Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
File: WyxHDbJENILhlSOVOnjB7woWlHk.mft (raw, json)
Hash identifier: z2mTha/m+frCzIDhC9UsvCessi59FDDIWp/1W0Rbit8=
Subject key identifier: B9:6B:7F:AB:5F:98:74:21:86:35:18:CE:D8:9E:FF:D3:FD:FF:75:FF
Authority key identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
Certificate issuer: /CN=5b2c470db2443482e19523953a78c1ef0a169479
Certificate serial: 019921B0E8F65FAB7E9756111938A578AD48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
Manifest number: 0E10
Signing time: Sun 07 Sep 2025 01:01:06 +0000
Manifest this update: Sun 07 Sep 2025 01:01:06 +0000
Manifest next update: Mon 08 Sep 2025 01:01:06 +0000
Files and hashes: 1: 0AdevnLlsxFU0_MXijL2HLDuliU.roa (hash: Oq6mu5Hbl5chx/r3WVWbX/YQvEZQoJ2rWVh4OUcVSO0=)
2: WyxHDbJENILhlSOVOnjB7woWlHk.crl (hash: hca8FeT0zpLiMcrfz0Qf7YD3Q70PfAPYb2ClHrIPOVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:e8:f6:5f:ab:7e:97:56:11:19:38:a5:78:ad:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2c470db2443482e19523953a78c1ef0a169479
Validity
Not Before: Sep 7 01:01:06 2025 GMT
Not After : Sep 8 01:01:06 2025 GMT
Subject: CN=b96b7fab5f987421863518ced89effd3fdff75ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:ae:ec:05:d7:4a:19:ae:65:7f:81:0a:0f:
e9:f4:09:22:7f:71:21:82:b5:57:db:6a:f1:28:8f:
4d:f5:46:9f:db:e7:25:9c:bb:00:39:68:98:ee:3f:
1c:b0:12:67:fc:ca:11:12:ce:e2:a3:fd:db:ed:0a:
d1:46:6c:1a:c7:72:52:21:f7:7a:df:c1:e7:3f:94:
32:2f:dd:ad:d1:1e:47:06:a0:99:8a:92:cb:69:a2:
2f:2d:26:1c:de:0a:cd:62:1a:c2:e5:0a:6a:e8:d6:
18:3e:dc:27:b7:76:52:30:18:17:0c:7e:37:76:c0:
9d:59:a4:14:76:d7:00:f0:61:b6:53:1e:86:fd:da:
74:3a:9e:f6:7b:a3:67:e7:39:a2:a6:91:54:96:5b:
ec:87:bd:05:f0:68:af:31:6a:56:69:8d:20:db:6b:
4e:b8:37:93:81:ed:6f:44:37:4e:07:b1:2b:1d:28:
d0:f4:40:fd:6a:ea:5d:ba:b8:17:80:8a:ec:c9:4a:
bb:1b:63:1b:10:1b:3c:34:0b:f8:f3:03:e1:3c:b9:
ad:a4:22:b0:db:d3:53:c9:e4:70:19:ad:76:89:49:
79:c0:cf:2d:ab:bf:c6:ee:08:2b:bc:b0:63:19:5c:
60:8d:4a:f0:e3:82:ad:d0:c1:60:d1:18:f1:0e:b1:
36:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6B:7F:AB:5F:98:74:21:86:35:18:CE:D8:9E:FF:D3:FD:FF:75:FF
X509v3 Authority Key Identifier:
keyid:5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:13:93:f6:8b:79:85:31:e9:12:1b:bd:4e:23:fc:57:ee:d1:
9c:3d:fd:8f:b6:ba:6f:93:b5:e7:f2:15:72:d0:62:15:0f:82:
d7:cf:2e:52:ed:20:fe:55:c9:8d:72:36:30:30:33:0a:23:2c:
8e:62:3a:3f:5a:c9:7a:98:c2:7e:05:7e:ab:3a:28:f5:e7:b0:
e9:c9:e2:35:0d:0e:80:95:ef:dd:4e:94:36:08:45:6e:cc:75:
a9:f9:fc:8d:4c:53:2c:c9:cb:cf:12:10:b9:aa:65:48:21:08:
35:7b:57:fb:7f:a5:f3:1a:4d:17:58:35:e7:de:96:45:a8:b4:
fa:b1:36:fd:4c:72:03:1d:20:4d:06:94:42:3d:21:3b:0d:96:
41:a2:10:76:16:41:3b:68:08:3b:be:2d:12:4c:ca:48:ac:47:
66:d0:ad:8e:ad:69:d2:8c:7a:42:36:3d:d4:e6:7d:dc:90:4d:
3e:e9:8a:32:b3:33:f8:45:44:8d:ad:c9:33:9d:b9:c2:df:2a:
c2:ca:3a:18:70:69:92:80:34:86:24:be:8c:3b:64:bc:93:90:
1f:a8:7a:b0:cc:63:bf:9e:07:e9:8b:54:18:60:1c:4e:c0:b7:
f4:30:fe:ec:3b:10:8b:b2:60:a1:af:c4:11:13:23:37:a3:4f:
0b:af:f5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:11 2025 by rpki-client