Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
File: Wx2S_lASvWW-DDKw7jkXGciClCw.mft (raw, json)
Hash identifier: qgLt2Wu5PMvYhTAVF9dnh5CoQGiRrXHH1gMb23B0t9I=
Subject key identifier: 30:38:AA:7C:7E:DC:49:78:D8:27:D9:89:D4:40:7A:F6:22:A7:85:9C
Authority key identifier: 5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
Certificate issuer: /CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Certificate serial: 019A4EF5B43637981F801984F1ACC66AE6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
Manifest number: 0B83
Signing time: Tue 04 Nov 2025 13:01:56 +0000
Manifest this update: Tue 04 Nov 2025 13:01:56 +0000
Manifest next update: Wed 05 Nov 2025 13:01:56 +0000
Files and hashes: 1: Wx2S_lASvWW-DDKw7jkXGciClCw.crl (hash: FA8jjWqHtZon6MoN52zMMKe7uRXFjeJCPT2TUrZF16U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b4:36:37:98:1f:80:19:84:f1:ac:c6:6a:e6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Validity
Not Before: Nov 4 13:01:56 2025 GMT
Not After : Nov 5 13:01:56 2025 GMT
Subject: CN=3038aa7c7edc4978d827d989d4407af622a7859c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:b5:9b:26:27:2e:5f:53:af:7c:86:6e:8e:
74:5d:5b:99:72:38:fc:1f:6d:ce:8a:30:1c:6b:8a:
9a:a0:cb:81:81:90:0e:ad:79:a5:9b:fb:b0:40:4a:
10:6f:2c:77:60:36:0b:b2:c9:40:66:bc:64:fe:a6:
b2:c0:2a:f1:24:6c:57:be:3c:d4:7c:a4:d4:8b:02:
c6:d3:b2:10:99:3f:56:50:c0:97:f4:cf:a2:97:da:
84:9b:43:11:26:bf:9c:02:4e:a4:ca:e0:d3:65:e5:
26:c7:71:ba:40:1f:cf:02:d1:1a:da:f9:01:e1:c1:
85:d5:99:5e:18:79:b3:d0:e4:ed:7d:2f:e7:63:a1:
e0:6f:b2:dc:6c:0f:f1:43:d8:bf:74:62:52:13:fb:
cb:60:85:04:6b:b6:99:6b:72:7f:c9:39:b8:f9:ab:
74:ca:5e:c4:6e:34:88:9a:28:39:59:7a:b5:6d:b7:
c0:a7:49:24:15:8f:5c:ac:5a:72:f9:c6:a7:ee:99:
17:b1:ca:35:c8:00:fe:da:65:dc:2b:ad:23:42:30:
0c:25:27:8e:6f:3f:ab:fc:13:f6:23:51:1a:bc:f4:
b9:65:43:04:37:fd:3f:39:fd:1b:ce:fd:6e:53:ed:
5e:a2:80:a6:65:32:fa:1b:70:dd:0c:fe:5e:83:62:
de:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:38:AA:7C:7E:DC:49:78:D8:27:D9:89:D4:40:7A:F6:22:A7:85:9C
X509v3 Authority Key Identifier:
keyid:5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ec:47:e6:83:6d:60:16:55:13:8e:d7:44:bf:20:6d:ff:0e:
88:06:7d:c5:35:09:b1:2b:d8:90:7f:0f:2d:86:64:8c:63:fe:
2d:be:12:26:e6:92:56:88:59:fc:cd:8d:da:92:7a:66:2e:2d:
4d:ff:39:a6:63:de:65:2e:b7:5b:38:e4:95:e8:64:ea:01:1b:
93:c9:fa:6b:84:1b:d0:f3:dc:dc:cb:1a:fe:f9:b8:cb:c7:b3:
f4:bd:e5:72:aa:e9:8c:e1:01:80:3d:41:6f:1e:1a:02:d0:ac:
36:c6:50:0b:9d:8a:d1:f2:ee:8f:84:91:7c:3a:f3:6a:c0:78:
09:4b:a8:ef:96:13:c8:b5:c2:f5:df:84:8c:2c:72:ac:05:52:
54:97:d8:6c:2f:6a:8d:30:0c:cd:40:e3:59:43:82:13:8b:5d:
bd:59:f0:da:2e:02:92:e6:bb:ce:0d:5b:fd:8d:3d:23:89:3c:
dc:95:57:fb:6a:11:72:87:e2:d9:fe:e8:08:a8:ea:d9:bd:85:
5e:f2:b6:70:5d:d8:f2:12:5c:a9:86:f5:db:cd:c6:35:83:f9:
c2:bf:93:5c:81:57:ee:63:d9:4e:9b:12:97:7e:dd:17:15:3d:
02:ec:81:67:44:c4:ad:d5:f9:f3:3b:bc:7e:fc:11:c7:d8:07:
5d:25:ab:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:47 2025 by rpki-client