Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: yxq3BUyh2W+FykRhLFUpiDYaKepWncuqhDa+2by1BHg=
Subject key identifier: 62:02:5C:5E:4F:F3:0D:C1:A5:79:2C:E4:C7:CC:4E:89:EA:96:E8:FD
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 0198D5159F7553D82BE9E9573A9DF6D3F82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 141A
Signing time: Sat 23 Aug 2025 04:00:20 +0000
Manifest this update: Sat 23 Aug 2025 04:00:20 +0000
Manifest next update: Sun 24 Aug 2025 04:00:20 +0000
Files and hashes: 1: 36vP2RZocex6kBCMTbzrkEU173I.roa (hash: aEiOZj8YmAwZwpDXXxUuOkmJFeM2AJc91e5CxmnRxTk=)
2: Orz1byvi4W2gEs0XQxLqSRV1Cd0.roa (hash: uqVz+HdI8skKqSoIO5b4CKUGzxdeiewseboy6iVD14g=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: gr6focNo9yFcEmZaLSIc/TOjrj3kK9TKzwdD8c9J1V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:9f:75:53:d8:2b:e9:e9:57:3a:9d:f6:d3:f8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Aug 23 04:00:20 2025 GMT
Not After : Aug 24 04:00:20 2025 GMT
Subject: CN=62025c5e4ff30dc1a5792ce4c7cc4e89ea96e8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:45:87:63:f5:58:82:51:d9:a5:78:49:62:
8a:7e:40:2f:e5:f8:01:a6:11:42:82:71:84:ac:35:
a7:fe:6d:0b:74:93:ea:4e:bf:0a:cb:4b:2d:89:4e:
50:0e:64:9d:ff:c4:2a:0a:99:2f:2c:25:bf:65:54:
b5:82:5b:88:6b:c8:54:82:65:35:64:19:91:c2:3d:
2c:94:2f:df:26:e1:99:99:bf:f9:e9:27:11:9a:a7:
e3:4e:a7:bb:5e:12:cc:d0:1f:d6:f4:48:be:17:36:
1b:23:0d:86:2b:b4:67:61:24:90:a2:7e:98:31:39:
1b:54:98:30:ab:d2:03:9b:4d:f7:53:ad:b5:27:c2:
4f:07:97:27:c4:9d:9e:85:8e:31:a4:13:18:92:31:
f8:3f:65:f8:b2:b3:0d:b8:cb:88:5f:3d:fb:d0:c1:
bf:e2:7f:b2:0b:24:a5:48:63:77:51:11:d4:df:4d:
7a:22:7c:77:2d:96:2d:81:f2:03:d5:0e:6d:cb:87:
7f:4c:ac:db:a7:b2:4d:86:26:04:40:1a:56:23:12:
68:50:72:8c:f6:03:8a:43:70:cf:37:b0:16:91:a3:
59:4a:7e:c1:ca:67:d8:66:c6:d3:d2:0f:5b:fb:5b:
13:b4:3c:6f:69:40:ef:e9:33:b9:ad:b6:7e:5b:3a:
16:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:02:5C:5E:4F:F3:0D:C1:A5:79:2C:E4:C7:CC:4E:89:EA:96:E8:FD
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:70:42:f0:c1:c8:8a:c1:54:98:9f:f4:ad:33:9a:04:bd:35:
14:da:45:23:05:cd:f4:15:2c:85:f1:d9:77:e2:cf:bf:06:81:
1a:c5:bd:7d:e0:46:6f:94:c1:1f:81:7b:2f:b8:a2:c1:0f:f9:
b0:b1:6e:ee:38:7a:6d:5e:77:8a:a4:cf:02:af:39:44:fa:9f:
ac:48:01:67:8f:94:ae:19:e0:5c:2b:d2:d8:73:84:95:c3:96:
c1:e3:85:32:bc:f1:40:cb:ec:21:a2:96:09:64:f7:05:82:1e:
82:f3:39:e4:de:94:d8:11:65:a7:d3:4c:01:ed:a1:82:bf:55:
a0:0a:cc:26:fd:31:93:a9:e2:53:04:b4:d4:a0:83:72:15:6e:
9f:ed:41:a1:63:19:86:e2:35:85:7c:1a:a8:b0:20:43:38:20:
8f:da:f8:e3:85:78:07:60:02:d3:a6:1f:0e:13:9b:91:27:dd:
cf:ec:c0:42:47:42:29:17:c1:f9:f6:eb:aa:64:a8:76:5b:93:
c7:26:b7:51:c9:ef:04:88:2d:61:4d:04:91:3e:2b:b7:a3:d0:
99:4b:2a:ec:9c:6c:3b:1f:7e:a6:55:0e:4d:48:3d:66:3a:9f:
5f:2c:27:71:c3:3e:51:8e:03:36:7a:bc:4f:22:8e:33:d1:7d:
02:93:2f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:42 2025 by rpki-client