Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
File: WVskOnIz5XHDwXPrgkkRGQYyYBk.mft (raw, json)
Hash identifier: cf3toSD3XeCJdGnfifedj6FQjsgjVUp0edUQkr9gKnY=
Subject key identifier: 80:C5:CE:C6:BB:70:2F:56:ED:B0:E0:8D:5D:1D:F8:E9:9A:57:06:EA
Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
Certificate issuer: /CN=595b243a7233e571c3c173eb8249111906326019
Certificate serial: 0199228CF2602E4422B918C3FD66DD1435EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
Manifest number: 15EC
Signing time: Sun 07 Sep 2025 05:01:26 +0000
Manifest this update: Sun 07 Sep 2025 05:01:26 +0000
Manifest next update: Mon 08 Sep 2025 05:01:26 +0000
Files and hashes: 1: 2580DhDO7oRxSgRoTYqJtzmDRZ8.roa (hash: 4RUkkYY+CZ3xO00bJ4wL39GFuDvJP7M2BRc09JQ7DH4=)
2: WVskOnIz5XHDwXPrgkkRGQYyYBk.crl (hash: NN78GVpvzB6E8nl7xRouZbg5iBwQ7Xyfa58n4hmZl5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f2:60:2e:44:22:b9:18:c3:fd:66:dd:14:35:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b243a7233e571c3c173eb8249111906326019
Validity
Not Before: Sep 7 05:01:26 2025 GMT
Not After : Sep 8 05:01:26 2025 GMT
Subject: CN=80c5cec6bb702f56edb0e08d5d1df8e99a5706ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:b8:c0:7c:b4:b8:d7:70:1b:0a:29:fe:88:
19:4d:1e:82:01:c7:da:a0:33:1d:9e:37:a4:84:4e:
f5:68:aa:14:0c:9e:ee:0b:61:7b:2d:51:88:e9:31:
ff:27:00:9a:9d:00:37:14:cf:3e:8a:1b:d9:8e:75:
b2:85:88:2d:25:de:20:d5:01:df:8f:5a:10:7d:0d:
93:99:dd:7a:fd:df:2e:4b:cc:a3:b2:6f:0c:da:77:
3f:ab:88:1b:48:26:58:9b:66:fb:a4:5d:92:f7:bf:
fc:cd:4f:ea:4b:6f:ad:5f:e3:f5:da:bd:21:c9:62:
73:0c:51:27:65:20:94:de:28:28:43:a6:c4:ef:8a:
6a:4d:9b:73:a0:1f:33:77:ed:73:1b:9f:52:fa:44:
61:18:70:02:96:30:a7:16:eb:ad:57:73:6d:94:e2:
85:6a:1d:ba:70:30:e3:c2:8d:c6:43:68:b6:cd:54:
6b:0d:db:ce:38:75:c3:6c:e7:e2:a1:49:bd:c3:13:
7a:fb:c4:ee:49:b6:68:92:05:1c:2d:34:dd:5f:f8:
1b:88:fd:59:64:11:2a:88:3b:0e:54:90:d8:5a:33:
dd:eb:57:ba:16:c0:42:8d:1b:b7:56:81:d0:63:25:
21:ce:09:5e:fe:0c:ce:ee:a1:d6:53:de:5b:85:e8:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C5:CE:C6:BB:70:2F:56:ED:B0:E0:8D:5D:1D:F8:E9:9A:57:06:EA
X509v3 Authority Key Identifier:
keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:65:d6:84:34:06:28:72:ab:1e:72:a5:2a:9e:11:62:95:62:
91:08:c8:6d:16:7d:7a:a7:12:fe:79:09:6d:c1:52:7d:fe:f4:
f3:ed:f0:5a:6d:b0:1c:3d:61:5f:e2:a0:c6:4b:38:04:55:7f:
a2:68:71:40:49:e1:fc:19:b2:88:3c:e2:f0:6b:43:18:6b:c4:
a8:ab:df:9a:ac:d4:7a:92:70:b2:fc:24:7a:9a:40:0c:4e:38:
e3:a1:96:02:65:80:7a:cf:98:ea:9c:a7:c3:de:57:39:ca:53:
90:63:7f:ac:6d:fd:9a:d2:f3:f9:14:97:bf:70:a8:4c:f2:53:
b0:2b:8a:66:68:5f:7b:25:33:16:da:ce:b0:46:61:e0:f4:8b:
81:26:1c:ac:bd:0a:0c:23:0d:4f:63:21:7b:38:b9:3d:46:2d:
ce:ad:5f:27:ed:bc:a5:d3:fd:77:7c:0a:4e:01:e8:5d:e0:eb:
69:8f:ea:6f:e9:4d:a7:84:c4:57:f2:3d:6b:1e:8c:b8:dc:30:
9e:a2:b3:ef:14:69:49:59:bd:5a:0d:38:64:be:4d:d4:be:ff:
03:32:7b:1a:5c:03:eb:e0:a2:a0:08:4c:68:cf:95:7d:4f:31:
cf:34:65:1a:97:57:60:62:50:38:73:e5:a0:25:07:96:97:83:
3a:dc:4d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:35:55 2025 by rpki-client