Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
File: WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft (raw, json)
Hash identifier: QyRO9gxXxUii4+FizTsCHh6Ogat7rheGZHesKBDoiP8=
Subject key identifier: 31:AE:C5:82:ED:2C:53:D7:2D:44:E4:DB:97:33:FA:DB:2D:96:DF:B4
Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
Certificate issuer: /CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Certificate serial: 0198D472A572E40B0B7BB382DA4D5327D3C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
Manifest number: 0CD0
Signing time: Sat 23 Aug 2025 01:02:19 +0000
Manifest this update: Sat 23 Aug 2025 01:02:19 +0000
Manifest next update: Sun 24 Aug 2025 01:02:19 +0000
Files and hashes: 1: WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl (hash: WP39z4mfuyG8z0Oc2N/4SVcqdyJMdaGp/81i1HNf6aw=)
2: yIEPYCgadoB6X07AnuVv3-Sl8cU.roa (hash: muswJ5Tpw03mqWebPMphb2rOsPv5OQmKFZxcXdUMf8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:a5:72:e4:0b:0b:7b:b3:82:da:4d:53:27:d3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Validity
Not Before: Aug 23 01:02:19 2025 GMT
Not After : Aug 24 01:02:19 2025 GMT
Subject: CN=31aec582ed2c53d72d44e4db9733fadb2d96dfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:01:95:49:62:82:56:de:41:96:09:23:d6:
2d:71:18:90:0b:c7:ae:6e:46:46:4f:01:6f:12:e2:
12:49:8b:1b:a7:b8:96:fa:ae:1b:db:d6:81:46:82:
57:8b:50:b0:3b:b6:4e:29:76:33:c7:dc:5a:8f:6a:
ac:5b:83:9a:01:e6:b2:8b:fa:bc:3b:52:ac:3a:14:
3d:a3:19:31:c0:fb:09:30:6f:f2:21:6f:ed:71:d0:
a8:cc:16:1e:64:b5:e5:a9:7b:de:1b:9a:f0:2d:b0:
4f:11:6d:ca:19:8d:60:92:66:06:7b:21:d7:e6:42:
d8:d3:b1:4e:21:eb:31:4c:0e:12:0d:8e:42:be:b2:
8c:e9:38:77:d1:10:4f:5b:0f:07:ab:5b:e1:cd:d5:
0f:ae:8e:d0:6c:5b:ce:17:34:bd:7f:79:03:fc:98:
d4:7d:cc:11:08:1a:47:96:38:f8:46:22:1f:c7:47:
4e:67:e8:8f:62:b8:d9:98:db:77:82:5a:b3:a3:c0:
79:38:bc:65:95:1b:6a:c7:07:33:32:f4:df:b4:1b:
54:b6:75:a7:fc:90:56:bc:a1:d6:58:55:c3:f8:5b:
04:17:c2:ee:8b:e5:1a:44:fc:75:cc:ca:05:be:fd:
f1:f4:e2:d4:9a:3a:b4:ef:78:9b:4a:4f:f8:16:53:
9b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AE:C5:82:ED:2C:53:D7:2D:44:E4:DB:97:33:FA:DB:2D:96:DF:B4
X509v3 Authority Key Identifier:
keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8d:b7:25:5a:54:9b:96:57:4a:e9:95:06:8e:17:75:dc:7e:
82:61:23:c6:6a:51:cc:de:34:35:81:8f:59:6f:0a:e0:a1:bf:
9e:35:81:27:13:d8:ce:56:dd:c6:b0:52:2c:d4:c6:f0:87:29:
4d:41:a3:d6:54:1f:19:1c:ec:02:15:f3:24:00:54:38:ce:b7:
87:93:61:d6:51:a7:87:04:ac:b3:8d:ff:d6:c8:fa:d0:cf:a5:
a0:c5:4b:9f:c0:f4:29:cd:b2:fd:6f:11:12:51:ca:85:a7:c0:
fa:6d:0e:50:46:56:e1:7f:17:3c:03:c2:3b:32:be:33:b6:c5:
7c:8e:0e:db:99:d3:75:c3:41:8f:87:66:52:7c:c3:50:2f:bf:
d8:82:67:85:d7:8a:8f:81:b1:9f:4a:44:93:61:71:95:8b:1d:
45:37:1f:a4:dd:a0:78:9e:0f:8a:79:52:54:db:38:7a:cc:35:
9a:3d:74:f2:a8:4c:43:54:cb:62:bd:2f:5c:e1:a0:a0:2e:14:
3a:76:e3:d5:41:16:38:2b:e7:b7:35:f3:42:7f:7c:a0:13:95:
44:59:a3:aa:60:73:53:88:40:46:3b:2d:a4:00:05:f8:31:28:
3e:6f:8b:cb:b2:52:32:d3:44:58:8b:b4:93:81:e0:00:20:8c:
a8:bb:b0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:17 2025 by rpki-client