Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
File: X-WOcyoPcfTwEwLWIWcXO9mxfME.mft (raw, json)
Hash identifier: 6v1+QBxf0a15yNQngBhsXA5A5uS3U1OE3JTI18n7PU4=
Subject key identifier: A7:DA:CF:36:FD:48:1D:1C:97:0D:73:A7:FD:0C:E0:2A:E2:F6:65:9A
Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
Certificate issuer: /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Certificate serial: 019847ADAF0C1B9D29D705271FF700ECE783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
Manifest number: 10D0
Signing time: Sat 26 Jul 2025 17:00:21 +0000
Manifest this update: Sat 26 Jul 2025 17:00:21 +0000
Manifest next update: Sun 27 Jul 2025 17:00:21 +0000
Files and hashes: 1: X-WOcyoPcfTwEwLWIWcXO9mxfME.crl (hash: 8F8W9GHH4WoLqQnD4HDAqPPyR7vwthCl+j7lY157Hg4=)
2: fFhJRfRRKqbVCT0R_v7bFHpdBZk.roa (hash: QZT00tJ/5S8q4sNTIVodhtpTQHCNRxCmyS84l0hAhz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:af:0c:1b:9d:29:d7:05:27:1f:f7:00:ec:e7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Validity
Not Before: Jul 26 17:00:21 2025 GMT
Not After : Jul 27 17:00:21 2025 GMT
Subject: CN=a7dacf36fd481d1c970d73a7fd0ce02ae2f6659a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c5:7d:0d:5d:18:b9:98:60:17:c7:fb:6f:ff:
42:84:3a:b9:78:9b:a8:bc:40:52:e8:30:01:ef:1b:
58:f7:3e:7e:06:3a:a5:4d:a1:03:fb:8d:7b:37:15:
b8:89:c8:3c:6f:24:3b:0a:54:2c:61:c3:c3:20:be:
08:f4:08:5e:a9:8c:cb:de:8c:57:9a:7a:69:1f:5b:
11:b3:26:8d:14:76:e1:46:8d:26:c9:2a:74:f8:72:
59:f2:55:9f:89:da:66:9c:99:dd:0e:ca:c2:21:af:
19:74:2e:b4:ae:8c:1b:0d:8a:c8:1f:62:64:1e:bb:
36:5c:1f:e0:25:89:a2:e4:c3:25:ae:ab:7d:ec:77:
12:6c:c1:39:68:29:61:06:33:02:a9:97:4a:42:dc:
1a:0b:fd:26:06:fb:d4:94:25:49:f0:bc:33:40:94:
19:f6:89:e3:bf:33:13:d7:df:59:4c:75:b0:c2:08:
31:93:6a:50:8d:16:27:f4:f7:c9:ff:61:3d:de:b6:
7e:7a:ea:91:6f:6f:19:e5:5b:68:24:e6:a4:28:7b:
c1:16:08:42:ac:f6:ee:46:d1:3d:92:6a:5a:39:f9:
34:3a:6e:ff:0c:99:31:96:5d:a3:c7:09:4b:a1:ef:
7f:31:de:97:a5:f4:fb:ed:cc:d7:0f:1b:0d:93:7f:
51:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DA:CF:36:FD:48:1D:1C:97:0D:73:A7:FD:0C:E0:2A:E2:F6:65:9A
X509v3 Authority Key Identifier:
keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ac:a0:88:6c:61:b2:59:7b:4c:39:e1:b1:36:cc:73:5b:ca:
82:76:37:b5:0e:93:21:26:12:1d:07:31:6c:88:ad:90:f8:0d:
d6:d6:c1:ec:e4:27:b7:ac:91:08:13:a7:c9:4d:8e:df:63:8e:
e5:1b:be:b6:b4:d0:9a:d8:a0:20:6f:3d:4b:32:04:f8:36:3b:
5e:bd:69:ec:4a:0b:49:9d:d2:ec:90:f3:b6:aa:c8:03:f0:f8:
3b:e6:4b:67:6d:c7:b4:38:02:12:9b:9c:f8:45:a6:3f:6c:9e:
67:5c:eb:ec:c2:6b:c8:07:52:67:21:4f:0c:b6:7a:4a:a2:04:
1a:4a:cf:42:f4:d2:ec:d7:59:ee:fe:f2:cb:96:6d:1c:b5:3a:
7c:9b:e1:19:34:9c:f0:16:16:85:85:a3:aa:64:90:e2:3c:90:
df:21:46:5d:f2:5f:6b:13:38:c5:7d:2f:73:bb:a1:46:e9:1e:
80:ed:38:f2:25:16:55:37:c9:54:a1:54:42:89:43:42:6d:06:
34:92:a7:bd:76:3f:97:6e:43:d4:54:3b:23:b9:30:70:c0:6d:
7a:c7:1f:82:8f:f4:4d:7e:89:54:52:ef:37:2c:c5:66:fa:0c:
03:7e:5c:c9:83:d5:22:cc:a7:8a:42:9a:9f:8d:05:24:a9:67:
a9:20:48:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:56:01 2025 by rpki-client