Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
File: WSDWcGSaSkqcsuZnchcHQa33xRo.mft (raw, json)
Hash identifier: FHBjRdb1jHZpZthtfDnjJ88sk82QmK218glBjM9tceA=
Subject key identifier: 23:91:BC:B7:4D:8A:E7:7F:3F:E0:62:F2:DD:3C:02:65:6C:07:4C:D3
Authority key identifier: 59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
Certificate issuer: /CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Certificate serial: 01993500C80713B43B9C26DFF6FFD3FDE83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
Manifest number: 0D5B
Signing time: Wed 10 Sep 2025 19:01:07 +0000
Manifest this update: Wed 10 Sep 2025 19:01:07 +0000
Manifest next update: Thu 11 Sep 2025 19:01:07 +0000
Files and hashes: 1: PrK_NQRYp13y-DfvxtWGnq4X0dE.roa (hash: ZI/puUUas0tVvfAZ0vd46exqVsLLctxI+01KKUrwu2o=)
2: WSDWcGSaSkqcsuZnchcHQa33xRo.crl (hash: OvXXDFVT39lBsSKNzw2E1O+p1Q0aloHFVzAhkVyUA/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:c8:07:13:b4:3b:9c:26:df:f6:ff:d3:fd:e8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Validity
Not Before: Sep 10 19:01:07 2025 GMT
Not After : Sep 11 19:01:07 2025 GMT
Subject: CN=2391bcb74d8ae77f3fe062f2dd3c02656c074cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:84:2c:06:9e:ba:21:bd:60:b2:cc:b6:b4:
63:ec:79:31:9f:f4:2c:a9:86:42:88:7d:ee:60:83:
7e:76:6e:74:c3:06:ed:8c:83:bd:7f:a5:f9:59:9f:
df:08:6e:8e:b0:68:60:b1:77:eb:d0:8c:ee:3c:53:
8b:d4:3c:68:b7:32:46:35:4a:57:d0:99:9d:8f:69:
d7:c8:19:b7:27:7a:a3:c0:65:79:7d:d5:d3:ea:fb:
6d:74:a3:b2:b9:b4:9f:01:6f:bd:09:2b:98:b7:f1:
15:b1:c9:13:09:cc:80:dc:66:c3:ad:7f:8c:ef:e0:
bc:52:e1:a5:21:b8:e6:44:8c:4c:da:44:53:df:bb:
29:72:99:df:fe:f3:b3:21:ff:06:34:27:ab:3b:f0:
3d:ed:c0:a4:4c:78:ab:54:9c:11:36:bc:a7:ba:9c:
a1:ec:c4:e4:41:ce:0c:99:0d:c3:41:ae:f8:13:5a:
51:66:e0:4d:01:9b:3c:6e:44:e9:24:d5:b8:a1:ba:
f0:d8:ac:9b:9c:44:bf:d7:d2:3b:d8:16:d5:62:80:
31:a3:95:4b:09:b5:5e:cd:bb:21:9b:4c:b8:21:6e:
0c:37:b6:d1:a3:70:f4:ae:64:86:53:85:4b:f2:20:
13:b1:c8:5d:83:4f:5a:83:c0:55:26:9e:51:cf:89:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:91:BC:B7:4D:8A:E7:7F:3F:E0:62:F2:DD:3C:02:65:6C:07:4C:D3
X509v3 Authority Key Identifier:
keyid:59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a9:ab:8d:08:37:81:5b:60:19:db:c9:bb:6a:37:0d:d1:5d:
44:c5:93:86:54:b3:7c:ce:b1:e5:89:b4:04:64:29:0d:ca:b1:
46:4e:b6:3f:30:52:36:90:36:0a:79:5c:4a:3b:5e:60:6a:23:
07:61:57:9b:25:70:4f:03:14:46:91:c6:b9:62:3a:79:4e:08:
d4:db:6c:a3:87:f7:77:3e:c3:55:be:c8:24:a2:71:8b:7e:77:
f9:f4:54:60:e0:23:e0:b3:a9:0b:fd:42:dd:e6:ca:f2:71:9c:
c8:4c:31:da:fa:8b:79:df:fa:30:b2:bf:72:17:88:c2:bc:ef:
89:20:ae:59:0f:bd:ce:77:dd:8e:71:a5:1c:eb:f9:10:b0:90:
42:f6:f4:cb:0b:54:ef:f6:8f:ec:c8:2f:25:f4:fa:e3:eb:26:
58:dd:51:10:41:47:e3:1f:b6:48:a6:d4:9b:ce:ea:ef:e3:ed:
f8:bb:fd:ee:47:69:84:e2:8a:88:2b:38:61:50:6a:68:0c:40:
aa:3f:52:db:8b:98:9a:57:ec:0d:f9:94:dd:1c:a0:01:d2:3f:
4f:e1:bd:e8:1b:54:00:69:d5:60:cc:da:4f:18:de:40:1c:27:
68:21:a0:d7:ca:da:5a:a9:45:74:0c:78:c4:e4:5b:4e:af:73:
aa:43:92:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:27:09 2025 by rpki-client