Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
File: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft (raw, json)
Hash identifier: keyYJaUdC4goRML0VeGJzcMysk4G2nsK52wVOTXe760=
Subject key identifier: 6B:F0:5C:1C:EF:78:DE:C3:11:89:B8:FF:F8:B0:E2:52:4E:A7:60:EF
Authority key identifier: 58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
Certificate issuer: /CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Certificate serial: 0197B6A0D3AA46870D3CE42B414FA1D9C77B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
Manifest number: 024E
Signing time: Sat 28 Jun 2025 13:01:22 +0000
Manifest this update: Sat 28 Jun 2025 13:01:22 +0000
Manifest next update: Sun 29 Jun 2025 13:01:22 +0000
Files and hashes: 1: CqZAFiIzp-k21bzGsuj1395ZHTc.roa (hash: gXssHvpvQonpjegaCBTMeVVsQnPbWqrgEQgoKWzts44=)
2: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl (hash: jntBy1o6I2RaD+hGcS1wz4EeziBtJzCamN9QQuqVF20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d3:aa:46:87:0d:3c:e4:2b:41:4f:a1:d9:c7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Validity
Not Before: Jun 28 13:01:22 2025 GMT
Not After : Jun 29 13:01:22 2025 GMT
Subject: CN=6bf05c1cef78dec31189b8fff8b0e2524ea760ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:00:8b:ec:eb:06:1a:ec:ff:68:80:28:54:
a4:ae:0c:ac:a0:53:3d:a3:00:31:f5:df:32:e4:c9:
08:3f:28:d1:d3:8a:ad:c0:17:85:b1:af:00:a8:e0:
97:d2:cb:49:cb:be:25:8b:99:f7:6c:ca:e7:b3:4f:
03:7c:65:f1:2c:6c:e7:f8:7b:7d:0a:98:f0:ce:5d:
f2:79:10:41:43:48:4d:49:62:e1:25:b5:51:56:0b:
a5:7f:bf:3b:f5:3a:33:4a:c5:4e:f2:36:1f:be:7a:
8b:0f:18:35:22:ac:89:84:f4:4e:60:5d:5c:c3:90:
98:d7:53:69:12:98:b1:bf:be:7a:3a:fc:db:52:da:
59:73:71:d2:c1:07:20:3a:e9:59:10:03:82:91:77:
34:3e:8b:d8:64:fa:5b:8c:05:9e:fb:0b:e5:65:d5:
63:1d:e8:58:4a:21:2e:eb:a8:7e:1b:f3:28:b0:a1:
09:6b:de:a0:33:4a:94:55:fd:35:50:a0:23:9b:77:
b4:ca:c8:bf:90:1c:48:5d:8e:36:3a:ba:b4:1a:13:
ec:c5:ac:03:99:e5:e1:e7:88:22:3c:44:c6:50:18:
ea:5a:8d:66:7e:94:68:4d:ef:2c:2d:04:fd:12:47:
05:c5:99:a5:23:56:c9:7a:c9:11:c4:9d:b1:bc:4a:
52:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F0:5C:1C:EF:78:DE:C3:11:89:B8:FF:F8:B0:E2:52:4E:A7:60:EF
X509v3 Authority Key Identifier:
keyid:58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3b:a3:d3:83:e1:f4:a8:2e:18:dd:f7:ad:d8:62:c1:2f:e6:
63:be:d9:7e:1d:f6:a5:39:66:59:ed:04:19:c9:87:3c:b6:2c:
59:44:ae:57:e0:88:73:0a:8f:b8:d7:60:49:fb:80:51:1f:78:
99:82:28:2b:61:2b:1d:10:ba:f5:08:9c:79:b6:19:86:cf:67:
98:8d:89:57:b7:99:78:da:0f:bd:db:70:e3:46:c9:35:5e:8b:
91:3e:02:ad:d9:92:29:ff:fa:d2:a3:29:24:dd:80:99:74:29:
60:86:07:a9:2a:30:36:67:6d:74:a9:73:91:49:e7:4b:0f:78:
81:81:b8:bb:a3:81:ae:dd:cd:b4:f9:c1:fd:61:bd:a9:d5:97:
a1:05:a2:af:04:db:5a:35:5d:96:9d:8f:12:50:f6:ee:66:18:
19:c8:6f:21:74:11:3b:8c:3d:51:d3:52:65:fd:54:b8:40:4f:
34:93:da:4c:3b:68:c5:47:93:16:07:4a:cc:d0:7c:ea:9d:0a:
4a:14:05:7b:3d:57:7a:b2:ee:90:63:97:77:11:a3:fb:52:89:
bf:cd:75:0f:71:64:57:6d:3a:bc:0d:a6:19:a5:5c:54:15:8d:
ee:8c:3f:8f:b4:49:d1:65:97:5f:b7:be:1d:0d:fd:60:d8:6f:
a9:51:d1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:04 2025 by rpki-client