Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
File: WxweBiQDm9HxqUbLUTyTOG-raxk.mft (raw, json)
Hash identifier: FpDc5MEbxBLdBozws/LtCL9sNAfDGrY1fO7IZwuyStQ=
Subject key identifier: 49:7D:BA:B3:C7:B3:7B:85:C2:FB:3B:18:E1:EB:52:06:E0:BB:B2:D6
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 0198D6CDFD9B71901DCB28DAE1E4DA41A420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
Manifest number: 0C4A
Signing time: Sat 23 Aug 2025 12:01:20 +0000
Manifest this update: Sat 23 Aug 2025 12:01:20 +0000
Manifest next update: Sun 24 Aug 2025 12:01:20 +0000
Files and hashes: 1: J8g7cZ3te-XjH4vB99S63bY5jw8.roa (hash: kTqC/5LOxbM1zdbO1odgPNoINkirS3IzV43BF84XudQ=)
2: WxweBiQDm9HxqUbLUTyTOG-raxk.crl (hash: 0UzcqEtJyMtqj8gftUwyI7Lhk5UZf/eFoHaBmITqqvU=)
3: n6GsozsAIUsV5q_nwqboXGBIS0o.roa (hash: SV+wqJcEFOa4P82VjIfU8axnoITYl7V615IXuKpHvcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:fd:9b:71:90:1d:cb:28:da:e1:e4:da:41:a4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Aug 23 12:01:20 2025 GMT
Not After : Aug 24 12:01:20 2025 GMT
Subject: CN=497dbab3c7b37b85c2fb3b18e1eb5206e0bbb2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:78:74:39:9a:31:32:06:73:7f:45:8b:2d:
64:03:b2:ab:2a:5c:98:43:aa:7b:e0:78:a3:8e:e9:
b8:72:be:b9:e9:d7:57:e7:d3:1c:c0:22:9a:47:f3:
b6:75:68:86:d1:bc:fe:59:44:6b:62:1e:96:60:9a:
6f:21:2e:18:73:a1:b7:10:7f:0e:e3:48:57:c0:f6:
2f:66:ed:83:e2:d9:a8:0e:5b:d2:69:06:5c:9b:85:
93:25:ab:6e:00:44:e9:0d:51:a5:0c:64:b7:e9:b0:
0a:94:c1:57:c9:63:7b:00:97:86:86:70:7d:aa:93:
fa:0c:1c:cb:f9:f2:00:68:fe:58:d2:03:f1:8f:b8:
99:88:55:d1:d7:f9:95:04:98:03:86:ce:9c:4e:2b:
c6:d8:e5:48:63:74:58:b4:11:f1:de:0b:4f:06:d4:
1e:f8:82:99:90:10:c7:58:dc:12:a3:89:78:9a:8e:
5f:f9:8d:51:6b:8f:de:46:70:ff:ce:f5:4c:f9:60:
24:33:31:00:9c:61:49:02:76:b2:11:a1:54:78:c3:
48:b0:77:f4:c3:bb:d5:9b:0a:9c:de:07:ca:d1:69:
69:77:fa:a1:00:88:af:05:61:71:50:46:1b:cc:33:
60:7e:ad:b3:c1:61:fa:dc:40:ed:78:f8:ed:41:39:
87:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7D:BA:B3:C7:B3:7B:85:C2:FB:3B:18:E1:EB:52:06:E0:BB:B2:D6
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c2:90:a8:a6:ed:a8:b3:ce:88:ad:ff:39:72:72:05:5f:31:
7e:cb:99:c5:75:35:62:27:12:e5:0d:5f:5d:26:16:3c:47:a4:
b2:20:8c:52:80:88:be:9e:1a:df:e8:fe:1b:e0:2e:bd:24:83:
bc:6d:0b:a7:98:2f:86:3a:a8:75:88:79:4e:33:fe:8e:62:16:
c3:0c:87:50:69:82:c7:82:42:7b:98:cd:a1:a0:8c:f9:bb:69:
67:26:64:7a:63:8b:18:84:bf:37:c5:47:f1:3e:f1:7c:7a:7a:
89:9d:d7:0c:e1:8c:d2:ad:cc:42:0e:d3:05:b0:53:5e:65:9a:
6f:30:0b:c6:6c:71:e5:7d:b4:77:11:3c:98:df:89:6f:db:6f:
9a:c4:4d:b8:7f:13:30:b4:38:9d:9c:49:fd:29:4c:58:d0:b9:
a9:e0:fa:e3:6d:b3:ce:4a:75:10:dc:69:b5:14:47:ec:4b:8c:
0c:48:0f:91:e9:60:84:8d:a5:74:0d:86:63:04:ec:f2:e4:18:
8a:b1:8e:b3:bf:5e:be:ab:58:c4:4f:a0:17:27:11:9e:5e:db:
d7:0b:48:d3:d9:ed:2c:81:cd:02:43:be:4c:97:2b:de:a7:d7:
97:1e:50:2f:f2:0f:d2:71:70:21:a6:2d:d3:3b:0e:1a:92:fa:
81:8e:70:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:25:45 2025 by rpki-client