Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
File: WxweBiQDm9HxqUbLUTyTOG-raxk.mft (raw, json)
Hash identifier: bO8TtyVqljStM94Unn4ZaZWO2DjjL3t9bkss/BCYuZw=
Subject key identifier: 5A:26:17:82:41:43:33:A5:AB:27:67:94:2E:EB:13:0E:59:79:76:18
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 019849D38364B78341FE0C10E54325160AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
Manifest number: 0C01
Signing time: Sun 27 Jul 2025 03:00:55 +0000
Manifest this update: Sun 27 Jul 2025 03:00:55 +0000
Manifest next update: Mon 28 Jul 2025 03:00:55 +0000
Files and hashes: 1: J8g7cZ3te-XjH4vB99S63bY5jw8.roa (hash: kTqC/5LOxbM1zdbO1odgPNoINkirS3IzV43BF84XudQ=)
2: WxweBiQDm9HxqUbLUTyTOG-raxk.crl (hash: vO+V9dCzmz5wAJNZy5rRlS3MA/xxN4UmeM3hZRPCFk8=)
3: n6GsozsAIUsV5q_nwqboXGBIS0o.roa (hash: SV+wqJcEFOa4P82VjIfU8axnoITYl7V615IXuKpHvcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:83:64:b7:83:41:fe:0c:10:e5:43:25:16:0a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Jul 27 03:00:55 2025 GMT
Not After : Jul 28 03:00:55 2025 GMT
Subject: CN=5a261782414333a5ab2767942eeb130e59797618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ba:7b:a2:be:ab:1c:82:75:1b:72:47:9d:e3:
43:d3:c8:b9:3f:16:b0:11:8e:c9:26:a8:8b:2c:3d:
d9:50:12:50:dd:c7:9b:ef:09:2f:72:73:80:47:33:
0e:21:62:c9:69:49:d0:4f:b9:5b:ed:f1:70:14:a1:
44:2b:44:4f:6c:20:a8:31:50:88:a2:8c:6a:28:90:
10:cf:77:9e:66:50:a7:43:c5:9d:78:12:df:1b:9a:
7d:88:4f:f8:e6:2c:4c:22:8a:3a:0e:42:7e:73:17:
8d:f6:41:0a:22:12:48:c8:a9:24:71:e7:15:66:7d:
e1:ad:2a:72:6f:87:00:6e:0f:b9:c2:d1:4c:3d:a1:
9f:df:aa:78:00:3d:10:e3:27:d8:bf:c4:ac:a2:7d:
8c:26:37:df:43:5d:b9:65:2d:97:04:a2:c9:56:70:
b9:67:c1:66:d5:86:2a:2a:4f:cc:d6:e2:40:60:3c:
2d:8c:e5:be:95:9b:b7:f1:a1:e5:99:07:e6:5b:e4:
30:2e:88:63:25:e9:d8:c2:82:49:53:6f:0d:87:ca:
9f:a6:25:89:00:71:f2:d7:7e:22:cc:cd:0e:00:8a:
50:e4:8d:13:8e:0b:5f:33:59:a3:5b:2b:79:49:9d:
a9:ff:58:98:e9:96:6a:71:ba:49:75:79:a0:34:f5:
3d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:26:17:82:41:43:33:A5:AB:27:67:94:2E:EB:13:0E:59:79:76:18
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:79:ba:d3:06:68:3b:05:bc:19:54:49:d2:72:1b:f4:63:ca:
d0:5d:35:6a:e9:62:fc:42:85:8e:1f:e1:f7:be:e6:b2:32:e4:
89:48:0d:5e:83:37:01:fd:c5:35:cd:89:4a:ff:fa:47:e5:d8:
a0:17:be:20:2d:3e:0d:ac:92:8c:44:b4:b1:f3:cb:ea:14:74:
f6:d5:7d:a2:ef:80:b2:5d:74:cf:b0:06:3d:70:38:32:9e:9a:
27:61:f3:b0:73:eb:4c:1d:d9:8a:8e:07:79:46:a0:e4:b2:c6:
af:73:17:a0:cf:87:71:cc:87:24:38:2a:27:c8:6f:05:04:55:
46:dc:b7:7f:b3:91:c1:d2:05:5f:2d:5a:d7:74:78:cb:67:1a:
8f:62:9b:b2:a7:77:19:bb:f5:dc:b5:ca:ae:f4:34:28:90:63:
c1:3d:83:62:e3:27:bd:f6:da:0d:c1:77:7e:28:cb:42:71:a8:
8b:50:a3:db:ef:14:2e:e6:64:47:19:c5:1b:ca:3c:92:28:25:
11:75:bf:45:73:5e:a4:e5:36:dc:6e:93:06:d3:e2:18:b0:32:
28:cd:57:77:1f:3f:6c:67:e1:4d:de:d3:c9:c0:b6:e1:36:cf:
96:f5:6f:b9:a8:8c:58:fd:09:a8:33:d7:ed:2d:22:57:89:57:
b5:62:0a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:37:40 2025 by rpki-client