Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
File: WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft (raw, json)
Hash identifier: VjyHTqb1tL93rpBw796bmuOGmh2Up7T5uaTbyzTe+f8=
Subject key identifier: 34:BA:3B:9C:2A:80:AE:BD:05:E5:68:0B:7E:F4:05:75:70:0D:50:62
Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
Certificate issuer: /CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Certificate serial: 0197B88EB86A6B4F6B7B267812660F92288E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
Manifest number: 0C3D
Signing time: Sat 28 Jun 2025 22:00:50 +0000
Manifest this update: Sat 28 Jun 2025 22:00:50 +0000
Manifest next update: Sun 29 Jun 2025 22:00:50 +0000
Files and hashes: 1: WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl (hash: YLfANW31c9l6Vz/jbMOOD93EETnN859Q+M3/kh2Sn5w=)
2: yIEPYCgadoB6X07AnuVv3-Sl8cU.roa (hash: muswJ5Tpw03mqWebPMphb2rOsPv5OQmKFZxcXdUMf8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:b8:6a:6b:4f:6b:7b:26:78:12:66:0f:92:28:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Validity
Not Before: Jun 28 22:00:50 2025 GMT
Not After : Jun 29 22:00:50 2025 GMT
Subject: CN=34ba3b9c2a80aebd05e5680b7ef40575700d5062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:48:8e:09:dc:e5:78:8e:93:7b:2d:6e:54:11:
d5:08:41:6e:6d:a7:6a:b4:1c:6c:4a:54:62:8c:0f:
e1:7d:dd:95:37:44:89:30:b9:72:97:5f:d8:ca:93:
33:c0:15:70:ed:36:5a:d1:ff:81:dc:2f:4b:77:30:
e5:3d:79:6c:b1:e3:54:8f:d8:50:f7:57:15:5e:32:
d3:32:31:be:d6:d9:69:f4:03:c4:05:69:87:3b:14:
10:9f:b4:e1:b0:32:4d:a1:3e:a0:0e:eb:4b:7e:bb:
92:c2:2d:a6:e8:53:7e:82:ca:c3:21:57:f5:93:18:
0e:8b:78:c6:12:2a:1f:fe:67:f3:66:3b:ca:34:15:
47:72:c2:80:d0:57:35:9a:11:fb:cb:74:2a:a1:6c:
d5:44:0b:3c:d4:02:86:f4:12:15:8f:ab:07:4c:7b:
98:09:6b:ae:eb:d2:71:dc:3d:f6:a5:46:cf:8e:40:
c1:9a:f3:66:9f:3b:0b:8a:7e:a7:a3:d9:01:7d:ec:
83:fc:4a:5e:c3:c3:87:6d:7b:26:c5:e3:5c:e5:68:
2a:1b:7a:fb:2a:ad:ab:09:11:68:c8:8c:25:78:65:
74:58:94:0c:31:5b:c6:1d:3c:fd:3d:5b:62:7f:06:
6b:3c:04:4e:6c:eb:5b:0a:c3:51:41:ee:d7:7f:cf:
de:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BA:3B:9C:2A:80:AE:BD:05:E5:68:0B:7E:F4:05:75:70:0D:50:62
X509v3 Authority Key Identifier:
keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:72:2e:29:14:34:d2:3f:2f:f4:70:4d:4e:19:65:59:bf:02:
00:d0:99:a7:9b:e0:e9:13:79:dc:b0:37:8b:ba:18:9f:f7:b4:
03:f1:20:a2:b7:82:81:40:3a:1d:e0:6a:df:35:31:e5:35:9d:
37:7c:c0:88:2c:44:8f:73:2e:68:84:29:94:9e:c2:96:0d:1b:
7d:cb:7b:9b:bd:88:bd:27:20:ac:d0:75:90:b8:46:35:3e:74:
fd:0d:c1:e5:b5:51:66:43:0b:5d:61:d3:84:ab:07:b5:8c:1a:
13:35:5a:66:2a:f7:ec:ac:3f:1f:81:e5:ad:10:5d:4f:90:db:
e6:dd:1a:9c:18:2b:57:34:b0:66:29:4b:0a:ea:77:92:4d:ac:
25:72:2e:1f:fb:84:47:f8:12:73:39:04:e8:a3:6f:94:8f:70:
7e:8a:a4:71:4c:49:b9:e6:69:7d:df:d6:b9:67:8a:57:3f:f1:
8b:51:ab:8e:69:c9:99:10:c3:b1:1f:cf:28:da:c5:05:ca:67:
52:53:43:3f:4f:b4:40:6e:14:72:01:6e:20:88:00:09:0f:a7:
b4:e9:ca:9d:e7:ea:92:bb:19:0c:f1:8e:5e:09:e6:de:14:a6:
c7:c4:84:b3:b8:a1:40:76:20:d3:88:50:48:0a:b5:07:2c:4e:
8f:cd:fd:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jrhqa09reyZ4EmYPkiiOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZTBhYmI3NzZkYWYyNWY3MjBkYjZhMjZiYjEyZmJkMzRk
ZWVkOTAwHhcNMjUwNjI4MjIwMDUwWhcNMjUwNjI5MjIwMDUwWjAzMTEwLwYDVQQD
EygzNGJhM2I5YzJhODBhZWJkMDVlNTY4MGI3ZWY0MDU3NTcwMGQ1MDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EiOCdzleI6Tey1uVBHVCEFubadq
tBxsSlRijA/hfd2VN0SJMLlyl1/YypMzwBVw7TZa0f+B3C9LdzDlPXlsseNUj9hQ
91cVXjLTMjG+1tlp9APEBWmHOxQQn7ThsDJNoT6gDutLfruSwi2m6FN+gsrDIVf1
kxgOi3jGEiof/mfzZjvKNBVHcsKA0Fc1mhH7y3QqoWzVRAs81AKG9BIVj6sHTHuY
CWuu69Jx3D32pUbPjkDBmvNmnzsLin6no9kBfeyD/Epew8OHbXsmxeNc5WgqG3r7
Kq2rCRFoyIwleGV0WJQMMVvGHTz9PVtifwZrPARObOtbCsNRQe7Xf8/ePQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDS6O5wqgK69BeVoC370BXVwDVBiMB8GA1UdIwQY
MBaAFFjgq7d22vJfcg22omuxL7003u2QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV09DcnQzYmE4bDl5RGJhaWE3RXZ2VFRlN1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85MDQzNDEtNGE3My00MjZkLTliYWMt
YTMzOWVlY2I4ZGM3LzEvV09DcnQzYmE4bDl5RGJhaWE3RXZ2VFRlN1pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi85MDQzNDEtNGE3My00MjZkLTliYWMtYTMzOWVlY2I4ZGM3
LzEvV09DcnQzYmE4bDl5RGJhaWE3RXZ2VFRlN1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXIuKRQ0
0j8v9HBNThllWb8CANCZp5vg6RN53LA3i7oYn/e0A/EgoreCgUA6HeBq3zUx5TWd
N3zAiCxEj3MuaIQplJ7Clg0bfct7m72IvScgrNB1kLhGNT50/Q3B5bVRZkMLXWHT
hKsHtYwaEzVaZir37Kw/H4HlrRBdT5Db5t0anBgrVzSwZilLCup3kk2sJXIuH/uE
R/gSczkE6KNvlI9wfoqkcUxJueZpfd/WuWeKVz/xi1GrjmnJmRDDsR/PKNrFBcpn
UlNDP0+0QG4UcgFuIIgACQ+ntOnKnefqkrsZDPGOXgnm3hSmx8SEs7ihQHYg04hQ
SAq1ByxOj839BQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:33:13 2025 by rpki-client