Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
File: wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft (raw, json)
Hash identifier: sww7lfl82szvz4fROSuToRi4bOxOrKIVVTEt2ET5KeU=
Subject key identifier: DF:16:84:57:11:43:13:34:3F:8E:81:BC:6A:1A:DD:02:D3:C6:B2:2E
Authority key identifier: C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7
Certificate issuer: /CN=c20e52dab06da4175b45c777961f4ea39b9307b7
Certificate serial: 019A73A6D206A9EC446AC9BF613AA000AB2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 16:01:43 +0000
Manifest this update: Tue 11 Nov 2025 16:01:43 +0000
Manifest next update: Wed 12 Nov 2025 16:01:43 +0000
Files and hashes: 1: ktQ5-W9g4zZMeAt0G3_-eOcvNXg.roa (hash: PaRvSHJJoV4+LaWhDX1LkioRDCgsWXMWP6C+HnWRO88=)
2: wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl (hash: brs99vRDZiAOmHivjQFU95aMER5JdlB+YI7pjxaItmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:d2:06:a9:ec:44:6a:c9:bf:61:3a:a0:00:ab:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e52dab06da4175b45c777961f4ea39b9307b7
Validity
Not Before: Nov 11 16:01:43 2025 GMT
Not After : Nov 12 16:01:43 2025 GMT
Subject: CN=df168457114313343f8e81bc6a1add02d3c6b22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7f:96:22:14:93:84:c7:4e:53:4a:99:cd:b4:
48:02:3e:24:8b:01:08:9c:d8:92:62:cf:5d:43:02:
72:56:04:c2:5b:d1:5d:ab:8c:d7:ff:e1:48:38:21:
90:12:cc:a3:e1:8d:f5:a4:a9:e0:2b:97:40:e1:83:
a7:75:77:3f:59:17:71:5b:c7:24:5e:79:6f:d2:34:
05:d8:f0:19:ab:3d:ad:2d:93:61:57:9b:ac:81:04:
17:91:ce:e1:8e:1f:f2:02:38:db:bf:37:14:05:c1:
a4:17:36:35:2d:44:80:93:86:87:e8:26:b6:f3:dc:
0e:40:7b:e3:62:06:22:2b:4d:86:0b:db:c8:06:fc:
5d:f4:94:2b:ed:81:1a:94:72:58:4a:b4:3c:29:20:
45:34:c6:0d:9f:71:db:0a:da:e6:5f:5f:e5:07:cc:
68:20:e3:b1:1f:17:b7:28:f6:8e:5c:5d:ea:63:c3:
08:90:f0:18:37:1e:cd:d5:f2:f3:d4:69:49:7f:92:
a3:71:c1:6d:f2:ea:c6:e3:85:be:f7:5f:51:8f:98:
e5:1f:f2:da:83:b7:3b:10:97:ec:eb:85:1a:b5:1d:
34:60:6a:d8:46:90:8b:77:eb:03:b0:62:09:af:ee:
ad:ee:5f:88:0a:37:ba:9a:4b:01:66:e1:a0:e5:c6:
18:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:16:84:57:11:43:13:34:3F:8E:81:BC:6A:1A:DD:02:D3:C6:B2:2E
X509v3 Authority Key Identifier:
keyid:C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e7:f2:cf:2a:dc:ff:fa:78:d6:e8:c0:29:9f:4c:3f:6e:a5:
c7:94:c2:a1:ab:d2:82:3d:2a:35:93:4e:fa:e7:43:c8:6a:10:
36:6d:11:63:d3:45:5f:3c:e7:ff:39:30:1a:14:64:c7:b0:28:
b8:aa:0e:3e:39:b5:98:98:3e:40:b2:68:31:0e:89:37:6e:8b:
04:59:26:d4:b8:34:fb:4b:13:05:a7:e4:b4:79:a7:f3:82:f6:
5e:c0:e6:17:88:89:82:f6:0b:35:2b:0f:97:5b:48:9e:a3:ee:
8b:5c:01:81:2b:f8:4b:45:cf:f6:79:b5:c2:92:4f:97:ea:62:
5c:6c:4f:0c:60:67:33:44:86:37:66:e9:f4:3f:61:26:dc:67:
cc:dc:57:42:f0:9e:1b:19:28:98:5d:77:7f:b8:e1:26:4f:2d:
62:af:9b:8f:7c:e2:64:c1:b2:06:dc:5f:c7:71:fe:9f:4e:7c:
7d:dd:47:59:1b:b8:05:69:07:96:7f:e5:cc:27:61:5a:07:0c:
98:b5:6f:53:45:c2:95:55:f4:63:48:63:62:c0:06:92:ba:95:
01:6c:12:b2:f2:e7:c8:28:22:80:b8:6f:80:4b:0b:70:ee:51:
69:29:11:ce:70:5d:26:78:b5:a8:b6:91:ab:1a:b9:8e:0e:89:
fa:b5:51:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:17 2025 by rpki-client