Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
File: WWXGLxDCXnp-8YNWgzqk-bmELGo.mft (raw, json)
Hash identifier: vznn4t4mL+FMFP0tty9wNkBRkgzk+b1+YnzrjFtYtaM=
Subject key identifier: 2E:95:32:F5:34:EC:68:FC:59:33:8E:D9:10:A8:C0:CF:95:32:49:AC
Authority key identifier: 59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
Certificate issuer: /CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Certificate serial: 019849657F8C45957554CE3D408D7FC68B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
Manifest number: 0FC3
Signing time: Sun 27 Jul 2025 01:00:45 +0000
Manifest this update: Sun 27 Jul 2025 01:00:45 +0000
Manifest next update: Mon 28 Jul 2025 01:00:45 +0000
Files and hashes: 1: 7UOjyf-6bS8r8zJDoqOo76_7Llk.roa (hash: M/fakT1uObMb7UW5IWYfhtUN1rDOGMnXTsxFWM6dOkk=)
2: WWXGLxDCXnp-8YNWgzqk-bmELGo.crl (hash: aFzNUjO8zRe6waB/uOhUObvAeEJ/n1Fczh0cKVIEAtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:7f:8c:45:95:75:54:ce:3d:40:8d:7f:c6:8b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Validity
Not Before: Jul 27 01:00:45 2025 GMT
Not After : Jul 28 01:00:45 2025 GMT
Subject: CN=2e9532f534ec68fc59338ed910a8c0cf953249ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:03:7d:ce:47:0d:2d:30:90:83:76:7f:33:dd:
f9:64:2e:b6:6f:7f:84:5f:33:3f:17:76:fb:8d:d2:
67:ee:86:8f:82:c3:dd:57:78:89:09:6c:5f:1c:94:
c0:52:8c:3f:25:72:db:b2:53:a8:9d:26:39:7b:f3:
82:01:9d:c9:47:50:e5:84:d5:af:b0:a0:3e:f4:58:
f0:56:09:71:b3:75:01:03:0c:80:d6:53:1d:f8:10:
57:3a:30:f6:a1:2c:16:e9:77:16:cd:e2:57:2f:33:
a0:ea:24:46:e5:8e:2f:c2:e2:88:35:59:2e:f3:36:
18:94:04:5a:b6:e0:a6:b7:83:ba:83:30:c3:3e:7d:
81:d6:9e:a1:2d:f3:cd:a7:57:23:eb:82:ed:c0:9f:
77:91:6f:d1:41:8e:f2:13:a2:ea:63:3d:c8:84:eb:
ba:88:b7:61:2a:87:de:5a:74:e5:88:3e:f1:7f:a3:
73:4b:98:7e:e5:1d:8f:80:3f:ac:5b:80:db:a1:1e:
a6:76:ac:be:52:1f:71:cc:38:3e:d6:03:00:7e:e7:
f4:85:c2:45:b7:8d:b7:ff:8b:94:a1:01:70:ca:05:
a6:c4:20:3e:91:ff:80:d3:f7:40:f9:b7:40:e7:b3:
94:68:ce:ce:0f:af:07:25:9f:9f:52:1f:31:41:b8:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:95:32:F5:34:EC:68:FC:59:33:8E:D9:10:A8:C0:CF:95:32:49:AC
X509v3 Authority Key Identifier:
keyid:59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:af:aa:97:1a:97:1d:ac:5a:bf:4a:49:08:fb:9a:0d:d5:07:
f3:3a:d1:3a:08:02:37:37:00:89:bd:a4:d3:d6:27:f4:24:1f:
7c:fc:d3:23:33:43:db:e5:13:c2:75:1a:60:e0:81:3e:0b:b4:
ab:75:cd:a7:d6:c9:b4:95:b5:88:e2:f7:14:f5:b7:5f:58:ba:
c0:24:5a:8a:19:fb:5c:08:84:32:a3:b0:7e:2c:0a:0c:cc:84:
69:e1:96:dd:ff:10:69:e6:af:7e:cf:78:a7:43:d2:a8:ee:37:
d8:70:03:1f:3b:4d:92:f3:10:60:70:fe:33:44:49:4d:61:39:
da:54:a0:9c:a5:48:25:42:a7:a8:da:7a:a2:87:6e:2b:c7:f5:
13:91:84:b3:c4:b5:cd:cf:7d:33:89:17:2c:c3:41:52:59:b5:
c0:05:9b:f3:0f:7c:74:41:f1:34:ec:64:2f:d5:72:3d:ad:ce:
b3:65:51:24:18:85:ca:ab:1e:2b:fe:a7:71:f4:77:80:62:55:
31:83:22:8a:42:ad:76:98:6b:d1:7e:24:1e:e8:8d:bd:53:fd:
f0:3e:a8:09:1f:9f:52:6f:0e:86:a1:68:76:77:34:f9:ce:8a:
aa:02:fa:82:07:fa:68:a6:7d:db:8d:80:c0:46:0e:06:9f:d1:
c3:1e:a8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:16:22 2025 by rpki-client