Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
File: WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json)
Hash identifier: KuIA5YdyFw68Wmlfn9cS//cvuD5xb5jBKauBPJqZLGc=
Subject key identifier: CD:B4:E2:0C:2B:69:3E:26:90:14:39:5E:F2:75:D2:F4:77:9E:27:9C
Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
Certificate issuer: /CN=59785a21e2d07c68ff317558c69ef118cc75805a
Certificate serial: 019894B648934E55938544474788A8808CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
Manifest number: 0CCC
Signing time: Sun 10 Aug 2025 16:00:30 +0000
Manifest this update: Sun 10 Aug 2025 16:00:30 +0000
Manifest next update: Mon 11 Aug 2025 16:00:30 +0000
Files and hashes: 1: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: JXPTI3XFptp+u/Qf51hee6zh+8SF30P1FVX419uo59A=)
2: pBfkqeCcf8kyWik2qeWgXpT9J0w.roa (hash: x6edmQyN+AuRQRVkdUM3z3US8XBwQrqEnFPt4p+BBqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:48:93:4e:55:93:85:44:47:47:88:a8:80:8c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a
Validity
Not Before: Aug 10 16:00:30 2025 GMT
Not After : Aug 11 16:00:30 2025 GMT
Subject: CN=cdb4e20c2b693e269014395ef275d2f4779e279c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:3b:d5:36:3c:52:00:27:33:94:3f:7b:a7:
22:55:2b:69:c6:fb:e0:26:f3:d8:a2:a3:7c:89:a5:
68:8f:6d:10:d7:f5:e3:7b:26:af:bc:2b:df:a0:71:
ee:65:20:d8:c4:8b:13:7b:3d:09:53:de:51:d8:7f:
58:5a:63:68:24:9e:07:5c:23:ba:d5:76:cd:26:bc:
f9:19:1c:99:d7:05:b0:c1:1f:46:be:e1:bc:a0:ad:
de:59:07:1a:e3:f8:90:03:7d:9c:1d:51:fc:9f:03:
fc:65:12:c6:e7:c7:96:d6:72:57:ca:01:ea:92:4b:
b1:63:fa:44:7e:78:e4:de:e6:3a:86:1e:da:8a:5e:
bf:85:f1:4b:86:7a:c1:07:15:30:d9:9c:ef:bc:83:
b6:ed:c5:e1:af:43:cf:cb:72:86:90:18:3f:8f:42:
e8:53:17:63:f8:17:b3:f5:cf:8e:de:57:d6:91:7b:
b5:55:98:75:85:db:6c:a5:83:d6:67:f5:ab:09:5e:
d3:03:4c:de:aa:64:42:a4:1f:27:4c:1e:28:8e:4a:
7e:d4:96:f2:8b:6b:59:ae:29:b6:11:15:65:c3:32:
7d:7b:1a:d8:f4:ce:84:83:dc:b5:9e:7e:b0:af:71:
92:a2:d0:7a:36:d4:68:32:2d:8f:e4:71:71:00:46:
cc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B4:E2:0C:2B:69:3E:26:90:14:39:5E:F2:75:D2:F4:77:9E:27:9C
X509v3 Authority Key Identifier:
keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e9:9d:42:ce:37:d2:6e:c9:b4:e1:62:2c:0d:1c:0f:fc:32:
18:41:b2:20:da:60:14:64:65:d7:37:10:0e:6f:ab:86:6c:04:
c2:ea:94:77:91:89:da:30:de:eb:56:c9:28:03:58:bc:5e:0a:
a1:eb:b5:e0:4c:39:6b:a7:0c:e5:d7:13:77:1c:c4:2f:d9:aa:
54:fb:3c:1b:65:77:3d:05:05:c7:27:a3:4f:3b:fa:1e:38:6d:
82:d8:59:a3:44:ed:6e:98:75:51:30:45:bd:90:22:66:45:4b:
fd:a2:93:b7:78:9c:f2:40:fb:89:5e:26:a4:e2:d5:34:12:03:
3e:49:c2:c9:73:07:fc:90:c7:30:87:81:31:14:a2:b1:e2:19:
f2:d1:ae:2f:cf:e9:d7:16:d8:ec:0f:8f:f9:79:f6:dc:15:e0:
62:62:9e:d8:cf:48:11:39:06:a1:8e:1e:92:66:53:d6:4f:09:
8e:de:54:c9:c8:74:21:dd:4b:79:64:c6:ae:bd:b1:e9:27:91:
77:d0:eb:d4:6f:3f:02:27:6d:78:8a:45:14:9a:c1:42:c4:e8:
f1:e6:94:1f:0e:51:f7:55:12:4d:14:8b:9f:19:f7:f9:67:59:
98:f8:6c:f3:3b:d1:e0:5d:d1:70:d0:20:90:7d:80:b9:5f:c9:
92:4a:b3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:14:29 2025 by rpki-client