Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
File: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft (raw, json)
Hash identifier: IprX/q9+OxVQgHzMH4eFCqVxIL0fx505Hs3wBalAxdQ=
Subject key identifier: 73:17:4F:58:30:5B:92:DA:25:75:27:60:B0:9D:24:9E:F4:C1:6D:58
Authority key identifier: 58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
Certificate issuer: /CN=586329f307b98285b71d22c7197ec19b701ded67
Certificate serial: 019A21E4F244ABA381053CC4FE747CDC52E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
Manifest number: 16FA
Signing time: Sun 26 Oct 2025 19:00:43 +0000
Manifest this update: Sun 26 Oct 2025 19:00:43 +0000
Manifest next update: Mon 27 Oct 2025 19:00:43 +0000
Files and hashes: 1: PiqBBXAA6we4MoLDl4MdjTFczpk.roa (hash: UmY/XV+HwWVcLuYg16r45R+AHciaE7tJGWzQzK3TX58=)
2: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl (hash: WhJxpTxCoZymWhY/GaQGWyTVHUaK3BwvoMUddrelarw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:f2:44:ab:a3:81:05:3c:c4:fe:74:7c:dc:52:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586329f307b98285b71d22c7197ec19b701ded67
Validity
Not Before: Oct 26 19:00:43 2025 GMT
Not After : Oct 27 19:00:43 2025 GMT
Subject: CN=73174f58305b92da25752760b09d249ef4c16d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:a9:0b:55:3c:7d:0e:d2:d1:4f:8b:82:ca:
44:18:34:34:65:a9:09:d8:09:8e:80:5d:c1:51:e0:
92:08:28:66:b4:8f:84:ae:a5:9f:74:d3:09:49:10:
40:41:56:75:03:82:49:c5:76:91:d1:1c:07:a1:ed:
72:81:09:b1:7f:7b:4f:ae:64:d6:21:ce:30:06:c0:
7b:d4:6c:75:8e:4e:00:c7:82:e0:d5:8a:e0:12:73:
49:e7:30:c7:47:2c:80:d8:9e:18:c8:60:a3:10:7f:
c8:6b:8a:77:08:39:30:c3:c4:2a:04:bf:30:7f:3e:
9e:f2:44:79:d6:d5:91:14:1f:5e:21:4e:ac:49:b2:
52:93:30:62:bc:2b:b1:ca:21:24:6a:7a:5d:cc:09:
35:4a:ac:80:a0:70:9b:71:cc:76:0a:fe:27:40:2d:
76:51:c2:4b:3b:de:de:26:08:6d:1b:93:2b:1b:28:
e9:a3:e3:6d:03:0b:80:c8:82:6c:85:22:fc:de:5a:
cb:5f:34:c7:80:73:1e:ae:d9:22:21:2b:9f:81:58:
dd:9b:a2:20:ec:c9:24:f9:31:17:8d:1f:21:14:1c:
90:f9:9c:07:27:27:a9:c2:d8:15:93:c5:15:4b:03:
d7:59:94:d4:8c:a9:8c:58:27:3e:fd:3f:9e:d8:32:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:17:4F:58:30:5B:92:DA:25:75:27:60:B0:9D:24:9E:F4:C1:6D:58
X509v3 Authority Key Identifier:
keyid:58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:61:64:2f:4c:0d:70:43:b8:6e:1d:a2:a6:70:2c:d0:bc:4c:
a8:da:db:19:2d:78:6c:10:9d:55:41:c5:3f:3f:39:ea:00:3e:
63:71:aa:51:c4:cc:13:31:5a:77:f2:28:10:50:10:44:f7:b0:
f8:b6:7e:17:ee:5b:7b:ee:10:d1:5d:11:08:44:95:11:19:11:
7f:d0:92:d7:02:71:2c:57:30:e6:01:3b:a0:c1:d9:79:dd:12:
76:50:31:c3:57:e6:88:52:ab:ca:0f:22:49:88:33:1e:4e:f7:
fd:b7:e5:2d:1d:57:d0:bf:df:e3:9f:7c:81:eb:c3:cd:90:da:
6d:32:4c:59:54:c4:79:59:03:c1:27:76:9a:86:16:bf:b6:da:
5d:f2:90:45:10:f8:2b:d9:67:e4:97:e6:28:cf:28:59:20:d1:
db:38:a4:ce:f3:92:4a:b6:34:e5:74:63:12:dd:d0:07:40:6b:
f7:02:fb:66:da:11:c6:82:b7:d5:f3:b5:9c:93:53:50:de:83:
0f:39:ad:d9:12:b9:67:b3:23:34:77:23:52:d0:af:f1:b0:cf:
cf:4a:d9:6f:4f:36:15:99:d0:68:1f:b5:9e:17:8e:dd:34:c4:
dc:67:f4:fb:51:34:39:94:44:2f:d0:b7:75:df:2b:4e:e9:eb:
5a:d0:b0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 02:03:21 2025 by rpki-client