Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
File: WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json)
Hash identifier: 8qjJhz0dBWCKbphJmGSCorJrkYd/XwVo+4T1JXG2VEI=
Subject key identifier: DF:98:B9:5A:1C:2B:6D:66:0C:10:0C:AE:02:61:B6:5D:9F:70:20:61
Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
Certificate issuer: /CN=59785a21e2d07c68ff317558c69ef118cc75805a
Certificate serial: 0199FBEB9874B22236B5945EB3722256B777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
Manifest number: 0D86
Signing time: Sun 19 Oct 2025 10:02:25 +0000
Manifest this update: Sun 19 Oct 2025 10:02:25 +0000
Manifest next update: Mon 20 Oct 2025 10:02:25 +0000
Files and hashes: 1: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: LG2hZZtImmwmJvavH3KSx/9ceheJtSfiU+uxwSdOndc=)
2: pBfkqeCcf8kyWik2qeWgXpT9J0w.roa (hash: x6edmQyN+AuRQRVkdUM3z3US8XBwQrqEnFPt4p+BBqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:98:74:b2:22:36:b5:94:5e:b3:72:22:56:b7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a
Validity
Not Before: Oct 19 10:02:25 2025 GMT
Not After : Oct 20 10:02:25 2025 GMT
Subject: CN=df98b95a1c2b6d660c100cae0261b65d9f702061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d2:f8:81:87:05:8a:2d:a0:08:0f:9e:c8:e3:
d1:17:1f:d7:d7:9e:dc:33:e3:66:98:ca:80:3a:88:
81:9d:ef:42:39:39:5d:39:39:5a:a4:a2:6a:56:20:
64:b1:a6:e5:70:94:c3:e8:ef:51:da:f8:36:44:e8:
7d:1b:bc:33:56:cc:80:30:a5:05:59:e9:94:97:cc:
b7:c6:01:a3:47:d8:2b:fc:51:e1:cd:89:e7:70:0f:
22:41:1e:28:19:e3:0d:cd:19:c9:29:ce:44:91:e4:
cc:87:86:6d:52:75:87:32:f3:fe:a2:e0:86:aa:0b:
9b:5f:49:24:79:e2:09:ef:5f:ec:ed:87:44:69:d2:
a8:40:f2:11:4e:04:52:d7:7d:9e:00:3e:1a:28:fa:
06:1d:34:69:2c:ca:c4:d0:69:6e:4b:f8:84:d7:63:
40:16:3c:c3:e6:66:75:92:59:57:8e:75:b7:7c:c2:
3c:c3:dd:51:43:9f:92:e8:4c:73:0d:2b:cb:97:e2:
12:f5:21:a5:92:90:2e:ee:da:96:13:03:f6:a9:8c:
ae:50:90:fe:88:9d:f3:1a:7d:ec:9c:91:d6:65:63:
ec:73:95:a8:a9:2b:d6:cf:d7:bb:35:60:7e:94:d5:
62:04:69:67:0f:d9:62:4d:09:25:34:86:fa:09:e9:
d1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:98:B9:5A:1C:2B:6D:66:0C:10:0C:AE:02:61:B6:5D:9F:70:20:61
X509v3 Authority Key Identifier:
keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:25:05:c3:53:2f:5c:2c:ec:1a:2a:ad:0d:05:4a:50:9d:8c:
a5:f1:a9:9f:f5:d1:ae:e2:b7:8b:20:6e:cc:9d:26:08:c8:f8:
9a:f3:07:94:c3:76:c1:95:7f:26:02:d2:9a:e4:df:2d:8a:13:
63:60:04:ef:4b:7d:f3:62:d4:91:e7:4c:fb:e9:cf:de:d6:41:
0b:0c:f8:9f:e3:67:af:e7:05:f7:81:fb:0e:c3:b4:52:d9:32:
3d:b8:31:16:9a:f5:92:be:8c:e7:70:5d:8e:6f:9c:9a:a0:64:
d0:91:8d:51:ca:1c:60:74:9d:fa:9a:06:c0:3b:11:bd:82:03:
11:31:33:5a:72:a5:17:9f:4a:86:ac:43:f0:1f:4c:1a:7d:4d:
f4:7a:85:39:d0:e0:9f:df:39:54:c2:c9:fc:a8:ef:76:0c:0b:
6a:46:ca:83:b4:20:86:13:79:dc:09:1d:81:f9:6e:62:4f:c3:
c1:6c:e7:b0:8c:6b:42:39:92:98:24:b0:5a:ac:70:a6:09:05:
f0:bf:79:b3:7b:d6:ae:75:52:cd:bb:b1:52:4a:95:f1:6a:e1:
c9:1f:cb:55:b4:b8:aa:6e:a5:4f:7b:be:3f:57:94:f5:4f:e5:
a9:66:d0:f2:8a:0a:be:da:62:ed:ac:bf:ae:36:2a:c6:b9:37:
80:11:b5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:45 2025 by rpki-client