Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
File: WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft (raw, json)
Hash identifier: 3roqiVl51X0Nvkj/5z8VJCiUiOtqBTW++1E1Dm57/48=
Subject key identifier: FD:30:C7:F2:36:D8:75:A3:12:DB:9D:56:CB:5D:74:9E:6F:1C:20:0D
Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
Certificate issuer: /CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Certificate serial: 01988354FA45BADC387E7210A3C6875CD52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
Manifest number: 0CA6
Signing time: Thu 07 Aug 2025 07:00:40 +0000
Manifest this update: Thu 07 Aug 2025 07:00:40 +0000
Manifest next update: Fri 08 Aug 2025 07:00:40 +0000
Files and hashes: 1: WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl (hash: JPFargpId4ikW4eM1qkEGyV8BO3W0VSrFhbBxQ3jJB0=)
2: yIEPYCgadoB6X07AnuVv3-Sl8cU.roa (hash: muswJ5Tpw03mqWebPMphb2rOsPv5OQmKFZxcXdUMf8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:54:fa:45:ba:dc:38:7e:72:10:a3:c6:87:5c:d5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Validity
Not Before: Aug 7 07:00:40 2025 GMT
Not After : Aug 8 07:00:40 2025 GMT
Subject: CN=fd30c7f236d875a312db9d56cb5d749e6f1c200d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:20:18:cb:e1:85:0b:f6:63:1c:eb:cb:15:
a9:eb:ea:72:8e:7a:24:f5:f8:aa:dd:c4:95:4e:cc:
bc:bb:ec:4a:cb:db:cb:f7:2b:bc:dc:b7:5f:06:46:
7d:c9:6c:b7:cf:5d:f1:d1:2b:0a:e9:2c:f5:85:95:
e5:4b:f4:de:57:14:a1:1e:60:45:f7:e0:87:a6:e1:
ac:8b:db:76:e8:4c:e9:c9:67:ed:1a:a1:c6:47:45:
2b:3a:73:2b:e6:d9:aa:8c:90:f5:1b:13:39:01:25:
c8:73:ee:80:aa:d3:70:39:75:78:0c:d9:d1:6f:40:
d2:c3:f6:b8:f0:3e:29:ae:de:03:86:29:69:de:f8:
2c:50:76:42:6f:66:b6:57:4e:b2:b9:d6:9e:04:a3:
8d:c4:f3:3e:73:38:8b:9c:33:79:ab:d7:08:42:9e:
e8:e3:f7:a5:1a:46:6f:98:36:00:fc:2b:0c:f3:9b:
bf:00:77:e6:2e:2f:78:59:72:e7:f3:58:5a:ef:79:
27:e6:7f:d3:63:35:e7:87:18:02:9b:aa:f1:d7:7d:
63:34:af:c8:1b:41:c4:95:f6:21:ba:5b:07:6e:50:
45:8d:cf:b7:c8:2a:48:8b:70:4e:34:2d:48:53:4b:
ea:bf:ff:a1:14:d9:a8:ba:a5:d7:96:89:20:bf:aa:
dc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:30:C7:F2:36:D8:75:A3:12:DB:9D:56:CB:5D:74:9E:6F:1C:20:0D
X509v3 Authority Key Identifier:
keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:29:29:63:30:38:db:55:8d:30:00:40:21:68:02:30:8f:33:
a5:b6:30:52:3d:7a:17:17:37:37:88:f7:cb:5b:b5:c9:72:b0:
3d:85:d1:80:3a:f7:f2:4d:15:3d:9a:15:e7:85:89:e6:26:f5:
ca:f1:8b:0f:ce:1e:ab:47:3c:8e:b5:56:dd:77:95:26:11:90:
2c:f6:97:40:ac:d2:f1:c6:d2:c4:95:79:9e:fd:c4:4c:42:14:
0e:26:b4:bd:03:a6:1e:e6:f9:e8:8d:f5:64:49:0c:f9:59:e0:
8e:f6:41:e4:68:8e:de:da:8b:07:d1:99:9d:09:cf:65:90:25:
69:b9:66:df:93:34:e5:83:d8:c7:c9:e4:41:8a:f4:b8:15:af:
34:ab:5a:b1:41:aa:a0:c9:32:df:06:4d:40:39:87:a8:ed:e9:
87:bf:1d:d8:88:4b:73:8f:ae:3c:a9:85:0a:a8:de:6d:33:ba:
8b:ee:ba:be:07:f8:8d:67:a1:9a:94:0d:38:62:6e:5a:d4:22:
ad:9b:8a:24:1c:63:c9:73:8b:63:59:c9:8a:4c:8d:24:60:01:
64:d8:56:83:5e:dc:5a:1b:ca:e2:fe:ee:cf:78:99:98:30:6c:
2f:3b:dc:73:54:43:31:c0:d4:07:db:df:16:b1:e4:a9:3d:81:
f1:43:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:12:19 2025 by rpki-client