Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
File: Wx2S_lASvWW-DDKw7jkXGciClCw.mft (raw, json)
Hash identifier: dTgYphNSO3N7fM7J2DFxHrqq+LB04HoasIKHpgcfhjM=
Subject key identifier: 60:F9:A2:3D:E2:07:88:EC:A4:3E:E3:97:60:C7:8A:7E:C2:6E:08:0C
Authority key identifier: 5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
Certificate issuer: /CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Certificate serial: 0199FBEBFD476AF1B543F634E9F06F6E3348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
Manifest number: 0B58
Signing time: Sun 19 Oct 2025 10:02:50 +0000
Manifest this update: Sun 19 Oct 2025 10:02:50 +0000
Manifest next update: Mon 20 Oct 2025 10:02:50 +0000
Files and hashes: 1: Wx2S_lASvWW-DDKw7jkXGciClCw.crl (hash: mxnvRXtv3yFzgOfLjWCveZZTX8MJ0kh/7FlTp5MuA98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:fd:47:6a:f1:b5:43:f6:34:e9:f0:6f:6e:33:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Validity
Not Before: Oct 19 10:02:50 2025 GMT
Not After : Oct 20 10:02:50 2025 GMT
Subject: CN=60f9a23de20788eca43ee39760c78a7ec26e080c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:be:ea:19:fe:21:ea:f5:a6:07:7b:d3:ee:
70:66:6f:5e:50:6b:16:71:e7:bc:ef:7a:2a:e1:00:
1f:55:98:6d:f4:e6:a7:da:e1:88:0a:fd:79:cd:20:
43:56:a9:ec:b7:15:52:57:7d:8a:66:5c:ea:0d:bf:
e7:fa:d9:c2:b0:c9:45:a1:9e:bd:44:25:a6:b6:2b:
cd:c1:11:ef:1b:b6:00:fe:d6:b7:75:92:99:60:1e:
6c:ae:cd:50:3f:39:a3:c7:1d:41:5c:08:46:e2:d9:
ce:d9:82:03:67:69:ef:ea:0d:22:d4:fe:30:bb:4b:
7d:35:70:9e:e0:d5:48:dc:c4:70:a9:b4:56:e9:5f:
02:9c:da:1d:66:8c:f1:32:cb:f0:bb:43:ce:47:41:
07:e7:b9:06:22:53:7d:d3:eb:94:74:23:e5:ef:29:
31:bb:89:2d:b1:d3:70:9e:3e:2d:87:45:0c:fa:3a:
d1:4b:84:a9:1f:fa:42:49:09:86:85:63:38:13:ff:
cf:7c:cd:02:4e:c5:49:a3:f9:09:01:75:ed:8e:ef:
74:74:a1:3d:74:f1:17:b6:54:c0:70:bb:b8:5a:83:
ee:84:d4:59:c7:4e:2c:4e:c1:e6:db:e9:7c:52:c8:
cd:ef:96:ae:e0:2e:ab:ac:5b:f2:1d:97:a5:6e:d3:
3d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F9:A2:3D:E2:07:88:EC:A4:3E:E3:97:60:C7:8A:7E:C2:6E:08:0C
X509v3 Authority Key Identifier:
keyid:5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:02:d2:7e:9a:f7:f2:bb:d1:99:26:10:52:d8:50:3c:e6:c1:
cd:90:17:5a:62:c9:f4:70:4e:e4:2b:de:fe:99:68:f1:c1:63:
48:b6:d1:3b:25:d2:de:35:8e:de:32:0e:9b:05:97:87:38:9d:
e5:af:bb:aa:bc:c1:6f:48:a6:d3:69:ef:ab:60:75:82:97:5b:
93:12:3a:ac:37:af:a1:45:ab:ab:4c:31:8a:be:55:4b:0c:17:
81:8f:89:ea:79:5e:69:b7:14:69:e1:ee:78:2f:ae:e5:50:cb:
3a:ed:62:68:44:bd:88:27:a3:a8:29:bb:c2:0a:f4:c8:ae:da:
5a:60:9d:94:bb:3b:ca:df:d8:57:d1:aa:07:ed:df:4c:4b:91:
95:0a:0c:6c:21:4d:d8:96:d9:5d:45:6d:8e:20:87:a8:fd:ea:
82:46:73:79:f7:c7:dd:0a:0e:5c:9c:43:cf:5c:26:c5:f3:d1:
3d:f1:e1:ee:bd:f9:fe:f6:be:54:15:2b:b9:19:e0:b1:65:41:
a5:56:c4:85:7c:27:e4:0c:18:90:db:3b:f9:05:7a:7c:2f:13:
9f:06:03:dc:11:16:58:01:b8:cd:6e:a4:41:41:a2:a3:d3:ad:
94:99:26:57:47:97:34:cf:39:47:9b:bc:12:f7:b5:e4:48:85:
af:f4:e3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:01 2025 by rpki-client