Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
File: WNKjVqVHgVW-qovGJWqG9tWz9zw.mft (raw, json)
Hash identifier: 3IFUmC+CHASRuNtVUpbC3CUkJnQkPas27A7XsbVgllo=
Subject key identifier: 0A:C8:4B:59:C9:FA:7F:7F:72:65:2F:23:AB:B2:53:ED:B8:9D:09:D6
Authority key identifier: 58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
Certificate issuer: /CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Certificate serial: 0197B7B3670B25889525E714BF42721B6F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:01:17 +0000
Manifest this update: Sat 28 Jun 2025 18:01:17 +0000
Manifest next update: Sun 29 Jun 2025 18:01:17 +0000
Files and hashes: 1: WNKjVqVHgVW-qovGJWqG9tWz9zw.crl (hash: KRLLgijIZgnZjvZdkexkcxyWAehAmtn3/PiESSA6yZ4=)
2: g4DPD_TlI2jk4YtUIO3nppJCypo.roa (hash: 1cUob6Ttj1c9mZCdpqGoW3x2UVNqUiWBsqfqlcDpGkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:67:0b:25:88:95:25:e7:14:bf:42:72:1b:6f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Validity
Not Before: Jun 28 18:01:17 2025 GMT
Not After : Jun 29 18:01:17 2025 GMT
Subject: CN=0ac84b59c9fa7f7f72652f23abb253edb89d09d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:1a:59:cb:26:33:35:c5:72:2c:be:b4:30:
92:d2:47:f5:9a:76:65:40:01:00:9a:e4:79:b4:59:
32:e3:4e:37:f4:64:c2:f1:ed:a9:6b:7c:36:72:27:
29:d7:77:34:61:cd:03:7b:4c:f8:0b:f8:87:6f:fe:
5a:58:24:1d:0b:78:da:64:fd:cf:8d:fd:4b:fd:ca:
f3:bb:4f:7e:48:75:7e:5a:88:c1:23:95:c4:a6:e7:
3b:15:df:81:9d:4e:61:fe:f5:5a:22:83:79:7b:81:
9a:91:c7:9e:e9:a5:83:11:17:78:75:37:43:65:eb:
f9:c5:77:6d:8f:78:7f:f4:80:b8:3c:94:1d:b3:70:
f6:d6:25:6a:54:eb:87:ea:7c:df:67:99:8c:10:aa:
9a:09:9a:f1:34:d9:be:dc:4d:e9:1b:a1:d0:1a:8d:
9e:00:81:d3:d8:2b:79:b9:dd:28:c0:1f:04:c2:fc:
d3:0e:cc:b2:55:c9:36:8f:d4:7d:6e:35:8f:d7:8c:
23:6a:84:e6:e1:40:4b:f9:4c:c7:5e:15:15:54:7e:
5d:be:01:9c:e0:88:9b:c5:fc:bf:ac:4f:a0:2f:60:
95:e5:a5:b9:2b:cb:61:45:91:0e:56:01:06:47:f2:
f8:d7:f2:90:90:d6:91:4a:fb:cb:ba:53:47:31:62:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C8:4B:59:C9:FA:7F:7F:72:65:2F:23:AB:B2:53:ED:B8:9D:09:D6
X509v3 Authority Key Identifier:
keyid:58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d3:58:45:75:51:30:08:ad:cb:87:ff:87:74:07:f3:9b:88:
7c:20:63:d6:04:4b:b3:07:85:5a:c8:4f:a3:9a:18:0d:5d:1d:
0d:3c:c2:ce:1b:64:9d:71:db:b1:23:6a:60:59:99:94:a2:20:
dd:93:e3:5d:65:0a:2e:a5:df:42:50:c4:30:d9:76:24:4f:9c:
9d:4b:08:b7:13:de:35:bd:3b:a8:2b:31:6f:42:81:b9:ac:c5:
e7:2d:73:04:dc:d1:35:bd:86:98:72:ae:01:aa:46:d2:e6:1e:
35:e7:26:47:3a:f5:4a:75:9a:25:fc:eb:72:62:42:71:8a:8c:
15:2a:85:fe:7f:12:5c:99:6b:0f:82:e0:02:d6:15:69:39:a9:
7a:5b:ae:55:75:a5:ad:13:84:96:e8:5e:29:dd:3e:35:2f:a8:
7a:4a:24:9e:05:ca:5e:d3:a0:36:0b:f8:1c:27:1a:c0:42:59:
2f:07:3a:28:4f:ed:c7:8d:5b:ac:da:4e:ba:d1:ed:41:23:b6:
ca:4d:a6:4f:ea:f4:c9:f0:ca:a6:27:44:93:27:48:fe:f1:37:
78:e3:7f:fd:27:1a:6e:6b:d9:7c:75:56:bb:55:75:ec:fb:33:
2b:93:f4:24:77:32:a5:28:74:d4:4a:36:62:f9:e8:a8:6b:df:
6f:36:b6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:31 2025 by rpki-client