Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
File: WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft (raw, json)
Hash identifier: R1riZ/2SjoARrcnDTZ+lpyRAbr9Cl/AF4GCO4mOyQRI=
Subject key identifier: FA:A1:20:32:52:44:C7:1B:73:3C:FD:35:A1:2A:F5:E1:AA:8E:21:53
Authority key identifier: 58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E
Certificate issuer: /CN=58afedfef67918490634be4e2b75c11b70c2ea2e
Certificate serial: 0197B6A16B85EEBF20806C8C4063A2D24DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
Manifest number: 09E0
Signing time: Sat 28 Jun 2025 13:02:01 +0000
Manifest this update: Sat 28 Jun 2025 13:02:01 +0000
Manifest next update: Sun 29 Jun 2025 13:02:01 +0000
Files and hashes: 1: WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl (hash: LFD03dN7Ju+w8RTWYQOT82PO3A8tU08H4+71pScRI/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6b:85:ee:bf:20:80:6c:8c:40:63:a2:d2:4d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58afedfef67918490634be4e2b75c11b70c2ea2e
Validity
Not Before: Jun 28 13:02:01 2025 GMT
Not After : Jun 29 13:02:01 2025 GMT
Subject: CN=faa120325244c71b733cfd35a12af5e1aa8e2153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7b:7e:d7:0b:91:25:66:40:ae:75:71:e4:2e:
70:5f:c6:40:2b:bd:53:c8:4d:d9:a0:4d:e0:44:09:
15:ec:c4:44:a5:c4:4f:f7:47:b8:c8:35:a9:4a:22:
71:44:e2:00:d3:6a:24:46:82:dc:57:e5:6d:fe:c8:
c0:00:bf:e9:5d:7e:3d:43:b8:14:a0:98:2d:a2:95:
37:92:97:e5:d5:da:91:b6:5e:f5:86:a5:ed:52:8f:
d9:78:57:5e:8a:71:c2:52:ea:03:78:f2:3c:33:df:
79:7b:2f:78:79:43:e5:97:47:ed:c0:4a:17:97:f6:
e0:0f:a8:d8:82:38:f2:be:4c:ae:fd:d2:e1:f9:17:
2b:c4:37:14:49:99:8f:b0:f3:3a:06:c1:e7:99:3a:
8f:b6:85:95:61:32:5f:32:22:77:94:dc:df:b3:b9:
e3:80:90:40:fc:32:ec:b5:9b:cc:12:e0:ce:99:9b:
04:07:f3:e3:9e:03:39:ea:bf:5d:d7:db:49:31:cf:
6b:8f:26:7b:46:17:ef:e9:d6:e2:ab:0a:8d:8d:4f:
23:03:5e:24:6b:13:9b:2e:a3:56:e3:7e:0d:53:45:
70:7c:86:74:b0:21:d7:e4:6a:b9:67:8b:e1:44:5c:
3b:e7:c1:0f:a4:fc:64:10:11:1b:c3:c2:5f:59:f9:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A1:20:32:52:44:C7:1B:73:3C:FD:35:A1:2A:F5:E1:AA:8E:21:53
X509v3 Authority Key Identifier:
keyid:58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:47:d2:52:33:ea:f0:81:fb:ff:4f:c8:1e:b6:1f:07:7f:49:
b3:73:49:59:f5:f7:7a:0d:e3:77:c9:b2:55:ef:f4:fb:8f:57:
85:ef:43:e9:fc:5a:2a:c2:b3:15:1b:95:ad:96:51:ae:6c:de:
31:c2:41:b5:85:4f:78:80:29:5b:69:f3:fb:d3:04:e5:c1:0b:
df:8d:6b:fe:31:f5:87:ff:8f:4d:40:49:b6:89:3a:6e:59:35:
93:59:7b:31:04:2f:5a:c3:ab:a5:57:6f:e9:03:4a:d2:91:53:
18:b1:e2:b5:72:e6:53:b0:b6:39:f0:e8:58:f4:fd:bc:c0:ac:
3c:0f:23:9a:06:ff:6b:c7:f1:57:b6:6f:fc:73:14:fb:29:38:
55:07:77:4a:2f:e8:bc:af:de:4c:21:62:28:ea:77:23:90:45:
a5:2c:2c:37:95:e5:ff:4c:16:55:8c:04:4a:19:b3:48:2a:20:
90:03:b8:2a:6c:6c:59:4b:a4:50:e2:7e:3e:ed:90:53:67:c2:
72:d4:f4:6d:48:73:f4:25:c7:91:17:2a:1a:3d:18:89:d3:b2:
d8:e2:05:80:6a:42:4a:ce:97:3c:b8:ba:09:32:44:17:64:88:
68:b7:bd:58:89:c0:e8:b8:61:cc:11:25:d1:26:94:3c:96:4a:
b8:05:36:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:00:26 2025 by rpki-client