Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File: WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier: bsIPyqlYxtuFt+ATB52Yc1lYAJPVTDqpi3L0f2bQTfQ=
Subject key identifier: 76:52:3A:E7:0A:8F:EB:B7:E5:0D:A6:49:AC:FB:97:BD:84:DE:14:E8
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 0198D5F167DDDF97AA30145F85B438DFC0AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number: 13A4
Signing time: Sat 23 Aug 2025 08:00:24 +0000
Manifest this update: Sat 23 Aug 2025 08:00:24 +0000
Manifest next update: Sun 24 Aug 2025 08:00:24 +0000
Files and hashes: 1: 0D01ZS927DpHThbFhFQ-_hFWxII.roa (hash: W9Yn7dxHb0Wn1s2QKfIJNqloaSt38wuy4qDOcPmUhfU=)
2: 42BmTsViJXz2WqlV4_io6K3VIjk.roa (hash: 2MyAlESNR6eqmGKBHGCnds8446wWXVt2CWU4C9xt8MM=)
3: KZZiPS9ZeOzzb7Ol0GU3vdesmec.roa (hash: vFZw/xYafILFh9yVo7+bAnIUSWqHvFS5F2SG90lZkR0=)
4: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: B6TXyraT7StvdCClplIj4VyG5w0xogTAAqPzJx8j6fo=)
5: Xo3ldLDsIsZwGbJ3VdetX-GULwc.roa (hash: 81La9U37EUF9V2tnd1e+qs0cFhZ17T44E32Wc8vicAU=)
6: _WlES2eSPPAcdb99IjbgTsc5Xro.roa (hash: EOl3gK+o3EL4dSF6oUVZ6VSDAeYTaurQvmfArpGviOI=)
7: sBlJ4mJbmZ7QPuvf5LufFr5BMyU.roa (hash: i/AotRsBPnt5Nf8geU1CUYhpvrjw/c5dfcC4n774/K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:67:dd:df:97:aa:30:14:5f:85:b4:38:df:c0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: Aug 23 08:00:24 2025 GMT
Not After : Aug 24 08:00:24 2025 GMT
Subject: CN=76523ae70a8febb7e50da649acfb97bd84de14e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:c0:04:19:7d:ee:49:00:c4:89:7b:58:56:
2e:b5:82:ad:8d:c1:c7:e3:74:7f:11:8d:91:f0:9d:
d1:9d:5d:21:c7:bc:16:7a:bf:c5:13:6a:d8:b1:67:
f8:e4:27:69:eb:8c:80:88:54:4f:64:07:0d:f6:9b:
9e:56:05:00:84:c4:f4:32:99:5a:10:43:7c:9c:f0:
d9:9c:1d:6c:90:a1:93:6f:c8:bb:5a:f4:6c:9d:36:
85:e0:fb:84:ae:9b:10:01:64:5b:39:40:31:f1:39:
16:4d:0b:24:6b:02:64:7a:19:4a:2e:39:c5:a4:8c:
f4:62:0c:8d:7e:d6:b5:a5:dc:83:3e:d5:f8:9f:0b:
56:de:d6:6e:9e:4b:ab:9f:0a:96:fa:26:7f:08:38:
e3:74:0c:13:4d:6b:39:76:f1:c6:1f:91:e5:0c:a2:
92:1f:89:e1:66:18:ec:a4:fe:bc:5f:7b:19:0f:78:
3d:f4:ca:a0:14:33:14:dd:4a:d6:46:71:48:a0:9b:
e2:3d:e4:b4:7d:43:08:09:da:c5:cb:8a:95:e2:5e:
dd:7c:35:7f:e8:7c:04:72:a3:0c:47:0a:41:c2:2b:
e6:48:6c:3c:dc:72:aa:19:96:68:e3:4c:46:e4:f2:
4c:86:3f:71:f8:18:53:4e:18:39:48:63:30:01:0c:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:52:3A:E7:0A:8F:EB:B7:E5:0D:A6:49:AC:FB:97:BD:84:DE:14:E8
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d6:73:a5:89:e1:79:dd:31:b5:98:89:56:0b:c0:62:57:b2:
08:68:e0:3c:5c:e5:76:fc:dd:82:79:63:9a:7e:da:1e:01:33:
a6:fd:b1:37:46:00:ab:8b:d4:f2:b4:98:b7:54:1d:a5:ca:5f:
e3:fb:db:e5:e6:fb:43:c0:15:f0:4a:cb:c1:52:4b:2e:a2:e8:
85:0f:0a:17:94:47:3e:be:55:62:46:2d:39:54:ca:4a:e6:34:
77:1a:19:72:82:e3:8a:55:82:24:0e:71:c7:bf:b3:dc:56:65:
9e:4f:87:45:d9:00:25:f6:c4:20:21:e3:14:da:ee:ef:1b:40:
7f:e6:8b:a8:6c:0a:22:76:1b:a0:99:89:8b:e7:d2:c7:ca:dc:
7c:6c:6b:38:8d:d4:db:74:5c:de:27:9d:2e:bc:f6:a0:87:83:
91:bf:33:89:74:60:87:b2:2c:44:19:2d:51:11:46:2c:6c:51:
a3:11:71:7e:c5:56:31:cd:2a:97:0e:c7:2f:1a:4b:64:03:0b:
f5:45:c2:b2:eb:12:6d:0f:be:3e:f2:07:d9:dc:82:9e:83:d9:
59:9e:15:01:2b:60:00:ba:26:b4:2f:67:0e:04:0c:11:24:1a:
23:5f:4f:22:80:d4:93:77:27:15:bc:cd:81:82:90:21:6f:54:
2e:e3:2b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:22 2025 by rpki-client