Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.mft
File: wgBqzAX53EUeoNROhyfbRwuSh5Q.mft (raw, json)
Hash identifier: R0CZElfHinf2thkXlvmZeQFVs0cu9ruebYaM44q+BKg=
Subject key identifier: CC:F4:59:1A:95:56:D9:E3:4A:9F:07:F2:B3:27:54:08:43:83:C2:D3
Authority key identifier: C2:00:6A:CC:05:F9:DC:45:1E:A0:D4:4E:87:27:DB:47:0B:92:87:94
Certificate issuer: /CN=c2006acc05f9dc451ea0d44e8727db470b928794
Certificate serial: 019A71B943B2D5C8CD4BA80BFE3E78D59D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgBqzAX53EUeoNROhyfbRwuSh5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.mft
Manifest number: 15
Signing time: Tue 11 Nov 2025 07:02:38 +0000
Manifest this update: Tue 11 Nov 2025 07:02:38 +0000
Manifest next update: Wed 12 Nov 2025 07:02:38 +0000
Files and hashes: 1: ntSNkDLsiCpxMy0f_xBIaNqYA5o.roa (hash: UPsCyhMv7EfaVA+mv6xTlpAFUhTpPy5obKqRjSyu1jU=)
2: wgBqzAX53EUeoNROhyfbRwuSh5Q.crl (hash: rMHv7BssxdLy/ypTSadfXwT4g02Z4KbcwJogEEa7Ueg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/wgBqzAX53EUeoNROhyfbRwuSh5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:43:b2:d5:c8:cd:4b:a8:0b:fe:3e:78:d5:9d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2006acc05f9dc451ea0d44e8727db470b928794
Validity
Not Before: Nov 11 07:02:38 2025 GMT
Not After : Nov 12 07:02:38 2025 GMT
Subject: CN=ccf4591a9556d9e34a9f07f2b32754084383c2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:16:a1:cc:43:87:21:9e:4c:c6:cb:6e:e0:
68:14:6a:4d:22:0e:9d:63:76:e2:e7:ca:41:6c:56:
79:18:2d:cc:c0:b2:90:99:1a:c0:d0:f1:9b:e5:a2:
2b:ba:00:60:12:83:e5:1d:10:ab:cf:e2:59:a1:9e:
a3:9e:54:59:bf:f1:91:d8:f3:6a:95:71:97:94:9e:
18:f7:09:7c:27:d2:d2:69:ed:f1:20:60:4a:c8:e2:
ca:a8:a6:92:1a:b3:8e:3a:c3:f1:08:16:0f:56:74:
d4:ee:bf:f5:71:19:5f:08:d0:71:a9:a4:35:2e:35:
0a:b7:de:89:a5:11:5c:d8:19:88:cc:87:c9:3b:62:
3c:32:b7:23:35:3c:ab:5a:db:7a:18:c2:ab:78:12:
ce:57:8b:b2:c4:f8:a3:43:c3:6a:8f:8e:1f:f9:51:
e2:16:89:75:6b:c8:96:35:5c:45:5a:c4:66:0b:06:
d1:2c:26:be:19:48:a3:90:9a:ca:19:b2:c3:81:7a:
a5:df:0c:90:ba:75:77:4e:34:7a:7d:84:a6:cf:6f:
26:5d:b2:1a:76:b6:57:0f:1c:f8:2b:7e:13:82:fe:
a0:a8:71:8a:14:14:e5:c7:5a:31:92:61:a3:f5:7c:
04:0e:d1:6d:9b:5c:e4:79:f1:61:51:5b:8f:cc:b9:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F4:59:1A:95:56:D9:E3:4A:9F:07:F2:B3:27:54:08:43:83:C2:D3
X509v3 Authority Key Identifier:
keyid:C2:00:6A:CC:05:F9:DC:45:1E:A0:D4:4E:87:27:DB:47:0B:92:87:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgBqzAX53EUeoNROhyfbRwuSh5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:dd:da:61:2e:fd:bc:78:55:c9:75:5d:53:4e:2e:a7:d4:52:
10:b7:1a:80:8c:5c:2e:bb:be:7c:23:05:c0:ac:7c:b8:db:43:
cf:92:cb:79:fd:8e:6c:e6:f2:f2:6d:f7:22:0f:bd:28:b3:39:
f4:b9:b2:c7:e0:1e:7f:89:ae:19:66:1a:29:3a:42:78:4f:2c:
16:03:41:43:30:b2:70:09:0a:33:1e:ef:b5:f8:37:24:36:b7:
a1:2a:44:4e:0d:6c:d8:0a:ba:be:29:20:61:cf:d3:98:b6:26:
96:3a:6c:ba:a8:8f:03:ce:4a:3a:a9:3d:13:7d:eb:87:cc:61:
55:77:de:00:ca:00:d7:eb:1e:ed:66:df:9a:12:d6:af:37:50:
01:21:48:a6:c2:cb:21:74:66:47:57:4b:98:59:1e:21:79:5e:
27:b7:f2:d8:57:1f:51:91:e2:34:6b:05:b0:c0:50:49:55:f8:
9c:88:55:be:dd:2f:b7:c9:16:89:d5:a0:fe:f1:66:56:a9:da:
a6:81:6b:e8:00:01:be:83:36:00:7c:92:d9:3b:45:c6:bf:33:
96:d8:1f:84:48:2a:3d:e8:4e:b4:09:a0:b3:ec:74:1d:8b:21:
61:f8:d7:7f:89:c0:48:ff:06:d0:aa:a2:d8:6c:e4:dd:d9:10:
12:c0:6e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:07 2025 by rpki-client