Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
File: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft (raw, json)
Hash identifier: cswYmla/MP8ono3iWJwlB/t6+XSz0Zgrzr44WQZMF8o=
Subject key identifier: F2:A9:E9:CE:C7:93:F6:58:E8:1E:19:43:75:D4:23:6D:EF:B4:7B:A7
Authority key identifier: 5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46
Certificate issuer: /CN=5a0e488bb09d2873d662e2846a2288a425ded946
Certificate serial: 019921B25C19F2FF7E5D08715629304E378C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
Manifest number: 0287
Signing time: Sun 07 Sep 2025 01:02:41 +0000
Manifest this update: Sun 07 Sep 2025 01:02:41 +0000
Manifest next update: Mon 08 Sep 2025 01:02:41 +0000
Files and hashes: 1: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl (hash: AG7GVh2cSOAiCA3rgfIlfkH/2v5JCfjYCRrhpSJzf2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:5c:19:f2:ff:7e:5d:08:71:56:29:30:4e:37:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0e488bb09d2873d662e2846a2288a425ded946
Validity
Not Before: Sep 7 01:02:41 2025 GMT
Not After : Sep 8 01:02:41 2025 GMT
Subject: CN=f2a9e9cec793f658e81e194375d4236defb47ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:97:62:3a:13:db:cd:c9:43:63:31:08:5e:f4:
93:02:a7:74:9e:92:08:e7:12:93:fd:f5:76:29:3e:
89:d8:a2:c0:07:e9:09:d4:49:05:12:0d:9d:81:2b:
b2:99:c4:40:06:e8:00:d8:3d:d8:92:c9:58:36:b6:
de:69:1c:af:7e:8b:2a:58:d5:24:ac:fa:2b:89:29:
08:44:d5:7f:fc:c7:38:95:86:2f:34:89:38:e5:51:
0f:bc:ff:b3:3f:08:84:7d:45:0d:fd:6e:f4:76:5a:
5e:c7:21:18:c3:98:74:84:9b:22:f4:b0:b3:41:d7:
bc:a5:f5:d2:ef:28:21:6b:25:8f:65:a9:69:2f:61:
1b:42:ee:9b:af:fd:aa:24:04:c7:87:d5:e9:67:bb:
c6:7d:f6:e8:24:b7:ec:bf:cc:20:e7:aa:38:5d:33:
68:0c:bf:68:67:d8:c3:6c:d5:d4:50:9b:a4:8c:cf:
99:3c:76:56:ef:ad:49:0d:d5:bd:30:4d:4b:3b:dc:
28:60:18:98:be:c3:c8:8a:d5:fd:e3:f6:af:d2:d1:
98:ff:1b:0c:14:c4:32:5d:d8:4e:7c:cd:21:1a:4e:
b8:f7:58:80:dd:63:97:e5:1c:bc:a5:25:80:26:cb:
5e:71:65:e8:1a:68:6f:10:f6:1b:a6:fe:82:5a:58:
06:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A9:E9:CE:C7:93:F6:58:E8:1E:19:43:75:D4:23:6D:EF:B4:7B:A7
X509v3 Authority Key Identifier:
keyid:5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e2:69:5e:47:ef:60:89:27:fa:5c:e2:ca:27:52:d5:79:63:
75:50:d7:8d:62:71:9c:54:ce:0e:1c:f1:06:f1:2e:f2:e8:25:
78:a2:6a:20:b5:ef:81:9e:3c:48:04:94:cc:7a:d9:e8:d1:34:
d3:13:7b:13:a2:d6:c2:2b:26:75:e4:84:b0:5d:80:1b:07:c4:
95:bd:3a:4e:fc:e6:98:4a:71:6b:42:9e:36:51:4a:7b:88:ab:
71:ad:a7:94:b4:7e:14:6a:de:81:e3:eb:5e:be:4f:a3:35:30:
b8:d2:ea:8d:a4:3b:50:88:25:18:11:c4:35:3f:b9:dd:89:68:
3f:62:cb:67:84:68:a2:4d:03:08:38:86:42:da:ed:10:d8:ce:
5b:76:44:b5:8d:23:5f:6a:07:96:e5:8b:21:d4:15:aa:dd:44:
cf:a1:9d:ef:66:fd:82:55:bf:02:6a:40:71:06:b3:48:6e:da:
f2:6e:76:d5:3d:b5:1c:6c:ae:42:27:38:20:de:58:ae:3a:37:
fe:5a:1a:39:2a:da:7a:71:08:0f:e8:45:b2:bf:21:30:7e:3f:
c6:0a:ef:a4:be:3e:01:e7:13:93:28:26:8c:82:cb:cb:d4:6c:
26:a5:ce:81:ef:f2:c3:cb:cf:d9:54:52:f6:a2:fe:0d:0e:c6:
91:80:27:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:42 2025 by rpki-client