Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
File: X-WOcyoPcfTwEwLWIWcXO9mxfME.mft (raw, json)
Hash identifier: EpM+XjLpfKoAkZLT2AgBMVh325DU3mG2Kfh9F3+UBcs=
Subject key identifier: FA:FE:AF:A6:77:36:C2:05:04:CD:D3:F5:90:B9:BB:C2:2F:04:AA:58
Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
Certificate issuer: /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Certificate serial: 01987418D3D68CD008307C6F23952DC676E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
Manifest number: 10E7
Signing time: Mon 04 Aug 2025 08:00:40 +0000
Manifest this update: Mon 04 Aug 2025 08:00:40 +0000
Manifest next update: Tue 05 Aug 2025 08:00:40 +0000
Files and hashes: 1: X-WOcyoPcfTwEwLWIWcXO9mxfME.crl (hash: MPxPFa2ly5NSqoLaHm4hdhUXcTB0PeBhxahUPw6lEDA=)
2: fFhJRfRRKqbVCT0R_v7bFHpdBZk.roa (hash: QZT00tJ/5S8q4sNTIVodhtpTQHCNRxCmyS84l0hAhz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:d3:d6:8c:d0:08:30:7c:6f:23:95:2d:c6:76:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Validity
Not Before: Aug 4 08:00:40 2025 GMT
Not After : Aug 5 08:00:40 2025 GMT
Subject: CN=fafeafa67736c20504cdd3f590b9bbc22f04aa58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:cd:fd:76:52:ff:b9:97:dd:f4:8b:7b:c5:
ad:c8:84:75:f3:92:ce:52:ec:c0:2e:88:67:a0:45:
c7:38:54:39:d3:24:a4:6b:d3:b0:d4:10:1d:58:13:
3a:07:c4:7a:ee:e6:8a:25:c2:b9:29:cf:f9:94:d9:
ad:1e:8e:6d:ba:2b:89:80:5b:23:f1:b2:80:ba:b4:
0a:a9:24:eb:c2:ce:86:d5:35:04:23:2b:29:c8:53:
78:56:ad:92:1f:e6:fb:db:91:20:d7:b7:5b:43:26:
42:2d:20:a6:9a:ca:66:f7:ca:1b:ab:13:d4:f5:27:
c6:8b:54:40:0e:ab:42:ee:51:13:be:f0:29:35:f0:
fc:6b:38:70:0f:da:19:f7:9a:77:be:b2:46:f4:77:
d2:9d:82:a0:7f:4c:37:c7:3c:0b:e2:f9:16:2a:5f:
e7:a0:25:d1:55:ba:30:87:61:80:05:2a:5c:36:20:
9c:47:19:3c:9e:a3:42:62:e5:44:27:a5:d1:5e:4c:
92:c4:01:20:bf:3d:b9:b2:32:a0:83:c8:c5:9a:89:
58:c5:ec:4c:5b:b4:d7:59:0c:0b:41:e4:64:a7:ff:
43:e1:d5:74:9e:ee:84:b5:4b:78:d3:e2:5e:8b:a1:
6c:2d:ac:73:a7:82:bc:5e:6e:f7:f4:52:cc:11:8b:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FE:AF:A6:77:36:C2:05:04:CD:D3:F5:90:B9:BB:C2:2F:04:AA:58
X509v3 Authority Key Identifier:
keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f7:b4:78:95:36:2a:3a:6d:10:95:3e:06:7d:cf:e1:2d:19:
57:78:32:19:3a:e2:a9:fc:86:4a:e8:23:e4:10:08:00:87:7d:
61:e2:f3:eb:68:19:2c:c0:87:3b:5c:9d:d5:74:67:8a:e9:1a:
c3:29:13:33:09:0d:1f:76:68:d3:12:fa:b4:e1:d6:2f:a2:c7:
76:db:fc:6e:55:5e:3e:0e:3a:2f:a7:f2:24:02:d4:f7:16:85:
d2:9b:ff:c6:30:b9:ce:c2:b4:d2:18:23:4c:27:b7:aa:d0:20:
ad:53:e4:6a:79:32:80:b6:88:ca:95:cc:b2:b2:65:07:31:67:
ab:e8:aa:41:81:e7:5e:af:74:6d:54:dc:b2:69:6c:7f:c1:94:
72:29:80:1b:43:37:ca:16:6d:c0:88:8a:07:e5:1f:4f:5f:a5:
15:2d:e7:f3:69:e2:76:12:95:c4:85:47:45:67:1e:f1:87:27:
c8:5d:6c:42:08:e5:5a:45:f6:95:6f:bc:cc:e4:c5:64:26:52:
6d:7a:a7:44:78:18:ac:c2:dc:d5:db:78:61:c0:4f:c2:fa:84:
68:7e:72:a5:e5:95:b3:03:f0:29:fc:d1:19:31:9d:56:dc:94:
dc:97:5b:9a:73:09:85:9a:bd:cb:be:a8:ae:17:81:e8:b4:ce:
cf:88:f1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:01:06 2025 by rpki-client