
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
File: WXWCvD8LrbZhpp-5pIOzfskFgn4.mft (raw, json)
Hash identifier: 1lgd8KWuNqu/RNYPG6o7hSfYdIl0dZNc82yPQ9BYBlE=
Subject key identifier: 01:D6:E2:4B:8E:AF:33:BE:A0:3B:7D:13:1E:31:6E:E6:74:D0:14:BE
Authority key identifier: 59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E
Certificate issuer: /CN=597582bc3f0badb661a69fb9a483b37ec905827e
Certificate serial: 0199FA69FE16A95B559425C19EAAA63D3723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
Manifest number: 0875
Signing time: Sun 19 Oct 2025 03:01:14 +0000
Manifest this update: Sun 19 Oct 2025 03:01:14 +0000
Manifest next update: Mon 20 Oct 2025 03:01:14 +0000
Files and hashes: 1: WXWCvD8LrbZhpp-5pIOzfskFgn4.crl (hash: zG1x5Gi3rezQo7CtPDy0Hr3nRVxGnb86ASI+pGw8NDc=)
2: znM5PqUezkFDKWgZEHXhAygqSEg.roa (hash: rSr63BYEqjq/FlyGA7frAkMF1kFl0699EpH0gvi204o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:fe:16:a9:5b:55:94:25:c1:9e:aa:a6:3d:37:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597582bc3f0badb661a69fb9a483b37ec905827e
Validity
Not Before: Oct 19 03:01:14 2025 GMT
Not After : Oct 20 03:01:14 2025 GMT
Subject: CN=01d6e24b8eaf33bea03b7d131e316ee674d014be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f4:c2:b2:da:08:6f:9f:2e:0c:61:a3:2a:ca:
72:f7:16:4e:55:6c:24:4c:a0:5f:5d:0d:69:79:63:
df:01:d6:4e:c1:76:14:5c:f2:9e:11:35:a0:e6:e2:
38:76:67:a8:2f:70:4e:1a:f6:4e:c6:93:69:89:ed:
2d:54:ef:7b:c9:5c:1c:67:bc:a0:d3:7f:f2:1a:79:
6d:a1:e4:57:53:12:19:fd:b1:6b:27:15:7d:c1:6b:
f2:99:c4:38:d5:f4:68:a4:18:47:d2:8e:c3:fd:90:
2b:f3:ea:b2:cd:44:4d:14:7c:34:65:0f:02:d9:58:
b1:e0:84:e7:6c:46:64:d3:64:95:8d:96:db:d5:4b:
c7:bd:c4:4d:c6:6c:a2:fd:f6:92:1c:49:37:36:7d:
0b:60:37:a2:4b:e0:0c:ec:6c:95:25:55:8b:bc:d5:
5d:6d:2b:d0:a4:b6:1f:6b:4c:45:64:cb:68:f5:9b:
75:46:df:c7:46:49:f0:8e:46:2e:53:d1:58:ef:03:
7a:cd:f5:4d:af:89:c3:57:f0:8a:08:03:75:86:85:
72:ef:ec:e3:3e:ee:ea:49:80:1d:e2:68:3e:26:60:
45:5a:af:54:ae:b3:fb:af:ce:a7:0c:a0:f5:b8:bf:
af:1d:e8:86:2f:53:9b:50:6f:2b:36:5f:b9:63:76:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D6:E2:4B:8E:AF:33:BE:A0:3B:7D:13:1E:31:6E:E6:74:D0:14:BE
X509v3 Authority Key Identifier:
keyid:59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a7:b0:0a:e1:c9:bb:c9:0a:d1:dd:2c:72:14:c0:86:cb:05:
9e:d6:2e:8b:2b:7b:68:59:30:f8:b9:43:9d:10:ca:c5:cc:26:
d2:5f:8f:54:55:ff:1c:b1:d3:06:51:53:65:f9:1c:7e:63:d7:
42:9f:75:fa:a4:ce:2f:80:64:1f:0f:48:3b:6b:af:c9:46:bb:
fc:5e:a5:53:b1:fb:51:da:83:fb:a7:48:01:f4:a4:f4:52:35:
49:05:9c:e4:3f:80:cf:c4:1d:aa:e2:5d:44:a5:a6:96:05:8d:
71:5d:1a:36:ce:80:89:29:f3:d6:25:73:56:83:9f:e1:58:f3:
f3:1b:3d:ec:49:37:d6:90:38:8c:cd:80:ab:3e:b3:14:73:01:
04:55:4b:23:d4:6c:d2:76:db:ca:36:52:97:d4:58:a0:95:05:
6d:13:0a:c0:8a:1c:1a:e8:7a:13:02:7d:18:5b:05:47:10:cc:
1f:81:bf:59:dc:58:2a:99:62:00:25:4c:76:71:06:ae:d7:d8:
3d:bf:39:c9:b0:97:3e:d0:ec:67:67:2e:db:0b:72:17:92:f4:
98:e6:5e:2b:0e:28:76:76:86:ef:d3:e9:c1:85:65:b5:b6:51:
9b:19:cd:da:a2:df:5a:c5:4a:ed:3e:7c:6c:5f:32:05:ef:7d:
19:62:b5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:26 2025 by rpki-client