Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
File: Wik9777xDXPPEfK-hlVYjtpopEw.mft (raw, json)
Hash identifier: /BWI1riHjVj+BD6FlrfpuET5Z1rHqhiXc8j0qujovHU=
Subject key identifier: 4F:2D:94:B4:A6:01:6B:C7:03:62:0C:97:01:FE:B4:B0:BD:43:6E:84
Authority key identifier: 5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
Certificate issuer: /CN=5a293defbef10d73cf11f2be8655588eda68a44c
Certificate serial: 0197B7B3448B990D4C0E422EEF985DD7123E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
Manifest number: D5
Signing time: Sat 28 Jun 2025 18:01:08 +0000
Manifest this update: Sat 28 Jun 2025 18:01:08 +0000
Manifest next update: Sun 29 Jun 2025 18:01:08 +0000
Files and hashes: 1: Wik9777xDXPPEfK-hlVYjtpopEw.crl (hash: 0dpU+lQ+VkyAeCM6T8Gysy+7QEzOVXF2LngeE38KfwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:44:8b:99:0d:4c:0e:42:2e:ef:98:5d:d7:12:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a293defbef10d73cf11f2be8655588eda68a44c
Validity
Not Before: Jun 28 18:01:08 2025 GMT
Not After : Jun 29 18:01:08 2025 GMT
Subject: CN=4f2d94b4a6016bc703620c9701feb4b0bd436e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:72:96:bb:3c:d4:ca:81:d9:1f:85:4b:bf:
7e:0c:a1:12:e9:73:7c:a4:b8:3e:e3:47:6e:ab:d9:
00:e9:7a:38:d9:7a:42:c5:e6:40:f7:7d:b9:33:dc:
aa:7e:ef:e5:bc:d3:5c:3f:13:aa:41:42:e7:1f:6a:
64:97:88:95:13:6f:82:a5:c4:72:74:15:07:fb:a6:
9d:d9:e1:df:ab:60:c0:60:31:e2:18:0e:44:ce:ac:
e1:35:bc:71:03:cb:0e:cc:20:02:2f:5a:ea:2c:e0:
4f:d5:95:73:aa:9d:d6:9e:1a:ef:3b:26:cd:29:e1:
d4:30:00:66:33:b0:d8:ae:20:4f:f2:36:5a:e9:ea:
4c:87:90:a1:11:d9:82:a0:fc:d8:10:2a:e4:ce:2e:
71:03:33:07:e3:5f:b8:6a:c5:46:eb:25:20:34:50:
ca:45:af:09:14:dd:92:a6:66:18:8d:d4:5c:64:25:
74:d9:6d:fe:81:35:18:a3:92:9e:62:09:99:4a:ee:
45:94:85:c9:8a:01:37:36:64:5a:09:3d:e3:69:ba:
3c:81:be:40:41:fb:70:76:92:ef:32:cc:1e:61:c7:
e6:d2:08:b3:7e:c4:5d:ac:65:62:cf:ec:00:f8:2c:
16:17:88:ac:a7:6a:17:da:62:14:b5:f8:d9:9e:63:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2D:94:B4:A6:01:6B:C7:03:62:0C:97:01:FE:B4:B0:BD:43:6E:84
X509v3 Authority Key Identifier:
keyid:5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:94:1f:6b:cb:4c:ed:54:b1:41:a5:53:66:82:9a:2c:5f:4c:
5c:30:14:a1:57:20:e6:55:ea:87:c8:81:6e:5e:97:8a:0b:31:
41:da:30:80:0b:1b:98:3b:37:dc:81:40:8d:e6:1f:73:41:ff:
b1:e7:88:1c:65:84:05:4a:e9:4e:f0:86:0b:61:79:b8:c8:14:
20:1e:55:69:cc:42:7c:c4:f3:ab:78:fd:a2:67:fd:9d:b8:53:
0f:8c:f8:b5:62:73:d8:f0:2f:78:24:54:96:3b:9a:3f:9b:76:
fc:12:2e:c5:7b:e6:36:22:a9:6c:c4:3e:f9:c5:66:d1:c7:7e:
c2:56:a0:48:7d:a6:e7:90:41:c0:d2:1e:1d:ec:24:0c:c6:f2:
bd:9d:47:3e:21:2e:09:71:bf:fb:d6:40:77:1c:9f:fa:5a:82:
9a:15:bb:b6:25:8f:3d:2c:85:7e:76:63:95:96:75:b8:74:d6:
07:f6:ae:88:ba:f3:dc:ba:b4:2b:37:80:7c:08:5a:a1:5d:69:
f7:c3:b7:74:2f:d6:9f:ba:67:59:63:aa:0b:f3:d4:35:31:fa:
b9:25:51:31:da:a5:fd:80:76:5e:ab:97:59:41:4d:72:fa:ef:
64:ea:db:ef:2a:bc:94:8d:63:bd:34:8a:4c:12:06:08:0f:63:
6c:7e:54:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:26 2025 by rpki-client