Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier: TlAzdOuxa42K0SjwFdLaYbOSjk75ip37bEJotuAKP+I=
Subject key identifier: A8:B7:4D:7F:77:92:10:D9:BE:F0:AA:60:BE:AC:ED:FC:79:FB:07:77
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial: 0196C4CC425887B1147909C4D9E6B9C713F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number: 0A86
Signing time: Mon 12 May 2025 14:00:42 +0000
Manifest this update: Mon 12 May 2025 14:00:42 +0000
Manifest next update: Tue 13 May 2025 14:00:42 +0000
Files and hashes: 1: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: RWD2nrM1inMViNb39S3XRPu6gcxLa/gaCI0eeqK1a4E=)
2: ZpykCbVPiyWDmZYOTfO_ZDkVQS8.roa (hash: dMJ7baRxj0geuiw7R0CU8VhA5Y/WfKmOFau3mkt++fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:42:58:87:b1:14:79:09:c4:d9:e6:b9:c7:13:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
Validity
Not Before: May 12 14:00:42 2025 GMT
Not After : May 13 14:00:42 2025 GMT
Subject: CN=a8b74d7f779210d9bef0aa60beacedfc79fb0777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:22:80:91:fc:82:53:67:c6:d7:9f:12:ff:
e2:29:10:85:ae:4f:12:46:89:d3:f8:43:c3:e1:b7:
62:47:42:ed:8c:f1:e0:ce:86:ba:3a:62:b8:73:b0:
ac:fa:ff:c6:be:30:c9:04:61:8e:ae:68:0c:ac:9e:
74:94:78:80:99:e9:98:13:7a:e5:7c:a3:e5:2f:4c:
fd:a9:00:a7:b6:8b:51:91:26:d3:2f:a0:32:ff:89:
40:d4:c6:10:7d:1b:36:58:8e:d6:34:d7:17:50:b3:
f6:75:00:b0:18:2e:fd:e6:d3:69:32:e0:ae:83:e4:
79:e0:ee:ce:d7:3d:9a:db:1b:89:77:af:c2:8d:5c:
43:3a:4b:1b:37:f1:64:bf:cd:6e:68:85:82:23:59:
fb:bc:f0:fc:81:d5:e6:31:30:60:37:b5:0d:78:3f:
fc:1f:dd:83:63:e7:c4:a7:8f:e9:b6:3a:e3:54:90:
17:00:50:a3:97:d3:7d:84:e4:6b:81:67:a2:47:de:
29:7e:14:67:49:57:28:50:85:50:51:cb:15:2b:2e:
e1:13:e3:74:7f:54:e1:a0:d0:2a:1c:27:cf:51:97:
26:ef:62:a0:31:3e:34:17:cd:08:55:2c:46:54:bd:
37:eb:55:9e:a4:b4:d4:ec:f1:d7:aa:0d:6f:bd:55:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B7:4D:7F:77:92:10:D9:BE:F0:AA:60:BE:AC:ED:FC:79:FB:07:77
X509v3 Authority Key Identifier:
keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d2:aa:72:d0:92:6b:0d:fd:7f:92:69:d7:6a:d7:54:a5:e7:
7f:2f:40:e4:87:94:31:75:3e:56:6b:49:03:3c:61:c9:5b:8a:
b9:69:d2:77:d9:35:ec:0c:9a:f0:ef:49:3f:08:44:2d:44:eb:
00:c7:ec:b0:a2:67:14:0b:65:76:25:ab:86:d4:b6:b2:1a:47:
ae:40:79:2c:6f:a0:e9:69:8f:63:23:5c:e9:ed:d4:9e:61:e2:
c4:5d:ea:f7:73:94:59:05:c8:62:2e:ca:35:1f:5f:f6:10:18:
89:b9:b5:e9:a1:b5:ba:0f:c0:e9:37:e5:22:4c:f4:11:94:b7:
da:94:bc:0e:01:01:66:e7:6b:b5:47:0f:f5:e4:a0:5f:37:20:
20:14:d7:58:00:11:07:d9:e3:26:37:1d:0e:d7:8b:4b:ea:fe:
97:7a:51:67:4e:dc:9f:7b:32:c7:17:f3:d1:52:12:9d:d0:61:
65:b4:1a:cb:04:a9:8c:79:48:a3:2b:3c:1d:7d:d9:62:b2:c5:
69:53:1e:29:e5:a3:90:c2:4a:81:a5:5c:c4:e1:7a:58:0d:ca:
40:fc:e7:1d:98:75:55:15:16:80:db:0f:23:a8:ed:f9:cd:c6:
ee:35:19:1e:e6:9a:70:66:21:5f:25:fd:07:65:90:99:53:c6:
71:15:67:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:11:57 2025 by rpki-client