Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
File: WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft (raw, json)
Hash identifier: CKQbZgXmiP7QuN2pORlFS+l2i2qeVEfJ44x0KSJOGh4=
Subject key identifier: 23:DE:CA:27:44:AA:7D:98:1F:7E:24:8E:62:E3:C6:C6:3C:5A:6A:90
Authority key identifier: 59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
Certificate issuer: /CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Certificate serial: 019A270AE77A9DE8BCC15CE62130BBE534EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
Manifest number: 061A
Signing time: Mon 27 Oct 2025 19:00:17 +0000
Manifest this update: Mon 27 Oct 2025 19:00:17 +0000
Manifest next update: Tue 28 Oct 2025 19:00:17 +0000
Files and hashes: 1: 0se6oPOZ9FSI_6qzearxcjxlYSY.roa (hash: g6cZT2b3ImLhGYVmMKzVx9c34caYKC+s1u35aPIl42k=)
2: WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl (hash: lzqgn2qCX1mLbhq75pCnOqUQoORdgLll4jIgo+ni8uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:0a:e7:7a:9d:e8:bc:c1:5c:e6:21:30:bb:e5:34:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Validity
Not Before: Oct 27 19:00:17 2025 GMT
Not After : Oct 28 19:00:17 2025 GMT
Subject: CN=23deca2744aa7d981f7e248e62e3c6c63c5a6a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c6:d0:46:04:20:27:66:28:1d:09:ff:2f:f8:
fa:1b:43:19:d0:35:4c:da:4a:76:f5:17:19:ce:fe:
ec:a8:04:0b:2f:84:d6:40:82:f7:38:a8:94:58:1b:
6f:a9:c0:cf:74:7a:be:8b:d5:66:6d:87:14:12:12:
67:f8:f4:75:0e:f7:dc:49:4d:2f:d7:c3:98:44:c0:
83:e9:11:f7:43:e8:e2:43:3b:72:4c:94:17:f9:b8:
21:11:4d:74:da:08:d4:da:53:14:d3:8f:b8:a8:7d:
4a:b9:91:d4:4f:65:db:32:3a:ab:b1:43:bc:9b:80:
9f:5a:00:ac:7a:ae:86:0c:03:f8:7f:6a:05:4d:60:
b9:91:a8:68:a6:cb:6f:74:d6:32:5c:bb:af:b9:47:
11:06:bd:d3:05:33:e5:29:16:de:af:7b:d7:46:5d:
42:d2:3b:c2:39:ea:7a:6c:2e:72:35:6c:eb:41:36:
df:1f:d9:ad:15:dc:95:ba:d9:03:3f:ab:a6:ef:dc:
02:6d:16:87:cc:ca:48:38:55:57:c3:f4:79:25:78:
64:26:b2:60:23:aa:2d:bd:73:1b:2d:81:63:0d:04:
6b:f2:ae:a3:ad:6e:fb:05:76:a7:ef:ba:7a:25:f8:
0f:6f:ed:d4:64:3a:79:73:b6:fd:2b:98:47:64:b8:
e6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DE:CA:27:44:AA:7D:98:1F:7E:24:8E:62:E3:C6:C6:3C:5A:6A:90
X509v3 Authority Key Identifier:
keyid:59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:92:ac:13:eb:e5:aa:d0:76:5c:57:41:27:ad:5a:2f:cd:ca:
c7:f4:ed:42:d5:74:82:80:b0:26:ef:cf:4a:ec:53:df:e2:ee:
cf:6b:e8:21:b4:70:ef:d5:e9:66:7b:a8:f8:f1:b3:6d:29:a0:
91:c5:10:81:b6:c8:7f:21:26:06:a6:1b:70:f0:ee:94:e8:b1:
21:ba:98:fa:a3:cb:e5:9e:50:d4:44:fe:d0:80:fc:71:4c:b2:
14:6c:9e:04:66:ad:74:96:c0:cb:b1:cf:22:2d:b9:82:25:7c:
9b:a7:bd:52:a3:a4:74:ff:ae:e3:1c:1e:e8:c4:49:2f:9d:4b:
17:c2:9f:34:14:f6:b0:b9:f2:98:34:a9:29:69:c3:af:02:c6:
df:46:68:d3:4f:c9:77:94:32:a8:89:98:9f:30:08:0b:32:71:
aa:74:33:04:bc:32:75:df:99:1a:3a:6f:16:4f:a0:32:37:7d:
51:a0:04:4f:16:5b:df:1d:c2:d5:32:d6:14:a0:e7:7b:f3:19:
1f:e1:ec:71:d4:46:15:08:a5:70:63:7b:8c:ba:40:80:c2:20:
9c:40:b3:b2:16:f0:59:78:70:0e:67:4f:6f:07:4b:1b:ad:b4:
c8:20:2a:14:37:a6:dc:02:3e:0f:23:eb:b3:e4:25:c8:22:3f:
4f:e8:17:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 01:26:32 2025 by rpki-client