Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
File: wSgWX47uGF-q-aozh19O5BKxD4w.mft (raw, json)
Hash identifier: wfNoMTwCTc36iV9sXPfmEAt0fY4LfPV3Lw+8Msp5bNA=
Subject key identifier: 97:1E:77:1A:E7:EA:66:42:02:ED:78:10:74:5A:A9:62:37:28:48:98
Authority key identifier: C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
Certificate issuer: /CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Certificate serial: 019A71B876C9B15B56A95E3C59BADFDA7850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
Manifest number: 1119
Signing time: Tue 11 Nov 2025 07:01:45 +0000
Manifest this update: Tue 11 Nov 2025 07:01:45 +0000
Manifest next update: Wed 12 Nov 2025 07:01:45 +0000
Files and hashes: 1: IGaAmqWaXDC8Jd-8Qa85p2QBKSs.roa (hash: m3bXj57F8BUs8aS9v6HaMmQ2fB5Rx7CSbbCBnNNdBUY=)
2: wSgWX47uGF-q-aozh19O5BKxD4w.crl (hash: WsGAtB5tEPEA7Z+Exh3XAoU0Bd3r5mb+34H/KrSg9gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:76:c9:b1:5b:56:a9:5e:3c:59:ba:df:da:78:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Validity
Not Before: Nov 11 07:01:45 2025 GMT
Not After : Nov 12 07:01:45 2025 GMT
Subject: CN=971e771ae7ea664202ed7810745aa96237284898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:24:39:66:11:52:19:cf:1d:7a:3d:94:01:
80:d0:e7:a1:96:c4:e1:96:57:6f:66:e0:49:70:43:
60:0a:67:8d:2c:d3:b8:1b:de:60:1d:2e:71:22:88:
8b:79:ad:49:c6:ce:d9:6d:64:80:ce:ec:38:6a:1d:
41:ab:92:b5:fb:c7:12:31:6b:95:9d:ec:f4:a4:ba:
f5:0b:2a:a3:34:8f:a9:d0:8d:10:8a:ec:c2:5f:fb:
c2:2d:71:04:05:4e:49:c2:df:10:9a:01:ca:13:03:
7b:c1:7e:6a:88:ae:a7:07:d5:34:3b:ef:51:05:15:
0d:dc:a6:10:96:93:02:c8:a2:32:29:1d:04:0b:b2:
6b:7d:7f:a6:b8:dd:38:7a:6d:9b:8e:cd:cb:dc:1b:
05:3e:07:0b:26:21:6b:b5:00:9b:9c:6a:ba:c4:1d:
58:14:28:b2:91:83:27:c0:49:94:05:5e:fc:4c:49:
3c:95:5c:f5:dd:2b:c6:e1:6b:80:5a:78:ec:b3:6f:
8f:8b:27:25:2b:ad:43:46:a1:7b:54:a9:7b:d3:b8:
fc:1f:24:8e:71:34:7b:04:32:5b:55:c6:bb:e6:39:
f1:dc:db:a4:fa:48:f1:58:c8:f4:ec:a6:d3:c2:68:
96:5f:8e:3d:bc:00:32:27:ba:6f:fc:2e:f1:7d:83:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1E:77:1A:E7:EA:66:42:02:ED:78:10:74:5A:A9:62:37:28:48:98
X509v3 Authority Key Identifier:
keyid:C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6f:74:dc:7d:cc:89:ae:f0:37:98:96:22:22:a5:6e:9a:c6:
6f:e3:24:21:e6:f7:f3:8c:15:09:ef:ec:d7:20:ba:af:ef:df:
58:2e:10:80:00:f4:a3:e6:59:13:b2:f6:01:30:0c:8c:ac:0e:
3c:be:50:20:43:32:bd:ee:0f:84:a3:51:9a:7d:84:26:ae:a6:
fd:12:16:88:e9:0a:23:8e:e3:3f:c7:25:a1:f8:df:f0:0f:81:
04:4b:e8:7a:4c:b5:64:88:01:4d:7d:48:1a:e1:44:ec:e7:83:
95:d5:08:c2:4d:41:d0:aa:4b:ec:4a:60:a1:d8:d6:60:81:fe:
11:97:b5:27:2e:54:5a:a1:10:71:4b:43:a0:c2:d4:d4:b9:9e:
bd:df:14:36:17:16:1e:cc:2b:02:99:ed:a0:ef:53:25:cd:ed:
df:88:c4:ce:8f:0a:08:23:2d:90:4f:4f:4c:56:f4:4e:73:b7:
0f:e6:fb:a8:ee:36:8a:7f:43:52:56:95:66:ef:30:bc:a2:d2:
63:77:6c:89:f1:c4:97:09:22:cd:3e:64:60:a5:7c:a7:47:ec:
60:f4:35:1d:f9:0c:14:43:d0:3b:2b:27:8c:15:2c:e8:87:3e:
7e:1a:46:e4:3e:01:51:61:55:bb:1c:4d:13:21:0e:31:5c:56:
e3:c4:ae:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:00 2025 by rpki-client