Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: jPLnpzQ0OSYaTTRyrXeIFgWCzAlGBDVyhFSdkZeIOCo=
Subject key identifier: C8:61:9C:B2:D7:C8:94:33:F7:76:69:CF:BA:B6:45:64:78:67:08:DA
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 0198820C1133FD023FD4FE1F036C74057A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 13EF
Signing time: Thu 07 Aug 2025 01:01:25 +0000
Manifest this update: Thu 07 Aug 2025 01:01:25 +0000
Manifest next update: Fri 08 Aug 2025 01:01:25 +0000
Files and hashes: 1: 36vP2RZocex6kBCMTbzrkEU173I.roa (hash: aEiOZj8YmAwZwpDXXxUuOkmJFeM2AJc91e5CxmnRxTk=)
2: Orz1byvi4W2gEs0XQxLqSRV1Cd0.roa (hash: uqVz+HdI8skKqSoIO5b4CKUGzxdeiewseboy6iVD14g=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: aFB0R8SKYA9iTaPBzq+R4Q6zAQ6JajA8ADF5iESbgFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:11:33:fd:02:3f:d4:fe:1f:03:6c:74:05:7a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Aug 7 01:01:25 2025 GMT
Not After : Aug 8 01:01:25 2025 GMT
Subject: CN=c8619cb2d7c89433f77669cfbab64564786708da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:ab:4e:97:03:ec:8e:53:53:db:34:cf:8c:
9c:6d:fb:6d:8e:5e:c3:10:75:6b:3c:38:ea:31:ea:
0c:73:19:3f:e9:14:cc:36:d8:92:9c:22:1e:01:79:
f4:b9:60:bc:a8:8a:5c:49:f8:67:e4:73:5d:48:c9:
35:b8:9a:50:69:12:d6:39:39:ba:40:6e:ca:0d:9e:
cc:11:8c:09:0c:fa:f4:a5:14:b9:35:db:6e:5f:d9:
fa:5b:69:78:0d:b7:41:52:75:e1:39:61:85:ec:18:
3a:da:1d:f4:3e:94:42:0c:a7:d2:28:2f:e4:15:0f:
96:d7:b0:8e:f4:47:78:19:ee:20:93:94:b4:81:58:
15:20:b9:db:a6:f4:31:40:37:21:6e:12:c0:69:7d:
3d:46:ac:c9:4b:9f:ef:18:f3:3e:6d:aa:35:78:5c:
f8:4a:76:e3:b7:02:4a:6b:1d:e5:f3:77:e2:77:ff:
a8:47:cc:9c:46:11:ae:7c:a8:5e:33:53:ce:f4:1d:
d4:17:82:da:26:6d:f0:da:cf:67:76:b5:c1:22:18:
8c:a0:ff:6f:00:76:70:b0:43:a5:9b:39:14:30:90:
d3:7e:5c:0f:69:1c:f9:8e:13:3e:f3:ba:92:8d:e4:
d4:47:41:a0:1d:49:41:d3:67:25:59:a2:b7:34:5d:
1c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:61:9C:B2:D7:C8:94:33:F7:76:69:CF:BA:B6:45:64:78:67:08:DA
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:13:a5:26:cc:81:62:30:83:10:6c:76:e9:64:db:c2:d7:54:
84:02:69:67:df:e5:66:53:81:b1:b1:79:0a:6e:90:3a:a7:37:
cf:e0:db:c0:fb:e7:64:5f:3d:02:2e:f1:82:7a:2f:ee:bf:1d:
ae:e6:19:4a:8d:75:df:6f:9a:10:3a:4e:37:7c:51:e6:a4:68:
62:40:67:00:5a:e4:c5:23:db:80:62:b0:66:44:b1:28:b6:8b:
3b:20:52:8c:28:15:ab:5a:50:c5:e0:9b:29:e1:f0:53:c0:ed:
76:88:ce:c5:82:ca:32:74:eb:98:a7:68:10:fc:57:ea:8a:65:
5d:c7:03:e4:50:26:de:93:f3:d4:63:a2:d0:9d:27:f1:6d:c7:
1c:2c:51:d6:87:5d:4e:e2:0e:78:17:62:08:ff:76:60:5c:36:
1e:b8:cd:68:12:01:9e:cf:3b:1c:78:b8:35:b4:c7:44:01:8c:
08:5b:46:07:b3:7c:05:6a:0b:ff:3f:0a:6b:67:c2:49:91:6e:
42:a6:29:17:46:80:91:f5:7e:a9:a5:ac:64:4a:03:66:4f:c7:
93:60:fe:f0:7f:3f:76:a8:45:62:4b:ac:19:f7:a1:05:36:8c:
3d:36:fd:a8:39:f2:2f:6b:c4:b2:48:d7:0f:ec:8e:97:80:73:
21:a1:41:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:40:41 2025 by rpki-client