Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
File: WXWCvD8LrbZhpp-5pIOzfskFgn4.mft (raw, json)
Hash identifier: caloPGxSfGJPXBHEvGCsQQ3BQU2Ehyzuk9EXoNabm+c=
Subject key identifier: 70:0D:63:7C:82:52:C1:CC:AE:D3:B5:BA:87:ED:AD:DB:42:CB:65:27
Authority key identifier: 59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E
Certificate issuer: /CN=597582bc3f0badb661a69fb9a483b37ec905827e
Certificate serial: 019A7225E5A60DB9801EF3889C728847A0C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
Manifest number: 08B3
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: WXWCvD8LrbZhpp-5pIOzfskFgn4.crl (hash: Fi3GhEZGgAFedJj0M+ZASq4lv4erKr78Be4UrpPoVtI=)
2: znM5PqUezkFDKWgZEHXhAygqSEg.roa (hash: rSr63BYEqjq/FlyGA7frAkMF1kFl0699EpH0gvi204o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e5:a6:0d:b9:80:1e:f3:88:9c:72:88:47:a0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597582bc3f0badb661a69fb9a483b37ec905827e
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=700d637c8252c1ccaed3b5ba87edaddb42cb6527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:3d:90:db:31:50:e2:62:62:27:fb:34:4c:
b7:4d:aa:eb:7a:23:a5:f2:4d:d9:55:91:0d:fb:81:
14:81:10:f7:7b:04:99:d0:65:95:a9:34:53:ca:e3:
f9:06:61:bd:9b:60:b9:43:a5:66:1a:bf:d1:31:7c:
52:03:b0:c2:e2:01:7a:5e:89:16:31:8a:a4:b2:97:
a2:9a:53:4a:cd:7e:59:f2:6f:2f:1f:0b:97:dc:ba:
c5:99:39:bf:54:c9:bd:15:c6:34:8f:da:ad:e4:c5:
80:81:5a:c7:ef:e1:64:8f:44:12:e4:53:b7:bc:0b:
47:30:9d:6d:34:f2:48:09:9c:64:5f:a6:0d:48:8c:
81:82:9d:bf:24:72:a7:3f:e7:c6:03:22:cf:38:1f:
ca:34:e6:18:0d:2f:43:6f:21:c8:0b:15:d2:87:20:
b8:4f:fe:36:2e:b3:3a:e2:a4:b5:b7:a4:49:cb:1c:
0a:cb:7e:8d:06:4c:0d:95:52:19:d2:28:7d:bc:25:
58:30:e8:b1:79:71:f1:05:02:a0:f2:7a:a7:bb:17:
b0:5e:94:f3:4a:86:77:59:bd:a1:75:ba:0d:89:09:
ed:fd:08:45:0e:dc:eb:71:1d:19:7e:bd:f5:14:27:
ec:bb:18:57:d0:e9:b6:97:60:e9:7f:de:ef:6c:a1:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0D:63:7C:82:52:C1:CC:AE:D3:B5:BA:87:ED:AD:DB:42:CB:65:27
X509v3 Authority Key Identifier:
keyid:59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b5:ba:3e:7e:91:3d:f0:49:89:b3:c3:f1:43:29:16:5b:23:
36:35:e7:2b:51:e8:a9:40:3d:c2:39:a4:6c:5c:05:b7:97:f9:
f8:df:3f:60:41:2a:35:d2:a7:c5:36:de:dc:cb:5a:2a:ac:f6:
64:05:60:d0:5a:7a:4a:a8:00:88:99:68:2a:0a:24:44:f8:78:
e7:16:be:19:42:60:64:43:81:63:53:17:a2:88:b6:12:a0:f0:
70:6f:11:5c:26:d1:fc:21:29:4a:8b:46:0d:77:fc:29:de:cb:
9a:0a:8f:b4:6a:8d:f8:2a:94:b1:48:c0:7e:6e:b7:b7:bd:9a:
95:59:1a:98:1b:2c:9d:dc:da:c7:1d:c8:3f:63:50:74:7b:8a:
61:cf:9d:25:62:07:a9:b4:1c:f1:e1:c3:2b:9e:3d:f5:f6:5f:
55:23:a2:3d:8e:06:56:ed:15:6f:cc:4c:cb:62:14:91:d4:55:
f3:a0:b8:8f:4a:82:16:c6:65:e5:b7:d0:01:b6:5b:ad:4c:a3:
5e:4d:51:fa:74:09:48:60:91:a7:e5:c2:8d:84:30:72:42:a1:
e3:71:42:7c:a2:59:51:0d:29:d4:f1:d8:6b:96:ff:e2:12:64:
cb:bf:b8:1d:21:7d:88:9d:56:b9:38:39:6a:78:a1:06:10:24:
ad:a9:18:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:50 2025 by rpki-client