Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
File: Wx2S_lASvWW-DDKw7jkXGciClCw.mft (raw, json)
Hash identifier: KOUyLowB/WvaaIsWuDgSA2MZ7XZLNFW/0olbepjzack=
Subject key identifier: 51:53:DB:1C:0F:06:D4:F5:2D:13:6B:AA:9F:33:3F:82:6C:28:F6:D3
Authority key identifier: 5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
Certificate issuer: /CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Certificate serial: 019923A06522175D37944BB0131C31AC257A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
Manifest number: 0AE8
Signing time: Sun 07 Sep 2025 10:02:18 +0000
Manifest this update: Sun 07 Sep 2025 10:02:18 +0000
Manifest next update: Mon 08 Sep 2025 10:02:18 +0000
Files and hashes: 1: Wx2S_lASvWW-DDKw7jkXGciClCw.crl (hash: 9wntdglt/9ss12Eyx9rO4xX6/zuwFKV5GuYAO42/eqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:65:22:17:5d:37:94:4b:b0:13:1c:31:ac:25:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Validity
Not Before: Sep 7 10:02:18 2025 GMT
Not After : Sep 8 10:02:18 2025 GMT
Subject: CN=5153db1c0f06d4f52d136baa9f333f826c28f6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:18:0a:48:9a:0b:8b:e9:b5:25:2f:22:1d:13:
b3:d2:47:c6:50:8c:8f:fb:45:e0:15:9f:fe:ce:b0:
29:fe:da:39:14:70:c2:98:1b:b5:ac:c4:3c:62:9e:
ad:a3:cf:cb:91:e5:59:11:ae:4c:97:5c:1c:6c:17:
e5:5c:20:dd:c8:66:f3:7f:b7:bb:9b:f9:20:4b:e7:
d3:42:5b:09:b1:63:eb:83:0d:d5:d2:b3:f2:69:09:
e7:24:a6:c6:c7:b2:71:0a:ac:a1:b1:d0:04:8b:1c:
00:42:cb:bd:8e:05:b7:46:55:53:7c:cb:6e:8c:6e:
d1:3e:ea:8a:21:dc:c0:33:15:fd:38:47:52:e8:91:
aa:2c:e2:e4:7d:1d:47:cf:66:66:09:57:ae:9b:b4:
34:f0:87:90:fa:3b:7f:67:fb:ca:51:21:bf:87:e7:
78:71:0e:92:d9:32:3a:26:00:ca:a5:26:ad:15:65:
e5:4d:d6:c1:73:cd:f1:47:ef:f4:96:1f:3a:ad:9b:
0c:55:b3:39:9b:ce:2d:d1:63:92:23:09:40:3e:87:
ad:78:ad:a9:28:98:01:2d:c4:53:70:95:13:85:d6:
64:26:0d:6a:00:16:fe:2e:4e:1b:e8:de:14:d6:73:
0a:31:f6:79:99:3f:c2:22:67:72:79:bf:19:44:cc:
48:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:53:DB:1C:0F:06:D4:F5:2D:13:6B:AA:9F:33:3F:82:6C:28:F6:D3
X509v3 Authority Key Identifier:
keyid:5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:aa:d1:2f:51:92:f4:db:10:b5:7b:91:ec:80:e6:3e:06:93:
ca:47:3f:3f:db:c4:45:70:9e:54:0d:c0:91:d0:86:d7:47:14:
11:68:6a:74:81:be:98:59:e3:be:63:05:ba:bb:f9:6f:c3:70:
86:c8:a5:62:fe:ba:a1:ac:32:44:2d:9a:f3:36:26:56:04:ca:
30:bd:29:0a:dc:9e:a2:03:16:e5:fa:dd:cd:74:a1:71:79:9c:
91:11:0e:86:b2:b7:98:a4:fe:69:76:e2:3c:cd:d0:64:9d:6e:
b7:f6:83:eb:6a:b7:ef:73:36:f7:65:a1:1d:ec:cb:d4:1b:57:
8a:6a:8e:37:e3:e3:01:4d:52:df:37:8e:68:d8:7d:24:1d:49:
b7:96:bc:bd:ab:10:b4:fa:e6:d1:83:6f:6a:f0:27:4d:cb:4d:
4a:37:79:ff:85:ea:66:39:32:0e:29:6d:b9:4c:3e:b3:fb:d2:
bd:91:05:f5:0c:39:c3:91:5d:73:96:3b:d5:b1:18:c9:57:da:
f4:05:7c:7b:d0:d0:57:e0:8b:bd:d4:51:dc:de:57:bc:06:1c:
6f:47:51:18:4f:3f:83:94:f1:a3:8d:6e:4a:b9:7f:34:3b:f1:
fd:a9:d3:dc:48:34:70:24:74:35:d5:95:71:b3:20:61:04:f4:
b0:53:b6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:36 2025 by rpki-client