Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft
File: WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft (raw, json)
Hash identifier: K4ZB8b5yP+whAVwlkojuZPXp1eDrv8iLMhB2uMgueag=
Subject key identifier: 53:CE:FA:8B:B8:6D:E0:C7:6E:DA:A1:DC:CE:0C:23:0E:80:8E:7D:23
Authority key identifier: 58:11:AB:97:AA:C9:84:B7:52:4E:FF:AD:5F:AC:68:EB:1E:19:CD:CE
Certificate issuer: /CN=5811ab97aac984b7524effad5fac68eb1e19cdce
Certificate serial: 0199239F9FF4AB8E96174BB3E0E3C1728289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft
Manifest number: 1453
Signing time: Sun 07 Sep 2025 10:01:27 +0000
Manifest this update: Sun 07 Sep 2025 10:01:27 +0000
Manifest next update: Mon 08 Sep 2025 10:01:27 +0000
Files and hashes: 1: WBGrl6rJhLdSTv-tX6xo6x4Zzc4.crl (hash: 05i0z+QDUyYQi5tUS5Odbegy6rmtUSrpeAPc6OYYfgw=)
2: pHVWgJuGe-4SCUP5TXdZ2HWcQDo.roa (hash: gAsEJftS+Uf8/0GhnyryHodqA1ekHyKsg54eRC3EHGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:9f:f4:ab:8e:96:17:4b:b3:e0:e3:c1:72:82:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5811ab97aac984b7524effad5fac68eb1e19cdce
Validity
Not Before: Sep 7 10:01:27 2025 GMT
Not After : Sep 8 10:01:27 2025 GMT
Subject: CN=53cefa8bb86de0c76edaa1dcce0c230e808e7d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:28:c0:93:ec:e9:db:bd:fb:a6:60:65:6f:
e3:3a:2f:6a:45:8b:4e:93:8a:7c:92:8c:be:36:76:
c3:99:ca:ba:55:b1:97:c0:08:1f:15:fb:6b:c0:0c:
d0:5f:47:51:4d:0a:6b:ce:bf:aa:65:3b:ea:3e:3c:
e5:00:85:20:de:ac:ec:92:10:41:34:6c:95:81:f1:
43:36:ce:4f:a6:7b:5d:da:bf:a3:b3:dd:d5:dc:73:
fa:3c:45:15:9d:89:6d:40:3a:04:45:1b:de:7e:2d:
98:d1:30:38:2f:01:8a:e7:26:9e:6f:a9:cb:cd:d8:
2c:cc:78:d8:27:fd:ef:59:75:38:05:c7:58:6a:f7:
dd:16:72:6c:e1:c6:10:6b:ce:aa:9f:f5:6d:94:63:
de:29:26:2f:0c:19:6e:ef:4d:40:60:3d:c9:55:3e:
d5:89:0c:f2:22:8c:e8:e7:23:fb:b6:f2:1c:4b:18:
09:01:fc:59:31:b5:58:d9:2c:90:00:96:ad:be:5d:
f7:64:31:d4:1e:20:76:81:f9:bf:11:49:d7:c2:6a:
ca:10:58:4c:9a:38:2b:47:a4:5c:53:2b:24:ba:79:
01:59:e9:b6:2b:44:51:cc:92:2e:d3:6d:ab:e5:ac:
bb:46:f7:03:54:fb:a6:d2:06:a3:71:28:23:ef:b2:
f3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CE:FA:8B:B8:6D:E0:C7:6E:DA:A1:DC:CE:0C:23:0E:80:8E:7D:23
X509v3 Authority Key Identifier:
keyid:58:11:AB:97:AA:C9:84:B7:52:4E:FF:AD:5F:AC:68:EB:1E:19:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b1:90:38:dc:97:ee:e3:77:e9:28:e1:3d:d5:3b:42:dc:56:
d3:4d:30:c6:89:4b:02:91:db:bd:7f:ce:b0:79:49:2f:bc:a5:
30:6b:74:71:30:3a:9f:30:56:23:00:fb:a0:74:e2:de:cb:49:
58:de:be:e0:e4:3a:e7:c4:ba:cc:ed:52:ef:c9:35:9e:c1:72:
db:99:fc:3b:ef:a1:c8:a9:46:83:48:8e:1a:2a:73:94:0d:e4:
31:a0:e4:4c:b9:2b:41:28:d1:3f:7d:90:d9:43:4d:0f:09:b6:
b7:ff:69:c5:e8:73:dc:99:8a:6c:a2:c6:7d:8c:e7:63:c3:9f:
28:52:81:12:53:d5:81:d8:62:b8:ab:2c:cd:44:0f:24:fa:69:
7e:7a:99:3a:ca:b5:9f:c8:62:a4:ce:79:d6:45:82:aa:d0:ee:
da:64:af:69:b1:39:04:0c:7a:b7:d7:92:7c:07:b2:08:3b:06:
ff:05:6b:61:11:2c:2e:39:99:c2:e0:de:5e:49:fc:a1:67:d6:
a7:ae:35:e3:7e:10:53:66:61:d2:14:01:36:b7:45:ca:d6:49:
d9:06:65:44:21:87:ab:0b:e1:f5:65:f4:4e:e9:a2:7b:96:3c:
9b:79:81:31:55:24:f9:7c:4e:59:24:f9:ff:9d:d7:04:91:40:
4d:e5:69:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:48 2025 by rpki-client