Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
File: WXWCvD8LrbZhpp-5pIOzfskFgn4.mft (raw, json)
Hash identifier: 57YzUOxYS7urhCO/eJjM+d308R+EpsI26L2c2sv0zXE=
Subject key identifier: 27:1B:EE:BA:0C:6F:11:E8:F3:6B:5A:3D:2C:B4:6F:86:FE:5E:47:F1
Authority key identifier: 59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E
Certificate issuer: /CN=597582bc3f0badb661a69fb9a483b37ec905827e
Certificate serial: 019A4D73ED1B3565728875F008D2D1400BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
Manifest number: 08A0
Signing time: Tue 04 Nov 2025 06:00:34 +0000
Manifest this update: Tue 04 Nov 2025 06:00:34 +0000
Manifest next update: Wed 05 Nov 2025 06:00:34 +0000
Files and hashes: 1: WXWCvD8LrbZhpp-5pIOzfskFgn4.crl (hash: BxKI/msAuI6pTXua+oqUgPWmOERnGDcwekxmJiH0Qo4=)
2: znM5PqUezkFDKWgZEHXhAygqSEg.roa (hash: rSr63BYEqjq/FlyGA7frAkMF1kFl0699EpH0gvi204o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ed:1b:35:65:72:88:75:f0:08:d2:d1:40:0b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597582bc3f0badb661a69fb9a483b37ec905827e
Validity
Not Before: Nov 4 06:00:34 2025 GMT
Not After : Nov 5 06:00:34 2025 GMT
Subject: CN=271beeba0c6f11e8f36b5a3d2cb46f86fe5e47f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:cb:28:8e:7d:03:11:9f:8a:6c:da:0b:c0:
47:7a:7b:56:df:31:e8:0f:44:e5:24:47:d2:8e:29:
c7:1b:af:0f:6f:d3:23:98:ec:43:32:62:7f:15:f6:
03:9e:d4:bb:80:f4:c0:36:e5:40:ca:be:eb:f8:07:
02:19:c4:c9:5f:ea:29:c5:53:d2:ba:5b:3e:0e:f4:
a3:4d:29:a2:bb:ff:2d:74:c5:c2:56:e6:a8:f5:73:
97:d7:a7:84:64:28:b5:88:f5:04:4c:d9:a0:b2:53:
6f:64:0b:55:95:bd:5b:8d:f0:fb:b7:c0:06:a7:64:
52:f0:1d:c7:3d:bb:56:b8:b7:f2:4d:0c:80:81:a4:
ba:ee:83:3d:3f:ed:12:9b:6c:a8:21:55:65:0f:c8:
04:58:f3:33:92:04:8a:dc:eb:3b:bb:68:05:e2:9d:
67:79:bc:00:9b:ea:40:32:b6:b0:74:83:1a:13:0a:
51:5a:76:41:94:39:10:b9:27:97:79:38:92:57:cd:
a1:fa:c0:52:d3:17:db:c0:ac:f9:8b:21:69:42:db:
fa:d5:15:da:6d:85:bb:c2:b6:5b:80:f8:4b:8c:0b:
da:54:b2:8c:67:d9:9f:32:b1:b4:a7:40:c2:9d:06:
13:b5:3e:2a:7e:3e:bf:5d:68:fd:aa:8e:a6:35:a6:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1B:EE:BA:0C:6F:11:E8:F3:6B:5A:3D:2C:B4:6F:86:FE:5E:47:F1
X509v3 Authority Key Identifier:
keyid:59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:04:e1:e3:ef:7c:12:b8:92:e0:71:a5:1a:56:a0:f4:4c:d9:
8d:48:c1:06:44:8b:94:89:b4:ca:62:6e:d0:68:0d:e4:89:92:
2a:9b:64:96:ce:17:d1:72:30:84:59:17:8d:a2:57:36:0e:5d:
37:6f:01:56:a7:d7:cd:ae:4e:61:e6:02:ba:cb:0d:77:36:70:
b5:e1:80:14:88:2a:ca:a3:88:84:89:2a:ae:1b:64:16:c9:8f:
eb:99:66:ee:e7:f8:84:77:0c:41:ba:6d:1f:8c:1a:79:88:c3:
1a:b3:16:ef:07:b3:68:e8:7b:4b:8d:87:05:73:f5:82:56:3d:
ad:d1:af:92:f8:d7:c3:38:5b:55:41:2b:c8:a4:01:96:6f:c8:
2b:3f:a2:b4:40:a3:99:df:56:b5:19:1d:97:d1:61:c2:ff:3d:
48:92:6e:35:e9:84:7d:b1:f1:5b:70:ad:0e:c3:bd:01:85:ea:
48:eb:dc:6b:0e:d0:e7:7b:95:8c:aa:33:6c:f6:c4:98:96:05:
d9:90:14:ba:3c:4c:da:30:cd:15:10:07:37:23:df:5d:96:bf:
23:af:a4:b0:e2:d9:da:76:98:d3:5c:26:ba:75:76:d8:83:27:
39:ed:cd:87:c5:cb:13:ad:8a:31:6d:06:32:f5:d6:45:27:c6:
f1:ba:4b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:28 2025 by rpki-client