Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
File: Wx2S_lASvWW-DDKw7jkXGciClCw.mft (raw, json)
Hash identifier: GKNvGv9Fxg1y/8Zvhlx4XPC5ATNSAkYfjjXYbZ6n51w=
Subject key identifier: 0C:C5:07:14:7F:C0:5C:69:90:DC:BA:91:F9:F0:08:82:73:86:C4:1B
Authority key identifier: 5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
Certificate issuer: /CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Certificate serial: 0198D660E85131B3039807C8705C3F4CC02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
Manifest number: 0AC0
Signing time: Sat 23 Aug 2025 10:02:11 +0000
Manifest this update: Sat 23 Aug 2025 10:02:11 +0000
Manifest next update: Sun 24 Aug 2025 10:02:11 +0000
Files and hashes: 1: Wx2S_lASvWW-DDKw7jkXGciClCw.crl (hash: 0Ajgui8SBSOa33OS/kwttMLXfA3dcKfsJGXIGUT8aQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:e8:51:31:b3:03:98:07:c8:70:5c:3f:4c:c0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Validity
Not Before: Aug 23 10:02:11 2025 GMT
Not After : Aug 24 10:02:11 2025 GMT
Subject: CN=0cc507147fc05c6990dcba91f9f008827386c41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b6:4d:58:1a:64:71:66:d8:ef:90:20:14:26:
23:af:18:62:ab:ff:64:71:c7:73:65:2d:bc:9e:a9:
aa:92:2d:89:3f:74:78:ca:00:b4:01:4a:2e:55:38:
74:71:10:5f:78:61:46:06:3a:2f:6f:d6:ed:56:fb:
9c:d2:a3:d6:1d:7e:1c:bb:54:e3:31:fc:2f:0b:4a:
8d:da:15:14:3b:81:a0:44:fd:d0:51:bb:89:4b:fd:
04:41:75:79:20:9c:5d:44:15:d8:b0:ec:d1:85:2c:
42:0c:4f:df:5e:ef:bf:b3:e5:1d:61:02:01:21:4a:
ff:08:96:d2:48:61:42:46:f4:a2:de:98:e8:1b:38:
82:26:3a:f0:eb:5c:17:e4:ab:50:50:24:f0:5d:c9:
6f:80:bf:51:1e:3f:e5:1d:ee:0f:2a:e4:a8:06:7f:
11:de:98:df:67:7f:f1:4b:f2:5f:89:50:44:9f:1d:
3c:b9:31:b1:f5:82:69:21:2d:92:bf:29:0b:3c:ff:
d2:90:2e:c8:9f:6d:cb:d4:e3:56:9b:b5:95:6f:28:
e8:3b:26:37:bd:ee:d8:f6:33:e1:dd:79:79:e2:7c:
bb:76:ae:d4:af:91:a1:97:2b:10:4d:ca:61:35:cf:
16:4d:53:52:0e:a2:39:c7:0a:27:4b:58:e0:c0:29:
1b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C5:07:14:7F:C0:5C:69:90:DC:BA:91:F9:F0:08:82:73:86:C4:1B
X509v3 Authority Key Identifier:
keyid:5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4f:8d:fd:c5:e1:24:64:2b:9f:ec:c8:fb:9f:e2:cd:10:29:
c6:a9:87:c4:73:68:dd:16:de:0b:5b:bc:2a:1a:94:b2:47:65:
89:ee:4c:61:8d:f5:50:a0:54:b6:a6:96:1a:ad:55:5f:3a:7c:
84:ec:e9:b1:ab:7a:dd:13:a5:fb:15:77:27:72:38:c0:5d:80:
ce:fa:25:d3:5e:ce:10:50:9a:cb:ab:5b:23:c0:cc:98:b9:d4:
35:05:03:39:85:c8:81:9a:9e:72:25:ce:21:b0:f7:c7:43:b3:
4b:16:66:85:7f:2e:31:8b:21:41:6b:54:30:f2:98:45:5e:c2:
2a:39:bf:53:81:f4:df:85:2f:a0:a6:25:74:d2:87:3a:d1:f4:
f0:21:c3:89:e2:ef:87:be:08:9d:57:71:37:24:60:c4:24:a8:
47:da:bd:5a:50:63:b7:75:d2:3b:14:07:4e:32:90:fa:03:64:
4d:32:d1:78:45:9e:bd:c4:8d:b2:81:25:f9:15:bf:ec:b2:38:
e5:fd:e6:5a:8a:6e:b4:29:8e:f2:db:dc:17:08:67:a3:ce:09:
db:6f:57:01:61:c6:ba:0e:f2:de:04:20:74:f7:09:6e:f3:cc:
67:27:01:e2:ac:8d:b7:ec:36:1a:b1:d7:77:8a:84:2e:a6:bb:
27:cf:57:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:53:15 2025 by rpki-client