Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
File: wg8AjBzMpi5vw1bWNCBVpifcbPI.mft (raw, json)
Hash identifier: 9IKjsmr1LwGK5W5oVODIyvDqn7EkaXB8bQDlJ7ze2iY=
Subject key identifier: B2:99:EE:EE:4C:AD:30:E8:FB:A1:01:55:AE:FC:39:3F:D8:A4:D5:AB
Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
Certificate issuer: /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Certificate serial: 019A714A356E479FB3F93070F63BEEBAAD69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
Manifest number: 0510
Signing time: Tue 11 Nov 2025 05:01:20 +0000
Manifest this update: Tue 11 Nov 2025 05:01:20 +0000
Manifest next update: Wed 12 Nov 2025 05:01:20 +0000
Files and hashes: 1: CGLcLVB_nqLd9iNoes6GRQjCoVY.roa (hash: PUaaifTKcP0kb/F/TYWEggzMP0VnUab0IhVecDySCrE=)
2: wg8AjBzMpi5vw1bWNCBVpifcbPI.crl (hash: QlDGxmVEkQzWvrFuuv1sjdswvx1l6LsvP8OB+PP6ZrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:35:6e:47:9f:b3:f9:30:70:f6:3b:ee:ba:ad:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Validity
Not Before: Nov 11 05:01:20 2025 GMT
Not After : Nov 12 05:01:20 2025 GMT
Subject: CN=b299eeee4cad30e8fba10155aefc393fd8a4d5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:8f:dd:37:e9:94:e7:53:f0:1f:50:cb:85:
16:d2:a6:34:b6:ac:a5:3e:7b:9e:89:e0:34:3c:b2:
b1:8c:33:95:4d:d1:28:ff:ff:fd:75:84:40:8b:60:
5b:c9:08:07:0c:c6:10:bb:d8:2c:8d:0c:17:05:01:
07:d6:28:6c:86:d6:8a:b1:74:a7:c4:16:d6:38:cf:
d4:94:f6:df:2e:f1:ff:99:80:76:55:35:61:3d:0c:
09:48:68:70:41:9e:11:30:c3:ce:70:36:a5:fa:92:
59:94:a8:14:35:0a:55:b4:5c:52:cf:3d:34:cf:15:
95:7a:a3:8b:c2:11:11:25:18:ac:d0:f4:61:24:ed:
29:f9:c2:c8:3d:ed:77:0e:49:ce:f2:68:eb:be:c6:
17:4f:31:3a:15:ef:63:ec:b7:e9:7a:48:51:d6:24:
20:2f:ad:9c:cd:ca:e1:51:18:a5:7a:7a:de:6e:5b:
ad:d1:95:e6:0a:e9:29:af:76:ed:1e:f0:2a:c7:0a:
a8:6a:6c:d1:6a:b2:2d:8d:fb:82:e8:35:e2:37:6a:
d7:e9:76:42:d7:ad:c7:de:a0:05:ca:ca:24:8a:83:
82:e2:da:8e:78:f8:71:74:8a:6f:58:a7:ac:3c:8a:
1a:73:59:30:61:6c:4f:a2:f7:b7:b2:40:3a:cb:d5:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:99:EE:EE:4C:AD:30:E8:FB:A1:01:55:AE:FC:39:3F:D8:A4:D5:AB
X509v3 Authority Key Identifier:
keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d2:87:54:17:61:88:75:b6:41:c6:7a:9d:64:79:3e:ae:ab:
0b:1f:1b:97:f1:9b:a0:70:3c:72:aa:b1:76:c5:f2:bb:dc:2b:
9f:be:2d:e9:b0:27:82:d5:22:a1:53:b8:dd:12:e5:e3:6d:ce:
ec:90:a8:b8:09:20:9c:6e:e4:a3:e9:5d:c8:d8:1a:55:f1:94:
58:e8:c7:6c:e2:42:ca:e9:57:52:dd:29:c3:07:01:50:1e:47:
8a:ab:c6:61:bb:68:78:e4:56:ff:b0:0b:27:72:97:60:45:c8:
96:3b:f6:67:eb:16:b7:91:b3:fd:2e:1a:0c:d4:e9:b2:0e:d0:
98:81:0a:63:1f:13:31:53:f5:52:4a:7f:8d:15:3e:c4:1b:ea:
82:c3:2f:a9:a3:24:82:31:ad:1a:df:1c:2b:81:4e:42:9d:a6:
e0:fa:92:e5:06:07:7a:c6:67:e7:9b:16:2c:93:ed:f1:6d:c7:
0d:6c:78:d6:ae:5e:3a:30:df:38:ce:35:f0:31:1f:7b:ac:fd:
50:7d:c7:cc:e5:9f:5b:c0:b7:7d:cb:ee:1b:bd:3e:40:61:35:
4b:a3:fc:53:9b:ef:e9:ac:38:51:78:c2:0f:e4:81:66:9a:c0:
ee:91:fa:5a:04:96:14:59:6c:67:fa:bb:35:86:1c:00:c4:76:
f3:d8:2f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:44 2025 by rpki-client