Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
File: wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json)
Hash identifier: HdJqgf5nnvcH1w/CcMAZVxSv/3M7Q/OYNyrkjNUUKY8=
Subject key identifier: B9:7E:BD:85:3D:B9:84:E6:79:27:0A:30:F9:66:AA:FD:FA:3E:66:95
Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
Certificate issuer: /CN=c20e65caddbecd48d2f87787993113842bdfce5d
Certificate serial: 019847E54378FD6D11244BFA021A90653337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
Manifest number: 1088
Signing time: Sat 26 Jul 2025 18:01:04 +0000
Manifest this update: Sat 26 Jul 2025 18:01:04 +0000
Manifest next update: Sun 27 Jul 2025 18:01:04 +0000
Files and hashes: 1: 7kdmagU4QbQazPFAKJN_jh3ESjI.roa (hash: UKie7fx67vGuUXCr+OJM9sf2md8+FYbcDpZ0gOMQ3f0=)
2: oMWup55nUaojGXh2IYtrkxVaIxk.roa (hash: IgvfZQFj2syunyqqYTcXoGNSKYWlXxrN3iDEjFeptJ0=)
3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: uw1z122CjjzuOI46exH7u9V9d8Hddy9cuordNrfUFWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:43:78:fd:6d:11:24:4b:fa:02:1a:90:65:33:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d
Validity
Not Before: Jul 26 18:01:04 2025 GMT
Not After : Jul 27 18:01:04 2025 GMT
Subject: CN=b97ebd853db984e679270a30f966aafdfa3e6695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:8b:c1:7e:1a:c0:ae:46:6e:dd:13:68:ed:
29:67:2b:99:4e:8d:96:14:40:c6:fb:22:2a:73:01:
f2:57:dd:2f:88:a3:7a:e6:d0:b1:79:19:0c:76:98:
cd:35:4b:c3:fb:3f:a2:18:63:a3:3a:a8:17:e2:ea:
6d:21:67:9b:ad:3d:4e:df:57:0d:68:38:73:10:70:
4b:a6:13:e8:c7:e1:de:82:6e:86:d4:6c:6e:6b:6d:
69:f4:06:cd:10:14:16:05:94:33:ea:67:c3:79:f7:
7d:90:f6:8f:01:a5:aa:31:11:06:7c:2d:07:8a:7b:
2a:8f:b6:78:39:a8:6d:b7:21:b1:e5:3f:ea:51:6c:
21:b2:96:51:ca:a4:f7:23:b8:63:70:bf:50:6c:fc:
8f:e4:48:fd:43:5e:6c:39:20:d9:bd:fe:ae:c4:e4:
4b:4f:5c:dd:5d:fa:c5:ad:b3:48:bf:62:27:0f:49:
f5:2c:12:e5:d9:23:04:93:6f:8d:11:10:c5:df:39:
0b:28:02:97:52:36:5d:e9:ed:a0:aa:f5:64:ae:9e:
7a:0a:a3:b2:35:0c:d8:fb:9e:4d:3b:6c:34:9f:00:
64:0f:8a:b4:25:b1:e7:16:e2:46:0b:dc:58:30:2d:
72:47:0e:23:83:27:21:45:d1:5a:2e:97:96:57:e0:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7E:BD:85:3D:B9:84:E6:79:27:0A:30:F9:66:AA:FD:FA:3E:66:95
X509v3 Authority Key Identifier:
keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:31:db:47:ca:23:a9:9a:27:77:81:1a:d0:0a:69:d7:6d:c0:
02:81:49:52:1b:06:de:4a:76:5a:7b:70:f4:c0:02:14:94:4f:
78:23:3f:b0:e0:23:6c:4a:1a:30:8e:bb:4d:e3:51:10:34:fd:
03:d7:1e:81:ec:01:b3:52:67:52:19:ed:d6:dc:11:65:46:b0:
44:e5:e7:98:75:ec:c1:c8:4c:7a:9d:dd:1c:8b:83:03:44:ba:
6b:5a:c7:66:d8:16:19:30:8f:e5:0f:2f:7d:8b:22:c9:6e:b0:
52:be:02:06:d9:2a:d1:ee:ff:ed:5a:a8:32:7e:a2:4a:e9:59:
dc:c9:8a:c1:85:01:a0:11:82:b6:aa:f7:05:38:0c:e7:71:c0:
80:84:0f:5b:4d:7d:12:98:94:6c:23:f8:66:f8:74:92:f0:c5:
3f:85:e6:ec:48:26:c3:2e:92:7d:62:5a:dc:c5:35:de:1a:12:
62:78:77:7a:bd:6d:69:c3:11:5f:1d:37:30:b7:ad:df:5c:d8:
25:bf:85:b7:d3:80:a1:db:7c:f5:42:c4:7c:56:6e:c7:2f:c7:
c5:03:c8:e0:1e:6f:da:d8:cb:84:0f:34:da:86:bf:dd:55:e6:
11:28:3c:e4:dc:34:c8:b0:b2:73:1f:d6:db:fe:4c:8e:a9:4d:
b9:89:5a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:55:56 2025 by rpki-client