Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
File: PUx4cBk93824kLZkfMi1bBGW_wg.mft (raw, json)
Hash identifier: FiJnInXRwCsrWlwsThkNrMo+7P5XfbZVkfY/nnaK9dk=
Subject key identifier: DD:04:8D:38:2A:38:AE:7A:F9:38:B0:4B:65:3D:12:A8:4D:22:1B:E8
Authority key identifier: 3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08
Certificate issuer: /CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
Certificate serial: 01993501EA0EB7BC0B1F659907634531F97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
Manifest number: 11CC
Signing time: Wed 10 Sep 2025 19:02:21 +0000
Manifest this update: Wed 10 Sep 2025 19:02:21 +0000
Manifest next update: Thu 11 Sep 2025 19:02:21 +0000
Files and hashes: 1: 35NCpv0Oz6uQPI44W6WG3M5yYs4.roa (hash: JBTWGmE2iSKylKwI1WUPUhWSA2P7T3aiR9SueNbm1BQ=)
2: PUx4cBk93824kLZkfMi1bBGW_wg.crl (hash: 6uY5nedZzdaLlzsm3dKqefjURaw2AywvuQgBdx1HDY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:ea:0e:b7:bc:0b:1f:65:99:07:63:45:31:f9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
Validity
Not Before: Sep 10 19:02:21 2025 GMT
Not After : Sep 11 19:02:21 2025 GMT
Subject: CN=dd048d382a38ae7af938b04b653d12a84d221be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:6a:d4:f6:95:a6:f0:62:58:4a:54:1c:6b:
55:11:7d:f1:cb:06:02:9b:d4:00:d1:6f:fd:04:3a:
43:f2:65:e8:91:0f:73:b4:d1:31:97:71:e6:0e:16:
21:cc:a5:68:66:f1:f0:91:af:73:68:5d:b3:30:71:
8c:a7:d6:84:75:e5:30:66:6d:5d:ee:60:4f:25:98:
2f:5f:f4:a2:b9:4d:7b:0c:5d:5f:ba:46:d7:aa:72:
2d:3d:b5:a3:06:b1:21:fd:3c:59:27:e8:ab:d8:16:
26:73:6b:f9:06:fe:5b:20:b6:c6:f0:e0:87:61:1c:
a0:33:e6:e2:1f:15:54:48:d2:07:51:f1:19:a6:5d:
7a:bc:01:04:37:fa:cd:0e:c0:44:c4:6a:95:20:c0:
06:7d:02:5c:d4:3b:7c:6f:8c:b1:49:2e:25:cf:77:
a4:e8:62:77:11:b5:94:26:da:a3:4f:41:c7:d3:29:
fb:a0:7c:54:82:20:04:b3:a4:b5:76:02:a7:2a:14:
64:3a:5c:19:e8:40:73:0b:a2:4f:2b:9b:f1:c3:8c:
8b:92:44:61:a1:9f:91:90:68:9a:89:e0:77:0d:40:
bc:d5:52:94:04:e0:99:a5:e6:97:90:a9:d8:65:ae:
b3:ce:65:db:b0:da:04:ec:87:c4:48:15:a0:e5:25:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:04:8D:38:2A:38:AE:7A:F9:38:B0:4B:65:3D:12:A8:4D:22:1B:E8
X509v3 Authority Key Identifier:
keyid:3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:a7:3f:6c:f7:f3:ce:16:cb:3e:26:cf:ec:8a:e9:2b:00:c9:
53:80:1b:b8:85:62:5b:60:3a:f1:4c:73:10:aa:b5:27:8b:e6:
c3:11:69:0b:19:d1:b6:bc:f2:7a:5e:94:92:35:8a:cf:d4:f2:
55:0a:67:ac:52:8b:44:3d:cb:e0:ef:30:6f:f8:72:00:31:88:
7d:94:b0:f4:58:a6:b5:00:ab:5d:82:fa:fd:eb:60:01:c4:9f:
24:c0:ee:dc:e3:a1:1f:c0:ae:9d:28:b5:fe:97:18:1e:a4:2c:
b2:ec:8f:cb:5e:3e:81:b5:ce:44:b1:18:44:df:f5:e7:6e:89:
26:cf:f5:2e:9c:12:e3:32:b6:82:5a:fd:53:ac:c4:f6:04:f9:
9d:68:71:13:fe:2f:88:fb:54:ea:fd:29:04:76:70:27:7f:98:
be:17:40:3b:71:ff:2c:36:f5:17:b6:e3:52:de:59:2a:73:8e:
4f:8b:cd:a5:81:4a:23:a1:c7:47:7f:55:cf:46:0f:95:0b:d2:
fc:81:38:b9:09:9d:1d:6a:be:47:3a:b1:82:a8:d9:8e:9a:f0:
66:c4:91:dc:e4:85:0b:cb:6c:27:73:58:ec:84:7e:5b:ea:fc:
29:64:91:a4:21:6c:83:93:ee:de:fb:0b:d3:e5:71:cd:fc:95:
39:ed:e2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:06:03 2025 by rpki-client