Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier: NlKA5BQCrji8oQIX5NDbzM5A1cdVJ5UMPquWdEj2vIk=
Subject key identifier: 77:AD:56:3D:C7:E5:E0:8C:63:F8:7D:45:19:45:DC:42:2D:29:23:67
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial: 0197B820E48844539BE631C797C953D8DBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number: 0B04
Signing time: Sat 28 Jun 2025 20:00:52 +0000
Manifest this update: Sat 28 Jun 2025 20:00:52 +0000
Manifest next update: Sun 29 Jun 2025 20:00:52 +0000
Files and hashes: 1: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: Y9MRJlMKeymknbW6dP+0NtfUI4akXNEUBpjK6iq0yNY=)
2: ZpykCbVPiyWDmZYOTfO_ZDkVQS8.roa (hash: dMJ7baRxj0geuiw7R0CU8VhA5Y/WfKmOFau3mkt++fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e4:88:44:53:9b:e6:31:c7:97:c9:53:d8:db:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
Validity
Not Before: Jun 28 20:00:52 2025 GMT
Not After : Jun 29 20:00:52 2025 GMT
Subject: CN=77ad563dc7e5e08c63f87d451945dc422d292367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:40:9a:39:7a:ad:e2:a4:c3:ef:9c:98:b3:
f0:b3:bf:2c:ba:f8:dc:e8:66:54:1b:57:62:3e:42:
8b:12:51:a3:2b:2f:5c:c4:d9:e0:7c:f1:37:0e:4f:
ab:82:b5:b1:cf:af:85:d0:d2:fb:96:95:94:9b:1f:
d9:28:1f:98:2c:b2:14:45:d3:94:7e:9e:f8:20:93:
f6:ba:32:66:cb:25:bf:30:70:df:31:16:8a:6a:46:
f3:e9:f4:a4:76:2f:c1:07:24:3b:5d:1c:b2:4c:ce:
6f:5e:b4:6e:f6:68:bd:fc:57:43:20:5a:1f:46:64:
4a:12:d7:6c:87:b9:ea:fc:74:81:bf:6e:b5:3e:1d:
20:fa:48:7b:98:51:a2:54:3a:b2:07:9e:6b:fa:61:
53:fb:d4:dd:f3:21:e1:fe:98:c0:06:d6:73:4b:39:
78:b6:c0:8b:9b:e2:e5:9e:34:fd:2c:25:12:6c:89:
f6:2e:26:f2:79:d2:a0:34:ed:a6:bb:f4:56:1b:d9:
a8:27:7d:23:f9:1c:52:07:a3:d8:87:64:d0:44:13:
3f:c8:e3:f3:33:4b:09:81:11:5d:b0:b4:32:3d:7d:
1c:3a:f5:69:54:e4:67:08:b4:3d:05:12:9c:79:f7:
79:77:2e:46:b5:5f:60:eb:21:14:11:97:cf:84:1d:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AD:56:3D:C7:E5:E0:8C:63:F8:7D:45:19:45:DC:42:2D:29:23:67
X509v3 Authority Key Identifier:
keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e4:34:03:e1:36:a7:58:db:b8:e4:cd:b7:bd:05:02:4d:f0:
5c:b4:58:97:b4:c8:f7:4a:d0:26:8a:66:bd:bf:e3:6b:a5:03:
cf:6a:46:f6:7c:65:18:ab:6d:48:0c:ad:6a:f6:d3:19:34:3a:
ed:36:b1:92:d3:b9:e5:d4:73:d0:9e:26:e5:be:00:e2:e2:77:
43:e4:5c:b3:12:8a:2c:e2:55:5e:81:fb:58:5e:0b:97:e0:e8:
c0:5e:c3:5c:28:42:bd:4a:94:ed:06:44:19:32:4f:3f:7a:c7:
66:79:28:c1:65:6a:a0:54:59:12:ee:12:86:4f:68:4a:7c:6f:
79:d4:ee:9d:44:2c:cd:1c:19:9d:99:b0:7e:00:8d:54:e1:df:
20:5b:e4:95:21:c7:55:2d:1f:f6:d4:19:bf:26:ae:84:51:dc:
d1:e3:86:e3:7d:93:4f:5f:39:bd:81:99:62:32:f5:c5:16:47:
7e:9f:ef:a1:e4:1e:f1:99:3f:07:92:57:89:fe:04:4b:7a:2b:
0b:bd:d3:5c:0b:b6:01:e6:5f:e3:e8:ac:92:1b:e6:01:92:3b:
4e:a0:4f:a2:07:ac:95:bd:67:40:25:71:87:35:7d:61:47:c4:
76:a9:a9:41:f9:fa:fc:5b:37:20:3e:13:80:f8:5e:a0:fd:87:
f1:f6:6b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:03 2025 by rpki-client