Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft
File: WXIYySXnbh6YCYdfftGvqX72950.mft (raw, json)
Hash identifier: DHqIgfeQaHsHifcXan0aQqMbAdhY50iUl4tIws4W144=
Subject key identifier: 1A:A1:AB:EF:FB:1F:19:2F:61:44:47:0E:7B:E9:8F:39:6A:DF:2F:A5
Authority key identifier: 59:72:18:C9:25:E7:6E:1E:98:09:87:5F:7E:D1:AF:A9:7E:F6:F7:9D
Certificate issuer: /CN=597218c925e76e1e9809875f7ed1afa97ef6f79d
Certificate serial: 0198D54E3EB117C05D01D73358BB41EF239C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft
Manifest number: 79
Signing time: Sat 23 Aug 2025 05:02:11 +0000
Manifest this update: Sat 23 Aug 2025 05:02:11 +0000
Manifest next update: Sun 24 Aug 2025 05:02:11 +0000
Files and hashes: 1: GYq7npqDI9nx5r20ZgfqjJ8jCBE.roa (hash: ohpsx6f/3RHy+wstuJFR07y68Swe9+64PHH/6mRDCMM=)
2: WXIYySXnbh6YCYdfftGvqX72950.crl (hash: c9yhVvYTgkeChPSTXNyhPQ6KWye6JpkwZMk0r8ZFoyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3e:b1:17:c0:5d:01:d7:33:58:bb:41:ef:23:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597218c925e76e1e9809875f7ed1afa97ef6f79d
Validity
Not Before: Aug 23 05:02:11 2025 GMT
Not After : Aug 24 05:02:11 2025 GMT
Subject: CN=1aa1abeffb1f192f6144470e7be98f396adf2fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:20:37:7e:e6:3e:b6:e5:23:74:d1:f6:a6:
ab:42:ea:8d:e7:8b:51:db:c2:77:9b:e6:3f:36:bb:
52:dc:05:7a:8f:b0:3d:50:25:61:26:22:d1:a7:31:
97:e3:ea:31:e2:14:54:06:c4:2b:6b:ea:8a:a9:b6:
0c:2a:be:11:0c:47:85:10:a8:8b:1a:58:74:88:67:
8d:1b:a8:10:37:4c:bb:6c:ac:de:63:e7:68:01:5c:
0d:d4:89:b0:2b:13:5a:12:39:24:ae:9a:1b:ff:8f:
5d:ca:f9:e4:af:84:8c:f2:1f:22:66:23:74:02:34:
b3:5d:0b:8a:e3:6a:68:f9:8a:0f:7d:d0:42:da:51:
58:82:44:da:0b:07:be:27:72:34:4c:17:10:fe:5f:
f9:7f:a9:1c:6e:aa:5f:9a:ac:e1:09:39:15:3e:15:
be:3a:9a:05:26:46:c1:4d:22:2b:00:be:6c:2f:8c:
60:5e:31:68:fc:b8:37:bd:2b:4f:1c:df:d6:d7:7f:
43:01:49:8b:d2:93:13:9f:98:83:20:d2:db:fd:d8:
d1:40:11:a5:86:43:0d:ca:65:ea:a0:a1:81:6e:96:
28:b8:71:6c:57:26:8c:e8:e1:a7:57:4b:9c:eb:39:
d2:59:c4:da:06:26:28:72:62:14:ba:91:90:3c:ce:
ee:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A1:AB:EF:FB:1F:19:2F:61:44:47:0E:7B:E9:8F:39:6A:DF:2F:A5
X509v3 Authority Key Identifier:
keyid:59:72:18:C9:25:E7:6E:1E:98:09:87:5F:7E:D1:AF:A9:7E:F6:F7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:40:9f:08:36:99:f3:ad:b4:da:79:c2:72:c7:eb:0f:f4:85:
77:cf:13:44:b9:a7:22:55:4f:a3:c4:d0:04:42:cc:1d:68:dd:
c1:47:43:3a:d0:33:99:71:72:b6:07:77:89:91:ee:56:a6:0e:
6d:06:0b:d9:3d:71:17:c4:eb:11:df:ce:cc:a4:0e:ff:09:5b:
cc:af:61:f1:04:f5:2f:dc:eb:e5:03:68:01:11:2e:65:30:7b:
0e:4b:1b:34:0e:c2:eb:54:5b:0b:d2:78:f0:70:da:2e:c2:be:
6c:ec:6a:12:04:5d:40:2d:aa:06:88:4d:a2:ef:4c:23:bf:3d:
7c:b1:47:1c:4e:3a:1e:00:9d:e8:d1:e2:af:0e:41:09:78:76:
80:b3:eb:8b:d5:a6:28:58:db:28:14:7c:da:d3:8c:53:ec:0b:
3a:d8:2e:eb:dc:b2:3c:84:46:9e:b2:e2:ee:67:f9:70:dc:e0:
d1:14:26:4d:2a:34:ed:0b:e5:ed:c4:fd:b6:7f:45:ca:68:f4:
70:1f:b5:6d:06:66:21:ae:c4:c8:3e:ba:be:e3:de:83:94:80:
c2:9b:a3:6a:81:5a:d7:3f:7d:b8:89:fd:0c:1b:1d:83:0d:c8:
52:87:2c:87:82:df:55:2e:eb:89:36:df:eb:87:9e:37:ff:6c:
cc:c7:37:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:40 2025 by rpki-client