Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft
File: WXIYySXnbh6YCYdfftGvqX72950.mft (raw, json)
Hash identifier: t/aEFg6qTMiPsQNNEFs5nLUzKdPS4f1nOzlJ6j/aIBQ=
Subject key identifier: 51:40:59:C7:55:98:67:1A:0D:76:02:D8:96:32:11:18:63:74:40:1C
Authority key identifier: 59:72:18:C9:25:E7:6E:1E:98:09:87:5F:7E:D1:AF:A9:7E:F6:F7:9D
Certificate issuer: /CN=597218c925e76e1e9809875f7ed1afa97ef6f79d
Certificate serial: 0199228C8044F13128A80A6408615B99D152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft
Manifest number: A1
Signing time: Sun 07 Sep 2025 05:00:57 +0000
Manifest this update: Sun 07 Sep 2025 05:00:57 +0000
Manifest next update: Mon 08 Sep 2025 05:00:57 +0000
Files and hashes: 1: GYq7npqDI9nx5r20ZgfqjJ8jCBE.roa (hash: ohpsx6f/3RHy+wstuJFR07y68Swe9+64PHH/6mRDCMM=)
2: WXIYySXnbh6YCYdfftGvqX72950.crl (hash: +LIb8cCu2Gxs/HzcxehB/6J4ImAFzpU6FrywCQbCRq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:80:44:f1:31:28:a8:0a:64:08:61:5b:99:d1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597218c925e76e1e9809875f7ed1afa97ef6f79d
Validity
Not Before: Sep 7 05:00:57 2025 GMT
Not After : Sep 8 05:00:57 2025 GMT
Subject: CN=514059c75598671a0d7602d8963211186374401c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e6:96:10:97:bc:61:17:9a:71:d1:6e:83:86:
af:72:c3:85:e0:6c:00:89:10:f2:cc:12:f0:8e:e7:
d8:27:8b:90:17:cf:c4:a5:99:99:da:d7:e7:1a:09:
da:65:67:98:ac:66:f5:6a:fe:4a:dc:2d:3f:83:66:
68:90:36:1a:f6:f3:9a:16:e4:a7:fb:0f:d3:2f:ef:
6f:52:78:04:93:29:84:c3:4c:f3:44:d3:3f:df:b6:
eb:3e:71:33:19:ce:40:43:f7:6b:05:b4:13:dc:3a:
af:5c:e9:c4:8f:2b:15:05:92:9c:05:a3:84:9d:4d:
ba:19:bf:b4:6f:d9:50:19:8c:0c:a3:59:fb:20:84:
fc:1a:e9:5c:06:b3:01:90:d4:d6:55:76:e8:9d:1d:
31:5b:7d:06:9b:6f:99:d8:26:44:ee:18:34:90:77:
ed:14:df:14:a1:5a:48:9f:80:26:9f:c2:c9:4c:c6:
20:44:2f:18:7a:fd:5d:28:64:9d:05:a3:fd:41:1e:
ab:1c:4f:95:ac:91:1a:59:d7:52:42:be:24:6b:fa:
4d:b6:d6:43:7c:a1:78:02:fb:5f:da:e2:15:0e:df:
0f:bc:2b:fa:fa:68:67:be:6a:83:58:09:ef:61:1c:
3c:f6:96:f2:51:6a:49:3b:78:a6:d1:94:84:1a:73:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:40:59:C7:55:98:67:1A:0D:76:02:D8:96:32:11:18:63:74:40:1C
X509v3 Authority Key Identifier:
keyid:59:72:18:C9:25:E7:6E:1E:98:09:87:5F:7E:D1:AF:A9:7E:F6:F7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2f:09:2e:8c:c7:55:c7:37:1a:b9:84:b1:dc:9c:e6:1d:37:
d9:34:e8:af:77:b2:c6:cc:2e:e0:67:be:02:05:86:f7:56:3b:
d4:54:8e:7f:32:6a:43:40:99:91:c4:9e:9f:36:15:63:97:d8:
e1:0d:70:2e:07:63:67:8c:93:3e:80:76:c4:f6:c8:96:29:ad:
4c:d1:ea:ec:0c:9f:27:6f:b0:08:7f:5b:a9:c6:2f:fb:d6:04:
36:c8:46:22:29:16:63:a2:52:26:6b:f1:45:bd:d5:b3:fb:53:
79:b3:10:f0:04:6e:6a:68:5b:ed:90:fc:28:b8:1c:e8:ed:e4:
3a:d1:a6:0d:f1:1d:d9:e3:52:e2:54:75:8a:9e:c5:00:c6:9f:
6e:75:75:d8:07:2b:a2:9f:99:aa:b4:d8:a1:39:79:22:df:fa:
1a:be:f4:af:38:73:07:c7:f2:8d:65:28:d6:26:ff:f5:73:e7:
94:3e:cf:0c:79:e9:e8:4a:02:e5:1a:47:38:5c:ec:bd:d2:02:
4d:c8:a6:8f:1a:a1:b5:02:81:f7:4d:7b:0c:78:18:09:ba:8a:
76:0a:e5:ad:47:03:3a:90:39:1c:61:f5:45:ea:c6:08:5c:a1:
6c:5d:6e:fa:07:ee:b9:e4:73:da:2a:cc:aa:a8:af:cc:3f:83:
e0:fa:e1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:19 2025 by rpki-client