Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
File: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft (raw, json)
Hash identifier: r/c5iBGj2E8AaWRU3KD3XmTGYce29IZleuEOeKPbWA4=
Subject key identifier: BD:9E:94:F1:D1:5B:33:20:11:9F:1A:4F:76:44:E2:2D:87:83:C1:40
Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
Certificate issuer: /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Certificate serial: 019A729357728D61D3053D68AB99172092F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
Manifest number: 0998
Signing time: Tue 11 Nov 2025 11:00:50 +0000
Manifest this update: Tue 11 Nov 2025 11:00:50 +0000
Manifest next update: Wed 12 Nov 2025 11:00:50 +0000
Files and hashes: 1: U3hg_F1n66wHfUJa1B5AwM1jPe0.roa (hash: P69ebvhq55UOViQWYuaYwNEg2G9WcwEDt0JaOwktWKA=)
2: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl (hash: rA3OJxLwZqRjxt5u/GB461Es8P7WFGBXjo4okmxX6Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:57:72:8d:61:d3:05:3d:68:ab:99:17:20:92:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Validity
Not Before: Nov 11 11:00:50 2025 GMT
Not After : Nov 12 11:00:50 2025 GMT
Subject: CN=bd9e94f1d15b3320119f1a4f7644e22d8783c140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:c3:ca:1a:b1:45:86:d4:45:f0:87:40:3b:
f2:ce:95:fa:59:6a:80:d8:16:1c:5a:27:84:a5:22:
87:f6:b4:cc:20:ac:1e:f0:fb:13:cb:b4:5b:68:e9:
d0:b0:39:9a:dc:d8:b3:2b:6b:7b:df:ba:42:42:53:
84:44:de:4b:be:e6:21:4f:5b:8d:82:3a:8b:75:0e:
da:dd:7d:d3:c5:dd:33:6b:8b:f8:22:dd:9c:7e:bb:
7f:c3:a7:9d:81:18:74:46:bc:fb:f4:a2:b8:0e:8b:
e1:b4:b3:b4:36:fd:06:cf:12:b4:b2:57:ee:b1:fd:
6d:a1:c7:0a:08:ac:6e:f4:e2:01:37:f2:46:ed:09:
e5:14:d6:31:6b:ec:d2:59:b5:76:6f:2c:ce:ce:80:
f8:bc:83:9d:c8:3d:80:13:5b:67:f4:87:f1:05:9c:
39:bb:53:52:76:61:47:ec:52:e2:9c:f2:1c:f4:6e:
1e:83:d1:94:a9:50:89:34:d4:14:ec:2f:68:52:04:
ca:e7:3a:39:52:ae:e7:b2:40:b7:02:be:7b:94:aa:
c9:c6:d6:c2:3e:8c:6d:79:78:ed:41:a8:ab:df:2e:
10:06:f9:20:fa:46:46:b7:5c:8c:6b:dd:22:12:19:
de:0c:72:81:42:30:af:9f:82:4a:60:56:39:12:dc:
e0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9E:94:F1:D1:5B:33:20:11:9F:1A:4F:76:44:E2:2D:87:83:C1:40
X509v3 Authority Key Identifier:
keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:11:c5:f2:5f:19:ed:b5:b5:bb:81:da:60:f7:7e:e0:7d:3a:
f6:fa:d6:92:2c:17:08:3d:7e:1b:4e:bd:b7:e7:a2:06:d7:21:
e7:c3:52:b1:ad:c6:aa:64:04:91:8e:08:eb:32:17:98:58:29:
2a:6e:48:a9:82:66:a1:f3:ee:b8:57:6b:b8:d3:8e:d5:b8:57:
db:72:ae:e7:46:b6:3d:fd:c0:ce:3b:4b:04:66:2a:49:e7:3e:
46:04:b7:cb:f8:e3:1e:80:13:b8:98:5c:36:da:32:bd:65:e0:
0c:45:1b:a4:5b:fb:6f:aa:fc:67:4b:1b:b4:c6:2f:86:42:38:
8d:d1:fa:3c:40:f1:33:c4:c0:04:64:60:4e:03:c9:e3:d1:19:
c4:53:3e:77:93:b5:e4:8f:7c:8a:d4:80:4e:02:65:30:c7:6a:
e6:44:0f:90:5b:58:a4:ed:51:0e:eb:1c:5e:99:5e:15:c5:15:
c5:d9:cc:27:9d:d1:14:ba:6d:72:fd:d3:c8:4a:83:76:05:18:
92:67:1d:54:cb:b0:3e:2b:72:a6:b6:fb:fa:64:43:7f:5b:af:
63:66:e4:45:b0:19:57:5c:96:66:a0:47:ec:53:22:c7:b3:05:
80:90:22:f2:a0:bf:d0:15:d5:f8:59:3f:3f:9d:04:bc:c0:01:
c7:51:ed:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:14 2025 by rpki-client