Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: Xwp7QEeWJNIYM8u1jZXCaDrZpno6Ga1YxbkvEfj57uY=
Subject key identifier: 29:80:D5:28:51:2F:68:51:3C:DD:44:FF:80:51:97:DE:62:BE:2F:9B
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 019A0C0169180C4C1E0BA0F743D12D5C8A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 14BB
Signing time: Wed 22 Oct 2025 13:00:10 +0000
Manifest this update: Wed 22 Oct 2025 13:00:10 +0000
Manifest next update: Thu 23 Oct 2025 13:00:10 +0000
Files and hashes: 1: 36vP2RZocex6kBCMTbzrkEU173I.roa (hash: aEiOZj8YmAwZwpDXXxUuOkmJFeM2AJc91e5CxmnRxTk=)
2: Orz1byvi4W2gEs0XQxLqSRV1Cd0.roa (hash: uqVz+HdI8skKqSoIO5b4CKUGzxdeiewseboy6iVD14g=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: kew565NiufEA3lu/YKbSFOetOEtmM4RJQESt26D1yEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:01:69:18:0c:4c:1e:0b:a0:f7:43:d1:2d:5c:8a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Oct 22 13:00:10 2025 GMT
Not After : Oct 23 13:00:10 2025 GMT
Subject: CN=2980d528512f68513cdd44ff805197de62be2f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:d2:ad:8e:1a:28:c2:ec:f2:7a:99:42:88:
a7:80:0c:fc:77:c5:41:1f:cf:62:d9:44:2b:ab:c5:
0e:38:09:80:28:d3:e5:83:fc:32:be:7c:88:35:ba:
35:b9:b0:d5:32:ed:23:09:de:d3:1f:cd:2c:38:5b:
1d:d1:a9:3c:a6:af:dc:f9:68:a2:c0:be:3c:45:c9:
de:cb:f1:f6:85:c3:5f:a9:05:fc:78:1d:47:43:5f:
0a:97:95:f5:a1:f8:b2:9c:c4:e0:dd:b0:20:e3:c3:
7f:81:7d:a4:84:e6:fc:8e:9c:24:a4:99:88:d3:8a:
93:59:a3:39:a9:3f:9e:b1:ad:0d:ff:33:ab:a0:ba:
57:52:a4:08:db:c5:90:59:98:7f:00:bc:82:e7:5c:
c3:19:c8:20:1e:ae:3b:fd:58:91:05:70:6e:c2:b4:
2b:16:17:a0:24:3e:80:b7:97:02:d3:1e:6f:42:8f:
19:21:cb:2c:c3:9a:a8:ab:5f:d9:18:0c:b9:08:0d:
cf:3a:fe:42:d3:3b:a0:4a:03:18:60:b8:a6:c6:5f:
8f:ed:75:c5:67:51:30:96:6d:80:9d:3c:5c:13:6f:
23:c0:9a:2b:c0:a6:31:b2:0f:cf:72:98:41:8a:34:
53:29:34:73:bf:e9:a1:11:bd:4c:85:bb:32:82:e5:
24:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:80:D5:28:51:2F:68:51:3C:DD:44:FF:80:51:97:DE:62:BE:2F:9B
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c3:4c:b9:4e:28:69:6e:2a:78:21:50:97:b7:fa:04:b7:e6:
5a:d5:31:b1:9d:44:01:7b:ee:9d:1a:cb:ea:e6:9b:a2:75:bf:
87:c1:ac:61:a1:5d:f8:7c:42:3e:b5:ea:6a:a5:b5:25:23:33:
fb:7d:97:67:ad:7a:66:3c:2e:92:d5:56:ae:e4:71:e6:4d:72:
4b:b3:58:e1:03:45:93:30:18:1e:b0:5b:a4:dd:77:02:0e:4d:
42:d5:35:ee:8d:f7:c2:de:1e:3f:e7:05:d6:c8:05:a7:ca:6e:
a7:25:2e:89:a0:df:47:a7:bc:a6:15:3a:f5:24:2a:87:3d:de:
49:c7:92:b9:f8:51:5b:85:be:80:48:06:09:0a:7e:a4:93:0d:
3a:9a:0c:23:0d:7d:ec:c7:40:f5:89:d5:ec:24:fc:60:a7:f3:
eb:42:18:86:a4:61:8c:5b:62:48:9f:06:78:f5:75:69:cf:ae:
41:42:9f:a7:c0:fb:0f:88:5e:9c:fd:5f:67:7f:ac:b8:e7:91:
fb:96:fa:89:80:6d:6d:b7:9f:b3:eb:7c:24:e4:b0:cb:ec:69:
b1:41:ca:da:6e:85:97:c3:27:e0:14:1c:05:bf:34:50:1d:b4:
d6:0b:0a:97:8c:c6:c8:5d:8a:91:eb:8d:ae:ef:5a:87:ff:09:
43:b3:bd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:10:48 2025 by rpki-client