Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
File: WSDWcGSaSkqcsuZnchcHQa33xRo.mft (raw, json)
Hash identifier: DrDgShZCum4mK0YCKZ6H+spn6Nz+gy78U+sIgU7IxfQ=
Subject key identifier: 62:90:8C:15:19:EC:40:8A:3C:5A:EA:7F:38:ED:17:62:5F:A6:B0:DD
Authority key identifier: 59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
Certificate issuer: /CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Certificate serial: 019A228A7671C3E2A3D8D71D5219DF789B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
Manifest number: 0DD6
Signing time: Sun 26 Oct 2025 22:01:30 +0000
Manifest this update: Sun 26 Oct 2025 22:01:30 +0000
Manifest next update: Mon 27 Oct 2025 22:01:30 +0000
Files and hashes: 1: PrK_NQRYp13y-DfvxtWGnq4X0dE.roa (hash: ZI/puUUas0tVvfAZ0vd46exqVsLLctxI+01KKUrwu2o=)
2: WSDWcGSaSkqcsuZnchcHQa33xRo.crl (hash: OJs26lAwAXT5M4DWYwDoHeDtqxXNz1rrC8/bT5gI4Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:76:71:c3:e2:a3:d8:d7:1d:52:19:df:78:9b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Validity
Not Before: Oct 26 22:01:30 2025 GMT
Not After : Oct 27 22:01:30 2025 GMT
Subject: CN=62908c1519ec408a3c5aea7f38ed17625fa6b0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:6b:9c:fb:95:11:0b:dd:b8:e9:be:a0:45:
cf:cc:b7:69:fd:c0:2f:94:d1:fd:b2:75:be:7e:81:
5a:58:ae:b2:01:e8:51:04:07:29:8a:87:e3:4a:9c:
14:f4:2e:1a:7d:ed:21:55:98:71:11:d9:ce:4a:ef:
1a:4a:2d:a0:5c:76:44:cd:1b:5b:2b:0a:26:37:d9:
38:21:84:e5:a6:69:de:f4:03:c6:f2:df:b4:78:64:
cd:5a:7c:96:28:cb:49:f4:02:2f:23:47:c2:04:8f:
51:7c:89:01:02:ca:66:51:49:8b:19:00:79:1b:5a:
ce:6d:07:73:6d:23:13:bb:31:b6:c7:f1:73:d3:92:
c2:d1:38:b1:15:d8:02:24:9e:c2:a7:5c:02:79:a2:
fe:41:02:2b:5e:25:6b:aa:0e:e8:97:d4:17:fd:c0:
c8:16:ed:dc:e1:aa:3e:07:d1:05:2d:78:5c:e2:bb:
ae:7f:f2:35:cc:07:e2:fb:44:4b:ab:e3:5a:ad:0f:
9e:86:47:7b:2b:70:22:b0:92:65:f3:17:cc:ad:f4:
04:0c:88:b8:60:a5:32:00:84:1e:37:bc:d0:3b:89:
9a:fe:da:2b:0a:b4:c3:3e:e7:eb:f6:80:c8:79:45:
dd:45:0c:99:e2:0c:50:27:fb:88:f4:77:2d:b7:e3:
ca:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:90:8C:15:19:EC:40:8A:3C:5A:EA:7F:38:ED:17:62:5F:A6:B0:DD
X509v3 Authority Key Identifier:
keyid:59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:70:32:75:7d:26:64:bc:03:72:e1:c0:e5:f1:f9:ba:36:23:
1a:da:d7:58:82:e6:83:a3:20:fe:4d:99:59:12:d5:07:df:54:
7f:07:10:1b:dd:ce:b1:f2:80:6a:7c:39:62:80:e2:71:e4:d4:
31:15:19:4f:65:89:51:c4:ee:e3:4b:68:a4:39:1d:ff:a0:a4:
85:c2:9a:65:34:8c:a5:0c:43:0b:c2:87:82:46:d0:63:b8:ed:
ce:31:fc:bb:89:09:d2:d4:d6:b9:9f:ee:43:bf:cc:f0:0c:1e:
e3:49:5a:65:04:e1:40:55:38:ac:47:6e:8c:10:8c:f4:10:46:
10:c9:6e:be:b3:3f:ee:36:6d:3c:0d:61:b3:91:98:66:78:91:
c6:73:2d:7a:55:2b:59:c5:29:06:75:1c:4b:f2:8a:a2:48:79:
82:03:ba:d0:48:43:d6:20:4b:fb:9a:b5:b9:d1:0a:7b:21:d8:
c9:15:e4:a1:f5:07:91:72:d6:3d:66:b6:de:30:a1:38:e6:12:
5e:fc:c6:a1:c1:1c:2c:d3:70:30:3d:27:41:77:84:af:3a:10:
8b:d4:4c:3a:dc:51:28:7c:95:8d:b2:9d:74:a3:54:09:27:89:
db:0a:da:e8:76:1c:71:41:8b:37:5a:a0:9e:a0:de:9d:56:0b:
74:3d:cf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:12 2025 by rpki-client