Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: BTZDtd1F5LfFS9Crkh/po4ZpqWyaiYYf6PD0XxA1IpQ=
Subject key identifier: 5B:70:06:96:75:81:83:8F:97:83:70:26:EE:EE:18:02:6C:96:56:41
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 0199FC8F487FBC6467E97D778D98BBBB46C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 14B3
Signing time: Sun 19 Oct 2025 13:01:12 +0000
Manifest this update: Sun 19 Oct 2025 13:01:12 +0000
Manifest next update: Mon 20 Oct 2025 13:01:12 +0000
Files and hashes: 1: 36vP2RZocex6kBCMTbzrkEU173I.roa (hash: aEiOZj8YmAwZwpDXXxUuOkmJFeM2AJc91e5CxmnRxTk=)
2: Orz1byvi4W2gEs0XQxLqSRV1Cd0.roa (hash: uqVz+HdI8skKqSoIO5b4CKUGzxdeiewseboy6iVD14g=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: jBxUw1kQdHjnIk2PT8oZfQ4/aWLCZL70bYXXcgdRycY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:48:7f:bc:64:67:e9:7d:77:8d:98:bb:bb:46:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Oct 19 13:01:12 2025 GMT
Not After : Oct 20 13:01:12 2025 GMT
Subject: CN=5b7006967581838f97837026eeee18026c965641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:16:7a:10:34:90:b3:0f:65:43:8e:a1:ee:
d9:91:f3:6f:0d:72:01:3a:9d:b6:e1:1d:39:30:f1:
00:0e:9d:d2:59:c8:2d:27:c7:5d:3e:d8:c1:26:b7:
4e:16:70:bb:80:44:1c:99:fd:94:27:09:37:d5:0f:
30:78:fb:4b:01:7c:44:b0:54:15:8f:39:75:58:69:
ac:f3:c0:d4:75:c8:1f:f2:06:d9:f8:94:e4:11:92:
79:d6:63:24:03:82:ea:82:98:d4:2d:86:6a:5d:0c:
09:5c:98:b9:b8:4e:b0:ee:d7:72:9b:80:9a:59:59:
ad:47:43:d6:44:99:b4:b1:8e:71:4a:3b:e1:8b:de:
5b:ca:8e:13:b4:cd:5a:8c:ca:08:50:f7:75:b8:29:
d4:e4:79:0d:e4:a0:3b:1e:d1:bd:45:82:a5:36:4f:
7f:89:08:8b:78:aa:6f:31:bb:29:d6:ff:e8:47:20:
67:78:28:f4:b0:bd:43:57:8d:e4:e6:28:fe:f1:fa:
8a:a2:ae:25:87:29:c7:98:6c:a5:99:76:c4:de:23:
f9:54:3b:3d:d1:7c:bb:68:57:27:e8:c0:90:23:f6:
9f:6c:fe:fd:f3:73:b3:dd:0e:95:a1:e7:40:f5:fc:
e5:ab:33:9a:14:e0:1d:41:8d:f4:c0:6f:42:c1:ea:
19:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:70:06:96:75:81:83:8F:97:83:70:26:EE:EE:18:02:6C:96:56:41
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:01:49:06:81:53:58:6b:14:03:1c:90:b3:53:37:80:3e:75:
59:74:ac:3a:61:4c:3f:aa:37:c0:4f:a6:ca:a2:2e:72:97:37:
17:07:42:b8:67:71:fb:aa:98:59:b8:04:b5:e1:0a:4f:6c:2c:
3b:c0:75:16:f4:be:7e:f8:92:75:d8:79:fd:36:83:4f:7d:be:
08:34:4b:69:db:c9:a5:9b:d9:e3:e7:87:fa:d3:fe:72:6e:f9:
0b:59:b9:68:0e:87:2a:ef:9a:b7:fb:d3:2d:d2:9a:34:04:0c:
3c:dc:77:03:1b:06:87:22:3a:93:79:25:71:4c:e0:f7:91:64:
20:45:b8:b7:89:77:1d:62:63:01:de:b3:5c:ea:b9:2a:19:f1:
81:10:ef:05:8d:27:7f:9c:ea:be:7b:9e:96:a9:c8:03:92:7b:
ad:7b:67:02:1a:37:a0:0f:c8:b8:8a:96:27:80:a8:96:70:c6:
e6:40:d8:30:3d:4b:4a:fc:0c:86:58:d3:1e:72:93:46:6a:28:
36:8c:db:50:82:e7:bf:cd:1f:77:4d:a7:98:36:67:91:9d:db:
f8:63:d9:1f:00:3e:d0:f0:5a:85:67:4b:ca:a9:66:3e:23:69:
91:7f:9e:8b:84:a7:86:1b:de:ac:a8:88:d2:73:32:66:2c:d9:
d0:c5:86:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:18 2025 by rpki-client