Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
File: WCXq-3jz1WkmUXwqPNUzmqUTht4.mft (raw, json)
Hash identifier: IvA9Jw4Y9ZTDYcE0/HgGx7g1/HbR+fcc+GH3k7NaOcs=
Subject key identifier: 6A:FC:F3:F1:19:57:11:14:7B:61:FB:48:CD:64:0C:D9:C2:A4:29:15
Authority key identifier: 58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
Certificate issuer: /CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Certificate serial: 019769CEAD33ED1065ABE650EC07F306DD2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
Manifest number: 0134
Signing time: Fri 13 Jun 2025 15:00:41 +0000
Manifest this update: Fri 13 Jun 2025 15:00:41 +0000
Manifest next update: Sat 14 Jun 2025 15:00:41 +0000
Files and hashes: 1: WCXq-3jz1WkmUXwqPNUzmqUTht4.crl (hash: hZbmwR2c5SFES4/jax+Mt1ATV1Dq5Y1LH9znzB6Nyi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:ad:33:ed:10:65:ab:e6:50:ec:07:f3:06:dd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Validity
Not Before: Jun 13 15:00:41 2025 GMT
Not After : Jun 14 15:00:41 2025 GMT
Subject: CN=6afcf3f1195711147b61fb48cd640cd9c2a42915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:82:f1:72:a6:d5:28:32:db:06:ec:66:1d:
bd:0c:92:12:0f:6e:0a:90:e3:c7:1e:17:20:fe:c3:
da:33:6d:96:33:85:74:a2:9c:ed:ae:bd:08:99:3c:
de:6d:4c:b8:c7:12:80:74:cb:b1:32:bf:17:ca:46:
76:16:42:75:80:b0:a9:b8:de:ab:b0:56:ee:bb:33:
e0:38:d4:39:ea:71:01:8a:66:26:70:64:8f:7e:02:
2e:98:98:10:02:b1:3b:bd:3f:98:35:cf:82:06:b2:
0e:5b:46:e7:de:19:aa:9a:61:4c:5f:51:a8:e8:5e:
e2:45:d0:0f:b7:b2:e6:48:62:45:58:71:9d:6a:4b:
a7:32:04:44:6f:48:06:ad:ff:3a:a8:7f:3f:ac:81:
cd:08:2a:a3:7e:fc:fc:9f:3a:02:85:4d:bc:f5:dd:
f3:6b:8b:0d:f0:c2:ef:8a:e6:42:57:07:68:30:4e:
5c:8c:b8:fa:6e:5c:96:2c:80:f3:79:78:5e:9d:1a:
ba:86:ea:bc:e1:4e:1a:89:ef:85:ce:b4:04:c4:b9:
65:ab:0e:63:8e:b2:58:93:48:ae:23:16:dc:59:ee:
aa:b6:89:e9:a0:3e:43:99:d2:7f:91:f1:7d:df:bd:
2e:95:ec:b5:c9:09:bf:8d:9b:7e:39:47:74:8b:14:
05:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FC:F3:F1:19:57:11:14:7B:61:FB:48:CD:64:0C:D9:C2:A4:29:15
X509v3 Authority Key Identifier:
keyid:58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e8:80:89:78:40:c4:dd:be:71:de:1e:42:83:c3:77:50:fe:
06:a3:ca:b3:02:02:b0:9c:7a:5b:60:15:6c:d3:66:a4:0c:60:
47:0b:5b:61:c5:82:98:a1:33:34:47:1f:a1:75:f6:8d:6e:0c:
08:83:da:6c:9f:e2:4e:16:b8:44:d9:bb:0a:dc:4c:39:e5:71:
12:8f:d5:bd:44:d0:8c:bf:53:63:82:20:4f:78:40:f8:22:f1:
0d:33:37:85:59:62:96:4c:94:ad:19:ee:75:5c:46:ba:24:4d:
5b:fe:2d:98:5b:b3:9f:fc:9b:e1:5c:1d:1a:e6:0f:49:4e:3b:
5c:e2:9d:14:1e:9e:7e:e1:19:34:6b:56:f5:e6:97:08:bc:8b:
08:c3:a6:aa:3e:a3:5a:83:fd:d6:f9:8a:71:38:7e:24:29:e3:
c4:fd:5a:b1:de:4a:b1:dc:35:7c:e6:e6:20:7f:2e:5f:e5:e9:
91:2a:cb:fb:14:8d:71:dd:49:af:7d:20:d1:77:77:03:8c:43:
fe:48:bb:65:e2:6e:b4:01:f4:0b:1f:ac:f9:c2:6c:e1:d6:4a:
1c:2f:74:35:e5:75:23:fd:d4:73:dc:40:8a:2e:eb:73:bb:5d:
2d:df:7e:27:ed:9b:ff:7b:61:98:c8:70:f1:0a:3f:c9:ce:49:
c5:f8:a6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:32:49 2025 by rpki-client