Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: 23XvsJFuF1FqSKlWqBWQoCgSZSDh3M9j3/sZJlUPpu8=
Subject key identifier: 84:E8:10:00:32:ED:49:34:40:3D:06:71:B9:F1:81:37:BC:7E:F9:A1
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 0197B88F9E1FB638768703E6CE0B786EB14D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 011F
Signing time: Sat 28 Jun 2025 22:01:49 +0000
Manifest this update: Sat 28 Jun 2025 22:01:49 +0000
Manifest next update: Sun 29 Jun 2025 22:01:49 +0000
Files and hashes: 1: 1-5XVVmVVHnbWezmHevbBtqQuslE.roa (hash: TCMJyFyTSXpsoaD5GEolasl3XtqDe4iETZ7PPnlIixY=)
2: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: lf2ACv38prmRZeBUKDYBXz1/3T1k/HIdaL5wWq7kLKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:9e:1f:b6:38:76:87:03:e6:ce:0b:78:6e:b1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: Jun 28 22:01:49 2025 GMT
Not After : Jun 29 22:01:49 2025 GMT
Subject: CN=84e8100032ed4934403d0671b9f18137bc7ef9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:be:db:5e:68:c7:30:08:46:96:42:6f:b3:
4b:4a:92:cb:28:95:52:db:d3:c0:46:e7:09:b0:14:
fd:e9:cc:90:3f:0b:2f:28:e4:55:83:73:fe:45:48:
11:e5:30:76:5c:eb:47:81:8b:a5:0c:74:d5:c9:fa:
9e:ea:d5:3c:2d:9a:cf:60:83:f7:ea:84:1b:80:62:
77:8d:f9:f7:ef:10:94:a4:02:c7:e0:1f:d9:ae:f7:
eb:2e:f1:74:f4:99:b2:dc:60:c4:71:e9:0c:e0:63:
c2:ca:dc:d6:c9:c2:b9:77:8f:3a:b6:d1:c9:58:7a:
c8:d6:e8:48:c4:a0:59:97:21:7c:32:3f:ad:98:06:
f4:46:b5:fb:59:8c:7d:50:b7:ee:1f:2d:45:73:62:
9b:c8:50:d1:79:64:a9:36:83:cf:b8:26:6b:86:4f:
60:db:f6:35:da:87:45:8d:f2:44:d6:18:3c:36:85:
c9:d6:f3:a0:14:e1:2c:f5:1b:dd:15:05:8d:65:58:
9c:01:b2:85:02:70:5e:aa:a1:82:2b:a7:ad:13:bd:
9f:16:24:c8:fe:3a:dd:0b:05:ee:a8:8a:00:d6:27:
95:0d:a0:d3:9e:57:ca:c2:7f:93:c7:a9:ee:bb:1c:
cd:9a:e2:66:0d:26:ee:56:c9:cd:81:20:e0:87:7c:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E8:10:00:32:ED:49:34:40:3D:06:71:B9:F1:81:37:BC:7E:F9:A1
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:74:96:8e:48:93:6d:ba:10:6a:8e:84:ff:52:b5:eb:1e:97:
54:90:77:88:e0:49:5f:5b:ad:e4:0e:33:cc:0c:e0:d8:cf:b7:
d5:5e:12:fb:9a:f2:cb:81:38:e9:a9:54:90:b2:5b:3c:d9:20:
36:40:55:dc:2e:3a:fd:a2:cb:3d:22:29:f8:e9:cb:7f:37:0b:
8b:fc:36:12:0b:97:b6:84:72:f8:2e:85:30:75:a7:91:07:e9:
9d:e1:06:d2:81:83:6f:89:da:7b:9a:68:9d:6c:ae:f2:d6:35:
bd:5f:b2:81:c1:51:c7:59:fa:2e:f3:eb:f4:3b:89:b3:13:e1:
dc:1e:3a:d3:d8:4a:55:60:6f:75:57:c1:09:05:8f:4e:4d:9d:
db:83:c8:e1:fa:f0:eb:5f:f7:7a:03:b4:a5:74:ad:6b:0a:b2:
ec:0e:73:30:82:74:25:47:16:c6:15:83:e6:03:9b:e2:eb:e5:
d1:36:31:31:50:67:0f:2f:17:26:2d:c9:f8:3a:c4:76:94:fd:
21:8f:9f:dc:2e:a1:e5:d7:a4:c9:ae:5b:b3:e6:77:40:3e:1d:
86:bf:c0:d1:d9:0f:43:2a:85:c8:3e:5d:de:2b:e9:ee:28:d7:
c0:bd:f2:31:51:3b:08:0e:58:cc:b4:1d:d8:cf:88:1a:f6:c9:
bc:ad:b3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:32 2025 by rpki-client