Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
File: WNKjVqVHgVW-qovGJWqG9tWz9zw.mft (raw, json)
Hash identifier: 0zzdrSysWM5jNtxLmLwCnO+4SMBDZh4AQtyzFygUgbs=
Subject key identifier: 01:DA:54:A7:AE:B5:A6:20:42:7C:3D:3A:64:FB:5C:2F:3B:E1:92:5A
Authority key identifier: 58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
Certificate issuer: /CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Certificate serial: 0196C64CA7112D1EE5D3AB2E2F06287B88E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 21:00:34 +0000
Manifest this update: Mon 12 May 2025 21:00:34 +0000
Manifest next update: Tue 13 May 2025 21:00:34 +0000
Files and hashes: 1: WNKjVqVHgVW-qovGJWqG9tWz9zw.crl (hash: Z4RkYcONJw/Vs6amKeIRGz0DfxoJPA9b1FEGo6vHdcI=)
2: g4DPD_TlI2jk4YtUIO3nppJCypo.roa (hash: 1cUob6Ttj1c9mZCdpqGoW3x2UVNqUiWBsqfqlcDpGkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:a7:11:2d:1e:e5:d3:ab:2e:2f:06:28:7b:88:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Validity
Not Before: May 12 21:00:34 2025 GMT
Not After : May 13 21:00:34 2025 GMT
Subject: CN=01da54a7aeb5a620427c3d3a64fb5c2f3be1925a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:7c:fe:9d:75:72:5b:12:70:35:21:45:7e:d6:
0a:34:27:32:ac:d0:39:21:26:a2:85:59:aa:92:89:
c5:bb:07:aa:fb:dc:6c:ea:14:fe:fe:4e:1d:35:d1:
c3:dc:38:67:2e:54:73:40:78:15:59:b6:3a:b9:28:
cb:5c:73:81:19:c9:b6:62:15:18:84:ba:11:a3:39:
9e:46:6c:2a:e0:12:c8:75:9e:b9:bb:4e:11:02:5e:
e6:16:04:f6:09:1b:7f:a6:77:c0:69:f5:98:c9:28:
09:c8:e8:c6:79:8e:50:13:aa:2d:13:b6:1c:70:09:
d0:52:ea:be:67:17:cd:c8:ce:52:a8:e1:03:53:36:
ff:9b:4d:1f:de:ed:38:24:3c:cc:f8:0f:d8:45:77:
a8:f2:48:f5:32:f2:94:ad:aa:c8:60:9a:1a:64:89:
84:11:41:90:8d:86:9c:77:b3:8f:14:11:ba:6d:05:
61:9c:dc:37:16:b5:3b:64:43:cd:d2:71:c3:41:1b:
cc:99:a1:b8:c0:e8:e4:1c:71:ec:a0:be:1d:8d:04:
eb:f0:23:c9:b9:54:91:65:0b:d2:2b:4c:44:ea:b0:
cc:84:bb:1c:76:ab:73:ca:2b:4a:f2:d9:05:ba:ed:
54:05:e5:78:fd:57:e9:cd:fa:39:b3:73:cc:e3:57:
00:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DA:54:A7:AE:B5:A6:20:42:7C:3D:3A:64:FB:5C:2F:3B:E1:92:5A
X509v3 Authority Key Identifier:
keyid:58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:90:24:ab:58:8d:1a:2f:49:b8:52:cb:b3:77:ac:39:4d:18:
19:f6:60:72:63:87:0f:d0:cc:5c:84:b1:00:aa:aa:9e:15:2f:
0f:da:aa:68:87:21:da:70:98:12:55:1e:2d:70:f2:a8:4f:7f:
01:10:3f:59:ff:e8:11:10:94:dd:6f:06:c2:ea:34:7b:a1:80:
46:2a:9d:50:ef:86:14:a3:a9:7b:7d:ab:d9:e7:37:0a:0d:4c:
44:b0:fd:9f:c6:01:dc:b6:cd:13:09:3a:d2:20:0e:90:12:c6:
70:3a:bc:c4:83:72:dc:95:f9:40:9c:06:4b:48:1a:bd:bd:1b:
e3:4b:71:bb:8d:38:66:6e:fb:7d:e2:c9:11:ae:fc:bc:5a:38:
90:8b:1f:6b:a9:6a:30:71:74:df:fd:93:5b:2f:c1:3c:1d:21:
b6:16:ad:b8:7d:db:6d:cd:d6:a3:a7:ce:67:ce:87:f5:62:89:
ce:d6:06:12:b7:99:63:d4:a5:18:e0:de:07:10:43:b3:5c:cb:
47:ff:59:65:e4:1d:b8:b8:c2:58:02:ca:64:a7:ec:ce:9e:3c:
c6:9a:32:86:db:01:2a:f6:e8:77:9b:84:4e:14:be:fc:6d:31:
30:b2:85:8a:14:0b:c5:19:71:9e:36:32:08:08:af:a5:0d:1e:
ca:dd:86:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:26:10 2025 by rpki-client