Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: LOggr2rVkNBPGyr6scKl6gq+xCE4uXxQMn9BRApNSR8=
Subject key identifier: 83:CC:C7:5A:9A:1F:98:64:FB:17:87:90:67:3B:91:A3:25:12:13:E8
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 0196DB1D46DA328035188FF7EEA4DE5CF25F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0651
Signing time: Fri 16 May 2025 22:00:51 +0000
Manifest this update: Fri 16 May 2025 22:00:51 +0000
Manifest next update: Sat 17 May 2025 22:00:51 +0000
Files and hashes: 1: 2symQxt9tiTp5JPRu9SVrhpHnoI.roa (hash: ETxwfWEk5Ji119X6QNRzmnwtDjfSz5qCO5WUq2I4qpI=)
2: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: 2NEeNAkO+i5E+25VH6crJ5Ju82pbfHGbjgypJu3qCUw=)
3: aiepDcInSC7XQM1NAo38Ltggcos.roa (hash: 6COc/WNOkQasZPkjRm4nKC/vd3bNAbojTsGDQ+J1+tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:db:1d:46:da:32:80:35:18:8f:f7:ee:a4:de:5c:f2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: May 16 22:00:51 2025 GMT
Not After : May 17 22:00:51 2025 GMT
Subject: CN=83ccc75a9a1f9864fb178790673b91a3251213e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ab:97:64:76:e0:eb:f0:da:99:a0:dc:d6:b1:
ff:ae:1c:10:1b:cc:05:ec:c2:ea:77:7c:1d:b9:e2:
a2:88:e8:b6:9b:c1:9e:3f:97:f4:4c:81:74:86:83:
2a:ea:86:a7:7b:9f:06:75:63:9b:5a:b8:7b:3b:c3:
f1:b5:27:e3:65:a4:91:6e:fd:6f:30:d6:10:ca:f7:
0c:d4:f8:f3:35:9c:2c:12:d5:bf:27:be:5d:e5:1e:
1c:a1:53:51:bc:86:52:f0:ca:a1:ab:2f:11:b6:bf:
97:af:f0:42:10:d7:46:55:26:03:3b:6c:af:a6:34:
e7:ab:f6:78:7b:36:56:65:58:81:85:2d:44:c7:0f:
97:17:ef:d4:33:dd:1a:86:fe:dc:3b:d6:19:2e:11:
8b:5d:48:a4:34:61:21:a6:62:21:8f:f5:2f:48:81:
ee:df:a5:6b:00:f9:84:d0:8e:9c:7f:35:03:42:c7:
44:d9:5d:73:b7:2e:37:f9:95:eb:42:38:12:85:42:
9e:94:07:c7:51:84:e0:53:f6:04:f1:5f:fb:60:cf:
45:5a:b5:e0:76:78:f7:ce:0e:f9:bb:6e:10:07:fb:
53:7c:1c:69:91:41:f3:85:7d:68:18:39:42:62:ee:
13:a5:81:9e:b2:c8:fd:89:75:94:22:bb:2e:e4:52:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CC:C7:5A:9A:1F:98:64:FB:17:87:90:67:3B:91:A3:25:12:13:E8
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e6:69:ec:00:8d:77:d2:f2:fa:fb:d7:4c:a6:09:cf:ba:16:
1e:02:26:b9:7a:67:71:dd:3a:ae:dc:b9:bb:92:ed:26:3c:63:
99:ae:84:22:f8:86:a9:5f:a5:5f:03:35:e4:d6:f2:7c:db:de:
e6:4c:57:0b:eb:0e:85:55:f5:9a:71:75:b6:07:00:da:b3:4d:
37:c7:4f:4d:d8:df:14:72:68:c4:f2:25:61:42:94:25:c6:ea:
91:6a:a2:0c:9a:77:ea:93:73:2d:1d:a4:80:8b:91:aa:d1:9f:
bf:96:cb:d6:59:0b:f3:a5:83:38:14:9a:a7:af:53:84:54:a9:
f3:81:ed:cd:21:c4:6f:a9:0d:9a:23:52:f9:62:94:9c:8f:ab:
d8:da:1a:c0:be:df:be:58:74:2a:a9:ad:ff:81:97:00:89:d7:
f5:10:7a:9f:66:fc:05:ef:8b:84:85:98:89:3e:e9:07:52:60:
b3:b2:e4:2a:fe:c8:51:94:ae:ce:7f:d2:6d:93:af:1e:b0:1d:
75:bd:ab:db:ec:b0:7f:2c:fa:24:14:a7:3b:bd:c2:64:9f:a1:
fd:d4:e8:bb:66:d7:df:71:1d:b7:c9:25:75:29:e3:3a:78:78:
d4:95:fa:1e:a8:c2:a2:23:6a:88:b7:18:5d:b4:5c:d9:b3:3e:
c7:f4:64:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:28:54 2025 by rpki-client