Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
File: WKJsK8UDp8aBKNKuGrTNN965kyU.mft (raw, json)
Hash identifier: OX+tt0Z3u/6IUy7OgRACzER1SpM58ZLdgc8V+SVt+SQ=
Subject key identifier: 65:86:7B:44:E3:78:27:29:7C:A8:F1:7E:62:89:07:45:F9:C4:C1:61
Authority key identifier: 58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
Certificate issuer: /CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Certificate serial: 0197B9A1C6456E0E347DDFBEBBE9A9CB4637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
Manifest number: 0CD6
Signing time: Sun 29 Jun 2025 03:01:16 +0000
Manifest this update: Sun 29 Jun 2025 03:01:16 +0000
Manifest next update: Mon 30 Jun 2025 03:01:16 +0000
Files and hashes: 1: WKJsK8UDp8aBKNKuGrTNN965kyU.crl (hash: kEdpTXEWDByOk1yLPov6oFSA/wGtZLOaLjLoc1SqUq0=)
2: hNIAp98aMKo8_sMHQg1HRKY3DlY.roa (hash: rldqTVSbz4XdzrBIUsjcfeUfYNq78azu2krskuL3dgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:c6:45:6e:0e:34:7d:df:be:bb:e9:a9:cb:46:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Validity
Not Before: Jun 29 03:01:16 2025 GMT
Not After : Jun 30 03:01:16 2025 GMT
Subject: CN=65867b44e37827297ca8f17e62890745f9c4c161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:37:0a:cb:80:1a:91:2e:c9:16:6a:47:ac:63:
76:2f:40:97:93:93:0b:53:c3:2a:80:da:06:8d:67:
3b:74:93:e3:6e:2a:a8:fe:64:5d:11:7c:b8:ec:01:
45:58:11:8b:aa:c7:61:46:42:ce:18:cd:51:85:fc:
be:7c:1e:31:2b:72:7c:13:fa:77:2f:84:2c:2e:a2:
b0:0f:5e:51:c9:99:d4:4a:76:5a:58:e6:62:4e:77:
96:a0:db:49:60:b2:30:ee:c9:1e:b4:60:f8:1b:87:
d7:0e:72:d4:c6:be:94:ab:77:35:6b:c9:67:8c:48:
29:99:88:bf:d1:35:98:72:28:da:51:98:e1:5a:6f:
bb:b5:f6:e7:b1:8f:af:17:ed:f4:e3:df:b2:85:05:
86:50:85:ce:36:5a:3e:f5:aa:5b:4d:ec:87:d6:91:
89:6c:39:85:7d:ce:b1:d4:e6:72:0a:6f:60:64:b1:
c9:ab:60:d8:01:4f:aa:ff:77:30:2a:05:6d:a4:20:
b9:7d:d9:3e:a6:21:96:d6:34:56:d4:29:ed:2f:3e:
63:3b:d7:3c:8b:ff:5f:06:47:ff:79:ba:e0:69:fe:
56:7d:54:ab:20:37:96:6f:09:18:d0:09:98:11:fc:
ec:9a:1a:8f:b1:8b:1a:9d:c6:85:94:49:ab:47:2c:
80:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:86:7B:44:E3:78:27:29:7C:A8:F1:7E:62:89:07:45:F9:C4:C1:61
X509v3 Authority Key Identifier:
keyid:58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8d:b7:a8:3d:1b:5e:7a:b7:a8:18:c3:68:eb:28:4c:86:5b:
87:86:2e:ef:39:ee:e7:ad:c3:20:d7:bc:ef:16:f7:9b:9e:ab:
e0:76:7a:87:4f:cc:24:50:9f:19:ed:0b:27:c8:85:6f:47:53:
6f:82:cf:51:9d:5d:16:69:18:33:5a:65:25:bb:0f:ca:58:68:
fc:c7:51:2a:a0:98:37:3a:ee:15:63:1d:e6:59:f2:31:c1:07:
2c:ef:27:10:80:c1:46:17:78:72:1c:cd:20:43:f3:f0:bd:b8:
bb:98:30:eb:92:2d:70:c7:aa:ba:6a:74:d3:82:b3:88:55:aa:
ce:b4:a7:f7:e8:47:7b:79:91:56:29:3d:c5:35:66:b4:dd:31:
47:68:8d:d0:a1:15:2a:d0:c4:92:e4:95:bd:40:6a:88:ec:9d:
d4:95:de:4a:88:f0:26:cd:f0:9a:23:cc:ec:5f:02:25:67:69:
34:cd:53:03:7a:2e:60:c4:2c:0e:b5:52:b2:18:54:c5:29:d1:
ad:0b:fd:13:01:f3:2e:86:8b:7e:29:a5:fa:1b:bc:3b:fa:bb:
44:5a:e6:dc:05:76:24:6d:9e:f6:e6:c6:10:7b:64:ca:d4:0c:
84:5a:ca:0b:de:92:59:b4:75:0f:6c:a6:84:ee:3b:60:62:ac:
91:27:c8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:46:49 2025 by rpki-client