Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
File: PUx4cBk93824kLZkfMi1bBGW_wg.mft (raw, json)
Hash identifier: wnuPJftbGHubOKEvi2ob/xiqEh+ez0zvfvdCCcPfR8U=
Subject key identifier: 70:5F:5C:4B:C5:95:34:CC:E5:84:57:A3:88:C7:2B:44:BD:3B:56:62
Authority key identifier: 3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08
Certificate issuer: /CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
Certificate serial: 019A2854BE36592FB961640A96918E17A6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
Manifest number: 124A
Signing time: Tue 28 Oct 2025 01:00:33 +0000
Manifest this update: Tue 28 Oct 2025 01:00:33 +0000
Manifest next update: Wed 29 Oct 2025 01:00:33 +0000
Files and hashes: 1: 35NCpv0Oz6uQPI44W6WG3M5yYs4.roa (hash: JBTWGmE2iSKylKwI1WUPUhWSA2P7T3aiR9SueNbm1BQ=)
2: PUx4cBk93824kLZkfMi1bBGW_wg.crl (hash: kT+heXNgtXqWKO3wOokTEbJUizkXtea91ED5hQp5L9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:54:be:36:59:2f:b9:61:64:0a:96:91:8e:17:a6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
Validity
Not Before: Oct 28 01:00:33 2025 GMT
Not After : Oct 29 01:00:33 2025 GMT
Subject: CN=705f5c4bc59534cce58457a388c72b44bd3b5662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:97:28:2d:c1:9c:02:75:a4:96:a0:1d:32:e4:
4f:28:32:c3:fa:0e:11:07:69:c1:8f:60:78:22:97:
b0:fa:dd:91:50:2a:b8:74:96:5b:7b:74:09:7e:8a:
88:49:b2:fc:32:97:60:36:0f:b5:fd:e7:60:d5:45:
35:34:17:6b:19:5b:3d:6d:3c:34:3f:76:b0:64:a8:
cd:31:f6:7e:e7:7e:67:18:cb:4d:a1:49:6a:04:6a:
eb:cd:6f:a4:99:79:23:98:2f:1b:e6:5c:dd:8d:6e:
f9:94:4f:74:2b:7d:2d:a4:98:7b:48:d8:c2:9c:f0:
ab:eb:5a:7d:b5:bf:c0:c7:b1:bd:ed:29:95:2a:19:
1c:a4:71:47:6c:4a:38:89:4e:25:e5:79:4c:2a:7f:
2c:dc:d2:11:ce:de:ca:94:b5:6f:48:c0:a7:2f:21:
fb:7f:27:6a:53:9a:dc:36:82:18:3b:f7:08:83:0d:
84:05:00:6d:90:6a:4b:13:8f:9b:6c:04:f0:bd:a5:
71:5f:3f:5b:21:10:56:eb:29:16:39:32:a8:58:93:
cb:60:2e:2e:d9:20:fb:8d:f6:52:75:1a:ae:5c:35:
60:c5:45:43:68:02:b3:68:93:e6:d6:fe:81:dc:7a:
70:1b:26:b2:83:7c:f5:88:90:53:55:ac:43:00:4d:
5b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5F:5C:4B:C5:95:34:CC:E5:84:57:A3:88:C7:2B:44:BD:3B:56:62
X509v3 Authority Key Identifier:
keyid:3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:60:d6:ea:04:f9:87:74:51:c2:be:6d:1a:92:f6:9e:9a:0d:
d5:f4:1f:10:d6:e5:e0:3e:70:ee:68:60:1e:f2:cf:17:de:f9:
4a:22:ce:f4:43:2d:b9:0a:1d:da:55:44:d6:ed:15:6b:75:ed:
a1:5b:2a:a5:ee:5a:31:05:6f:bc:98:bf:be:4f:2b:1e:5a:ed:
ce:7a:de:da:4c:25:7c:2d:12:e7:11:fa:14:c6:f2:b5:be:23:
e5:a7:29:f3:5c:15:e6:99:f5:4d:4e:d8:95:d5:0e:81:78:3e:
e9:39:8e:10:94:c2:0c:4b:76:e6:f9:d8:79:7d:6c:25:7e:7a:
4b:8a:65:b4:50:0d:4f:55:47:e7:c2:ce:dd:4b:ac:20:ae:73:
d1:48:17:a2:86:33:af:79:01:a5:9a:e9:f5:89:93:b8:fd:c3:
f8:d5:a0:e6:88:75:3c:b4:93:a4:21:73:32:4a:fb:19:63:eb:
b0:6f:69:42:41:fc:b2:1b:d3:df:fa:df:d0:2a:a0:89:d9:76:
a9:0a:c2:6f:9e:43:27:fa:a9:17:99:4f:fb:7d:2d:7c:46:43:
c7:de:c1:58:d0:e3:dc:b5:37:34:41:4d:6a:21:c1:e8:fa:89:
c4:4c:70:1c:3b:3e:8e:a8:d3:ba:c6:89:a2:b7:27:6a:1d:70:
61:c5:46:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 03:39:12 2025 by rpki-client