:06:a0:
b0:97:53:e8:6d:04:14:3e:23:d0:c6:19:c6:16:d2:8f:be:ac:
63:bd:31:bd:be:1c:0d:b3:c8:f5:1d:91:ac:c3:7b:44:ab:58:
b6:e9:2b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:28 2025 by rpki-client