Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: 31DULJxTAGLltsmj6bCb4QzCxTmZYwSAb8CJcjH5I+Y=
Subject key identifier: 0D:BD:F8:BF:23:C6:B4:E8:93:55:D0:45:45:E3:5E:68:C9:B4:C2:3F
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 01984A0A535B094B506ACB8CCA66A6DB958E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 13D2
Signing time: Sun 27 Jul 2025 04:00:47 +0000
Manifest this update: Sun 27 Jul 2025 04:00:47 +0000
Manifest next update: Mon 28 Jul 2025 04:00:47 +0000
Files and hashes: 1: 36vP2RZocex6kBCMTbzrkEU173I.roa (hash: aEiOZj8YmAwZwpDXXxUuOkmJFeM2AJc91e5CxmnRxTk=)
2: Orz1byvi4W2gEs0XQxLqSRV1Cd0.roa (hash: uqVz+HdI8skKqSoIO5b4CKUGzxdeiewseboy6iVD14g=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: xn6qelZznGOvXwE5afiaJDC1mYTdCqjWCMpOj8Jenag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:53:5b:09:4b:50:6a:cb:8c:ca:66:a6:db:95:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Jul 27 04:00:47 2025 GMT
Not After : Jul 28 04:00:47 2025 GMT
Subject: CN=0dbdf8bf23c6b4e89355d04545e35e68c9b4c23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:7c:45:fd:e1:46:f3:cd:91:ee:bb:61:88:
ba:61:04:9a:f6:ac:86:b3:80:09:7e:cd:14:d1:0a:
8d:7f:a6:47:7b:66:b2:29:e4:22:a6:46:f1:fe:48:
ba:1c:73:fb:a4:d7:67:2c:fd:79:f2:b5:b2:57:56:
1f:83:26:15:c0:56:a7:2e:f0:e2:58:e1:31:de:10:
c1:25:90:69:a9:98:d3:91:17:2d:e7:a1:9e:77:99:
e8:fc:df:e7:b0:5b:c0:82:2f:81:a4:79:0c:99:de:
c0:84:74:e4:62:23:81:a9:18:71:db:f2:e9:09:97:
d4:13:51:24:f4:74:6a:7d:5a:3d:27:e5:ad:1c:ff:
2e:64:af:bb:dc:a3:ec:cd:71:50:f8:67:f6:50:65:
4c:2b:dc:37:20:75:a3:d5:0f:55:6d:6a:0d:05:cf:
e2:38:cd:4a:8b:15:ca:7d:70:cd:6c:bf:a6:71:37:
2c:8a:04:ad:a6:36:03:3e:48:da:e0:f6:62:1c:f9:
5c:2b:37:03:f1:81:27:fb:de:89:9d:e4:de:14:0f:
16:19:6f:4d:a4:8b:04:90:0b:49:f4:d4:c3:18:6f:
91:53:13:26:b6:f6:71:75:e3:e5:30:9b:3a:35:70:
f6:29:44:cd:e6:1e:f4:76:fd:ca:08:d5:d9:17:a7:
d0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BD:F8:BF:23:C6:B4:E8:93:55:D0:45:45:E3:5E:68:C9:B4:C2:3F
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4c:1e:7f:66:3e:00:70:fb:f6:23:e3:0c:4e:41:77:65:46:
ff:cf:81:19:de:bd:e4:11:59:5e:88:39:64:60:eb:4a:12:00:
29:21:52:c5:f9:6b:e7:f2:ca:39:60:68:f9:3b:51:7a:20:d0:
89:fd:16:e8:10:9b:dd:d3:a4:ff:a2:85:ae:a9:50:21:4a:a6:
b1:49:75:32:80:d0:5e:96:c5:68:90:27:c4:10:83:2a:ef:21:
d7:c0:f4:84:5d:62:4f:ef:2a:67:3d:4e:3e:ca:29:61:14:49:
e2:15:11:90:60:c1:33:a1:9a:bb:33:da:f6:03:59:3e:ac:0c:
d4:55:f9:ac:7f:7d:81:06:e5:56:d3:61:ce:28:57:af:5f:5b:
84:d9:61:4d:5c:c4:e8:58:36:3d:45:2f:b4:2b:35:e7:e2:b8:
62:89:1d:e8:17:33:34:6b:c0:13:5b:4b:36:1b:11:b9:4d:3a:
63:94:80:7e:53:66:39:0e:d4:7e:54:53:4e:92:58:cd:bb:70:
bf:d2:b5:42:a3:81:44:03:cc:01:79:7a:b7:23:d2:ec:6a:f7:
1a:43:4e:ce:41:5f:06:8b:2e:61:4c:b4:fb:23:32:01:36:c5:
79:6d:42:49:d9:29:52:99:03:fb:dd:a0:c4:aa:e4:f3:70:99:
09:68:98:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:35:07 2025 by rpki-client