Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
File: WUGkBv3_7iWThJa-WsmlPhu5xlk.mft (raw, json)
Hash identifier: uagojBy8O7i3gq1xJS+NwjfBmkuSlN4kxKSxb3rqgKc=
Subject key identifier: 53:39:F3:07:0E:FA:85:48:62:2F:D8:31:E7:95:0D:AE:86:CB:70:1E
Authority key identifier: 59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59
Certificate issuer: /CN=5941a406fdffee25938496be5ac9a53e1bb9c659
Certificate serial: 019A71B926E8015E36E4A17E29F7E2F32B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
Manifest number: 03CC
Signing time: Tue 11 Nov 2025 07:02:30 +0000
Manifest this update: Tue 11 Nov 2025 07:02:30 +0000
Manifest next update: Wed 12 Nov 2025 07:02:30 +0000
Files and hashes: 1: EEGZcBqsJai0qQqLe2F9AaWLFpk.roa (hash: FRcwu/tuv02SNpOdxXx1YsnWA5ggNN2a8+sJiuIasIw=)
2: WUGkBv3_7iWThJa-WsmlPhu5xlk.crl (hash: XtFdprVF8QGvLbLScFAZkdBCuNwLyE3FreHOIf6ZPPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:26:e8:01:5e:36:e4:a1:7e:29:f7:e2:f3:2b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5941a406fdffee25938496be5ac9a53e1bb9c659
Validity
Not Before: Nov 11 07:02:30 2025 GMT
Not After : Nov 12 07:02:30 2025 GMT
Subject: CN=5339f3070efa8548622fd831e7950dae86cb701e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cd:67:4f:67:42:be:43:a4:b5:98:7a:24:57:
de:72:41:d4:22:6a:a3:2d:3c:64:30:fb:b0:9f:e4:
c5:90:08:31:79:30:5b:c0:4e:a2:f3:ec:97:10:ce:
29:72:00:83:1d:d8:70:de:c4:1f:e2:eb:d9:d8:77:
10:9c:bb:8b:31:56:37:82:be:55:e3:9f:87:b9:c3:
11:e2:0c:a1:86:9c:16:a4:83:38:09:d8:62:56:5e:
7a:6a:64:27:f9:09:cc:0a:a4:db:2a:94:3d:5a:14:
84:e1:ff:ee:6c:7a:71:6f:ac:3d:ce:d1:4a:6a:be:
ae:b4:37:cd:3a:6b:ca:62:f3:f8:d3:16:e6:8d:25:
99:56:4d:b5:94:99:2e:8f:f7:9b:51:89:c4:c8:71:
9c:7b:c9:22:7f:77:62:1f:2c:89:e3:0e:4d:e4:ac:
ce:47:90:a6:2a:09:35:8b:46:65:ad:f9:99:78:52:
e7:81:88:4b:90:09:fd:75:ea:66:b6:16:b5:37:06:
d3:2c:10:5a:77:53:44:b7:8f:21:01:b0:34:5e:29:
0e:f5:b5:0b:7b:c7:ca:86:83:bc:70:91:87:d6:1c:
58:9b:11:8a:49:44:34:93:f8:32:b1:98:b4:b3:56:
8e:fa:a0:34:9d:4a:95:ab:ec:84:1d:6b:54:f3:d5:
f0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:39:F3:07:0E:FA:85:48:62:2F:D8:31:E7:95:0D:AE:86:CB:70:1E
X509v3 Authority Key Identifier:
keyid:59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bb:29:ff:49:e6:1b:a4:ec:6f:50:bc:74:e4:34:ba:e0:b6:
a2:db:94:48:57:2d:26:fd:b0:4b:30:cc:14:a8:bd:e6:b4:5d:
16:19:23:81:dd:5d:9f:5e:1c:af:f3:e5:26:c6:6c:2d:3f:20:
97:74:55:fe:d3:5d:fd:94:82:12:24:5f:41:73:d7:35:8e:3e:
1d:13:82:93:2c:81:66:0e:78:7c:79:4e:9c:b7:a4:18:57:62:
96:25:cc:29:64:39:04:36:73:59:cc:93:8a:be:4b:15:f7:2d:
c3:98:87:1e:91:ff:3f:07:52:b3:21:f1:9c:82:07:11:ce:5e:
4a:b3:66:ae:68:27:ba:51:e0:b3:df:1c:5e:33:f5:2e:15:7a:
c0:9e:95:19:9a:01:28:7a:d5:19:67:9b:25:29:13:1c:9d:a8:
c0:fc:a4:35:a8:a7:29:46:25:35:49:6d:1e:5f:83:ee:d8:ad:
5f:98:6c:94:40:31:e6:e6:da:98:06:61:93:4b:77:36:e8:73:
d8:98:01:13:de:8f:41:62:d3:0d:b7:2e:fa:3f:06:1d:3d:c5:
bb:a4:6c:bd:1b:f2:00:7b:60:bc:6d:e6:91:ca:ab:03:05:70:
f8:ba:b8:63:81:31:21:9d:8a:19:7a:b7:47:50:d0:b3:35:e0:
60:5f:31:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:44 2025 by rpki-client