Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
File: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft (raw, json)
Hash identifier: ZzoPG4klJxReZgeKu8i5ZAu13Nh96L+9E+6+iU2JtNE=
Subject key identifier: 8E:98:EE:C3:91:04:FF:7F:B4:FE:1B:C5:E3:8F:5D:0A:CB:43:14:A1
Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Certificate issuer: /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Certificate serial: 019A19BD43EB03234366DFBFBDE4BA08B594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
Manifest number: 09C2
Signing time: Sat 25 Oct 2025 05:00:25 +0000
Manifest this update: Sat 25 Oct 2025 05:00:25 +0000
Manifest next update: Sun 26 Oct 2025 05:00:25 +0000
Files and hashes: 1: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl (hash: cXWvMeNZV+T/4SEnxpFWC8runWRrF24ZlKTQL+TFIng=)
2: fPdaDi8Q6kMa2if35eGudsLEQ8o.roa (hash: vc9oGx1t9ju95rv1gQobwnbtC4KxraULnnXmJJ4pSRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:bd:43:eb:03:23:43:66:df:bf:bd:e4:ba:08:b5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Validity
Not Before: Oct 25 05:00:25 2025 GMT
Not After : Oct 26 05:00:25 2025 GMT
Subject: CN=8e98eec39104ff7fb4fe1bc5e38f5d0acb4314a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:fe:97:94:fd:eb:93:d1:40:56:45:45:90:
f9:b8:96:66:2e:be:af:88:cc:1d:3c:7d:ab:c5:e6:
72:88:f6:79:f7:8d:0a:28:f5:dd:b9:aa:cf:5f:d2:
70:53:82:bc:c6:cd:b6:2e:c6:dd:03:04:22:b7:12:
66:89:61:b7:f9:dc:86:b6:02:77:5b:1b:2d:8b:97:
f5:f2:a1:41:a2:d5:ca:3f:48:b0:1f:a5:be:a9:ef:
94:b0:43:c0:00:30:ab:93:29:bd:32:5a:3b:9e:d3:
c2:cd:1c:fa:c4:d0:0a:d8:80:00:02:32:92:ca:ba:
c1:17:6b:aa:a4:30:7a:45:ec:9a:3b:b9:90:15:bf:
c7:17:5d:66:66:fe:f0:73:c3:ac:fe:51:bd:3e:a1:
5b:f6:bc:01:77:e5:fe:4c:1d:db:1a:aa:d2:1b:d6:
f2:a8:8d:d5:4d:2e:18:64:99:de:b6:2c:8d:c0:6b:
e2:8f:44:7c:9e:3b:f2:57:6f:84:a2:62:93:06:f9:
9e:c5:22:40:fb:a2:5e:e0:6d:f0:5d:c8:cd:ad:76:
af:17:fa:90:55:6f:96:5d:be:60:58:e5:8e:3e:e9:
8c:f9:50:de:8e:a9:57:1b:cf:c3:8a:56:c0:30:09:
5d:15:a0:18:b3:46:fb:84:fd:b2:5b:1d:52:6e:57:
e6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:98:EE:C3:91:04:FF:7F:B4:FE:1B:C5:E3:8F:5D:0A:CB:43:14:A1
X509v3 Authority Key Identifier:
keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:71:d2:1a:c3:ef:a1:c1:ff:35:bc:1a:c7:31:d4:24:1f:ea:
b7:09:a4:d9:dc:d1:01:25:3b:18:df:ad:b7:f0:bc:52:f0:25:
16:2d:51:40:11:14:63:fb:bc:7e:aa:5d:93:4c:55:f6:d8:7a:
e9:23:99:b2:b2:fc:92:23:f5:52:aa:fe:40:f6:2d:45:a2:14:
aa:f0:7b:69:a9:26:ef:b7:e6:c8:c0:4d:86:30:b9:2b:a3:eb:
70:5d:43:32:89:6b:9e:74:a3:94:b9:b0:82:1e:6f:9e:63:28:
9b:30:0d:c2:0e:af:28:de:8b:75:48:a6:db:b9:a6:fb:d9:04:
5e:c8:83:a1:1d:c8:65:34:7e:02:38:b5:78:94:3f:97:78:d5:
05:34:b8:28:d8:4e:92:ce:70:45:1b:22:e6:60:fb:be:43:0d:
10:e2:a8:e0:51:fe:27:88:1f:e5:e9:89:16:e2:17:b2:81:63:
2f:b5:30:b4:e3:61:b5:ce:c9:8a:ad:41:35:dc:63:bb:68:09:
f0:77:c3:41:a5:29:17:e7:01:0f:a4:da:8b:a6:6f:23:28:4a:
6d:03:ca:b6:9b:99:90:d5:2d:8b:01:52:97:4d:9b:eb:9f:52:
7a:b8:fc:44:0a:7d:df:43:f7:74:3c:b8:46:b5:ec:06:a0:ad:
ca:93:6c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:41:36 2025 by rpki-client