Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
File: wKopmx5fodUSbfrXXf1Km65EOhc.mft (raw, json)
Hash identifier: 71V5iaLJE770yu7hQvvTBFviJNiTWvqioxN+cR10w6A=
Subject key identifier: 58:BD:EE:CC:A2:91:A7:62:F7:34:F1:F1:47:73:E7:1C:F5:0E:1B:42
Authority key identifier: C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17
Certificate issuer: /CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17
Certificate serial: 0197B890740130598C06C51D10A1FE0DDDCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
Manifest number: 04F0
Signing time: Sat 28 Jun 2025 22:02:44 +0000
Manifest this update: Sat 28 Jun 2025 22:02:44 +0000
Manifest next update: Sun 29 Jun 2025 22:02:44 +0000
Files and hashes: 1: wKopmx5fodUSbfrXXf1Km65EOhc.crl (hash: L/GKRBnNvWzoOg/uSIiQibLdlk+YfPLy8n+kSaVUNyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:74:01:30:59:8c:06:c5:1d:10:a1:fe:0d:dd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17
Validity
Not Before: Jun 28 22:02:44 2025 GMT
Not After : Jun 29 22:02:44 2025 GMT
Subject: CN=58bdeecca291a762f734f1f14773e71cf50e1b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:4a:a3:66:89:fa:1a:ba:9e:9c:52:81:2d:
37:1f:b2:4e:2b:b1:ec:87:de:7a:98:77:2f:c3:a3:
e8:7c:95:32:b8:fc:5e:c6:8a:d2:fa:f1:75:52:cc:
1e:d7:25:9c:73:16:c0:cf:91:38:d7:83:85:b7:6b:
16:84:15:e9:92:3d:52:87:c9:a8:24:89:34:3e:43:
8f:b0:39:49:84:ee:5c:a0:e4:41:0c:81:95:de:97:
97:56:0d:aa:ba:a1:44:e5:b1:75:42:af:dc:2f:ea:
73:e7:66:5d:dc:a1:4c:f1:2a:01:84:72:80:6a:ea:
4d:f1:a7:ac:ed:2b:10:e2:66:48:ad:cb:5a:55:0c:
22:5c:ab:d9:43:e0:d7:c3:2c:0d:13:2b:23:fb:b8:
56:26:e4:14:3c:0a:5c:fd:5d:f0:6e:ca:b8:09:7c:
e8:a0:81:70:97:8b:f0:87:1e:73:f3:22:09:da:15:
5e:1c:0f:f2:ec:30:df:03:f4:cf:d0:2e:29:bc:b4:
98:f5:8a:12:7d:ae:46:54:6c:56:5b:03:0c:4a:71:
9b:6c:58:85:23:fa:44:44:4e:c6:93:e9:f4:91:76:
4c:bc:df:b8:7e:3a:81:53:39:7f:27:98:95:3e:36:
5a:93:fc:e6:ab:49:f9:bb:c0:54:b0:9e:86:6e:84:
61:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BD:EE:CC:A2:91:A7:62:F7:34:F1:F1:47:73:E7:1C:F5:0E:1B:42
X509v3 Authority Key Identifier:
keyid:C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:74:4e:65:a3:d9:ce:a6:ec:46:8b:f0:ed:f1:21:49:05:67:
13:46:29:9c:8b:91:b3:38:55:1f:05:02:98:2c:b8:2d:a7:1b:
b4:7f:f3:55:f8:2c:50:e0:14:72:b1:90:9a:e9:89:11:a8:8b:
e4:6a:0d:6a:43:8d:17:56:ff:e0:2e:9d:8a:bb:6b:09:c1:aa:
c1:84:18:4c:b1:0e:c1:3b:3d:d7:05:dd:8f:e3:65:e6:98:c5:
d2:0e:de:10:ec:3e:22:41:58:cb:81:14:0b:19:62:da:c4:cd:
26:f9:e7:53:bd:ee:95:38:e1:42:03:94:cf:9c:f5:f2:e1:b7:
16:49:05:53:38:4d:43:57:56:79:aa:e8:ee:0c:00:87:17:41:
44:91:b9:e1:7c:8d:7e:58:d5:e2:50:f5:4c:5f:8e:61:99:02:
d9:f1:ac:2b:fe:40:23:6e:fa:b8:45:70:0a:af:95:04:6c:ae:
76:fd:ca:47:10:24:08:b3:aa:83:76:cb:8e:f8:7c:75:a6:68:
27:dc:7f:84:4d:c7:66:90:ac:30:26:0a:1e:f2:ea:29:5a:83:
fb:fa:b8:aa:88:34:e8:ef:21:05:31:af:73:2e:25:61:06:3a:
0d:ed:6b:62:ee:52:da:56:4b:85:ff:41:9b:14:ed:49:b6:ae:
4d:c9:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:35 2025 by rpki-client