Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
File: WLPteKcQZof2-2jvIG7dzw696bM.mft (raw, json)
Hash identifier: 7I/V8F1Ui0qwqinnkDAlYRPUN1rkQtHTrujx2EE15+U=
Subject key identifier: 6B:B7:DF:28:34:31:AB:21:B3:3D:3B:75:0C:FE:F8:4A:F7:6D:88:45
Authority key identifier: 58:B3:ED:78:A7:10:66:87:F6:FB:68:EF:20:6E:DD:CF:0E:BD:E9:B3
Certificate issuer: /CN=58b3ed78a7106687f6fb68ef206eddcf0ebde9b3
Certificate serial: 0197BBC6EB081083CFACAC9404B2B0F7EEFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
Manifest number: 0AB2
Signing time: Sun 29 Jun 2025 13:01:05 +0000
Manifest this update: Sun 29 Jun 2025 13:01:05 +0000
Manifest next update: Mon 30 Jun 2025 13:01:05 +0000
Files and hashes: 1: WLPteKcQZof2-2jvIG7dzw696bM.crl (hash: D9joqLRZuT1x4BbzNcqwZ92/sJtoTMRiJNnxkdQFZGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:c6:eb:08:10:83:cf:ac:ac:94:04:b2:b0:f7:ee:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3ed78a7106687f6fb68ef206eddcf0ebde9b3
Validity
Not Before: Jun 29 13:01:05 2025 GMT
Not After : Jun 30 13:01:05 2025 GMT
Subject: CN=6bb7df283431ab21b33d3b750cfef84af76d8845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:01:13:de:84:ea:ee:9d:2c:53:a1:64:2e:
5d:6e:43:95:ac:f7:f0:fe:81:2f:af:0e:0a:e4:ec:
20:05:14:73:f5:8f:c5:d0:c3:1a:78:3e:8b:53:41:
d8:d2:81:da:67:00:cc:9f:cb:8f:70:3b:ce:14:03:
a4:84:40:bd:bd:af:60:bc:18:1f:39:30:db:b3:99:
89:60:82:ea:c9:bb:7d:92:43:8e:e7:b3:58:bd:bb:
0e:5a:e0:bf:ef:71:8c:f0:d0:0b:79:aa:f0:20:a6:
69:9f:44:c0:ac:b0:8e:b3:5c:23:cc:11:97:36:ff:
74:33:12:dd:de:1e:b3:34:b0:8b:ee:2f:b8:6b:59:
cf:3e:0b:2e:70:9b:52:b3:ab:a6:c6:d4:86:f7:dc:
64:eb:e2:6e:f9:22:93:ea:6d:27:21:35:74:99:a0:
c0:b2:df:c6:9c:2c:ec:e5:19:4a:65:3d:da:b6:e3:
cc:e0:1f:57:7e:16:c6:eb:f3:02:24:b7:22:de:18:
14:50:ad:9b:1f:d7:ce:87:dc:4b:6e:bc:68:e7:44:
81:d6:be:9a:19:d4:aa:d4:8b:37:ca:4d:b6:ba:19:
35:60:c3:36:03:14:31:af:52:62:76:97:00:8e:ef:
73:06:cd:26:88:03:4e:61:8a:75:35:33:eb:b3:18:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B7:DF:28:34:31:AB:21:B3:3D:3B:75:0C:FE:F8:4A:F7:6D:88:45
X509v3 Authority Key Identifier:
keyid:58:B3:ED:78:A7:10:66:87:F6:FB:68:EF:20:6E:DD:CF:0E:BD:E9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:99:28:c9:37:86:af:c4:0b:3f:db:a3:4a:c2:37:5d:c2:d4:
a8:7e:8a:c0:61:f1:1c:db:32:34:ee:27:d5:4c:36:f0:6e:4f:
08:f6:f2:c5:e3:6c:58:7c:fe:f1:4f:bf:c6:53:b5:27:2e:05:
73:11:9b:2d:f8:a0:7c:a7:6d:6c:1e:e6:4c:35:d2:d6:92:eb:
e0:11:81:5a:42:89:f1:9e:3d:2b:40:8e:64:26:ef:24:27:b8:
26:16:a4:9f:99:7c:c7:52:1f:37:b0:23:a9:ee:c2:af:86:ac:
83:b7:cd:33:18:65:86:3a:60:80:38:b1:9c:e7:50:cc:40:07:
4a:89:f2:03:c7:55:bd:82:e6:cc:2d:d4:6a:c6:00:0b:56:8d:
e7:c8:f6:14:c7:3d:45:df:1c:51:c3:15:39:6e:73:e2:67:06:
4b:c9:71:69:34:61:f2:23:f0:fa:b8:8c:e8:53:d1:09:4b:70:
2c:12:09:aa:ac:1c:82:1f:07:68:a6:0d:e5:e2:7e:cc:1e:17:
cd:14:41:77:78:a3:90:16:a4:86:a3:40:2b:f7:dc:d3:55:d1:
3d:fc:3e:45:a7:3c:80:62:36:80:03:ee:3d:a7:b1:88:92:21:
83:a9:26:4f:1e:80:84:3b:c1:74:89:9f:c6:4c:65:e6:b1:3d:
c3:92:e4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:47:26 2025 by rpki-client