Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
File: WVskOnIz5XHDwXPrgkkRGQYyYBk.mft (raw, json)
Hash identifier: XZDrrOx+odpL+jBEEXsrf0dIElgcI6bHR44x0TX3NWU=
Subject key identifier: 78:A9:C1:20:D9:A5:02:7A:72:69:E3:67:B5:D5:32:6A:9C:A7:E8:A8
Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
Certificate issuer: /CN=595b243a7233e571c3c173eb8249111906326019
Certificate serial: 0198D73AFD3E8F11C2AEB80179917272BF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
Manifest number: 15C5
Signing time: Sat 23 Aug 2025 14:00:23 +0000
Manifest this update: Sat 23 Aug 2025 14:00:23 +0000
Manifest next update: Sun 24 Aug 2025 14:00:23 +0000
Files and hashes: 1: 2580DhDO7oRxSgRoTYqJtzmDRZ8.roa (hash: 4RUkkYY+CZ3xO00bJ4wL39GFuDvJP7M2BRc09JQ7DH4=)
2: WVskOnIz5XHDwXPrgkkRGQYyYBk.crl (hash: BhADsOHKg/N90/6P2upaJM3RXQ3H9lI1PDitUAPUtkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:fd:3e:8f:11:c2:ae:b8:01:79:91:72:72:bf:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b243a7233e571c3c173eb8249111906326019
Validity
Not Before: Aug 23 14:00:23 2025 GMT
Not After : Aug 24 14:00:23 2025 GMT
Subject: CN=78a9c120d9a5027a7269e367b5d5326a9ca7e8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:ff:07:ae:b6:b6:3d:e7:56:4d:ce:83:14:
8c:0d:45:d3:98:b6:ac:fb:3b:aa:9d:6f:ef:88:a4:
dc:a0:e4:af:91:e0:91:bb:9a:86:34:be:38:b7:89:
b1:01:1d:51:25:c4:d2:8b:d6:8c:29:d1:37:c1:f1:
61:93:63:35:a4:53:b0:c0:95:fd:4f:67:3e:e7:be:
67:6e:6d:fb:96:27:c0:1a:49:30:7d:6f:e3:e3:db:
23:80:04:71:65:10:ad:51:cf:63:83:89:b9:71:5e:
d4:b0:d7:83:b0:4b:34:e3:fd:eb:e2:d5:25:88:00:
86:4f:de:cd:18:a5:49:42:7a:ff:4a:a4:a2:05:a5:
6e:d0:cd:f1:92:b5:d0:ef:dd:03:93:d2:1f:8f:21:
07:f8:67:ab:c7:25:b6:9f:21:96:c6:d1:bb:f6:18:
9e:67:ff:37:7d:1a:eb:c6:a5:b4:f9:1b:87:c1:9c:
fe:9e:5e:88:91:bc:a4:4d:66:77:99:f5:08:5b:58:
fc:64:1b:ad:7f:1f:38:7c:c9:70:d7:a4:51:78:89:
2e:53:88:bf:78:fe:d1:11:fe:c2:e3:e0:f4:fe:e1:
de:45:11:43:b6:6a:dc:af:89:e9:6e:86:51:90:72:
1d:a2:56:c1:63:ba:78:f9:8f:be:a6:65:90:fd:00:
49:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A9:C1:20:D9:A5:02:7A:72:69:E3:67:B5:D5:32:6A:9C:A7:E8:A8
X509v3 Authority Key Identifier:
keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1b:ac:cb:e9:6a:45:62:64:a2:53:1f:08:f6:54:36:4e:28:
d3:96:5e:6f:0a:5d:04:91:2e:3a:c5:72:d2:82:dd:16:a6:ea:
b9:69:52:eb:a8:63:6a:09:5b:23:dc:1a:5e:9e:c7:92:c7:72:
cd:6c:8b:4d:3c:73:75:48:74:fa:15:cd:96:33:7d:72:eb:eb:
81:82:7e:a4:91:17:a9:f1:9a:d6:da:c8:9d:fa:38:04:33:19:
12:fc:c1:f9:67:40:9c:c9:3a:43:51:fe:64:b1:7c:7a:c5:6d:
9e:73:e7:1d:13:44:9e:11:ec:0e:5f:16:da:21:ef:2a:6f:c6:
41:72:de:21:bf:5c:d6:4e:4a:63:5f:23:d5:84:c4:20:82:55:
38:39:c9:37:e2:87:3b:d4:48:3a:0b:e3:71:40:4a:4e:1f:1a:
3e:52:db:4b:8a:5c:90:49:7f:e4:1b:81:6b:b6:41:47:4a:61:
aa:44:90:46:10:7a:d6:3b:a1:9d:98:3d:e0:b7:79:4d:a0:dd:
38:34:db:05:d0:23:cd:55:45:58:ec:8f:0c:3c:d9:db:38:93:
b2:94:6d:e6:5e:48:1c:bb:a9:31:6a:6c:62:c8:1d:74:a4:22:
5f:2d:83:87:00:e6:45:88:94:a5:9a:64:66:4f:37:c7:58:56:
2a:48:7a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:52:49 2025 by rpki-client