Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
File: WgrUZVrtB8R0FuepRWBHlOuol6w.mft (raw, json)
Hash identifier: VfsxTUCswuamH4lw8p+ijnK4rRLKeVYg4crDgh22N3k=
Subject key identifier: 8C:DF:DA:E3:C6:C1:10:AA:95:4D:B9:BC:2A:33:5A:DA:A8:0D:66:0B
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 019A4F993EF86973FC7FA7F11BE70D144819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
Manifest number: 1252
Signing time: Tue 04 Nov 2025 16:00:34 +0000
Manifest this update: Tue 04 Nov 2025 16:00:34 +0000
Manifest next update: Wed 05 Nov 2025 16:00:34 +0000
Files and hashes: 1: NvAPv-l4cBrLTji2iXv6GfI0gZg.roa (hash: BBOKh5jKHRu7y0Xpwzm9dX9BwYJwDLK16Nc2ib6JODU=)
2: WgrUZVrtB8R0FuepRWBHlOuol6w.crl (hash: 7sqbxfz4LX5ypOL7Fk1SR0zOC9zt2XJXeT+qjM+NhbQ=)
3: aKrvV8xBl8sCHisqRYKu_FgNh7A.roa (hash: VWMQXxpmmku9lvmyl+DypVcQSIrG+GnuaLnSwfYRfGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:3e:f8:69:73:fc:7f:a7:f1:1b:e7:0d:14:48:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Nov 4 16:00:34 2025 GMT
Not After : Nov 5 16:00:34 2025 GMT
Subject: CN=8cdfdae3c6c110aa954db9bc2a335adaa80d660b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:02:23:b0:c0:aa:2f:60:2a:fb:23:77:b7:
96:10:4a:ab:f0:be:55:e7:60:4a:d4:20:a0:63:4b:
f9:e0:4c:33:df:06:0d:ee:73:97:8b:9c:7b:79:93:
aa:88:07:df:30:5d:83:80:37:7b:4f:17:9f:f0:dc:
c5:5a:a4:ea:a2:da:02:a4:fa:0b:30:c3:ed:36:f0:
cf:9a:fa:32:ff:ae:db:10:6a:e0:cb:fc:73:52:0e:
8f:45:56:0d:32:7d:d3:c4:a0:54:bd:59:ff:8c:2f:
48:a8:9d:80:6a:e5:5a:1c:f4:8f:28:c0:3f:fd:e2:
e2:5f:52:d4:2d:b2:27:ad:c0:33:92:e1:a3:e8:b6:
70:d2:11:c9:94:de:41:1a:23:06:28:68:8d:a4:40:
1e:eb:4b:3e:7c:cc:07:42:f9:e1:41:52:5e:0f:11:
49:63:0a:27:ec:fb:56:33:1f:4e:c8:42:60:08:2e:
4d:47:55:df:64:f8:ab:31:34:c4:d3:7c:a6:1e:d8:
98:b7:9e:3d:81:75:90:2b:16:51:1f:0a:c4:90:97:
4e:fd:98:53:45:bd:62:42:b2:68:81:89:bf:05:17:
58:93:1d:5e:ca:da:aa:d0:71:da:19:c5:bb:49:88:
1b:d7:f4:fa:09:25:44:57:3f:3b:9d:fd:58:e6:50:
b3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DF:DA:E3:C6:C1:10:AA:95:4D:B9:BC:2A:33:5A:DA:A8:0D:66:0B
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:4d:80:8c:a5:93:57:26:44:13:60:fc:58:a5:17:cf:f6:cd:
f7:11:cb:58:08:c5:24:75:97:fe:27:3a:b7:c5:74:07:64:7b:
cf:5a:f7:fd:af:e4:01:22:15:a4:74:eb:e8:b8:91:93:d4:cc:
64:00:1d:71:cf:4d:a0:9d:86:94:55:00:6e:5e:4b:af:10:9b:
d4:e3:20:37:75:ec:48:15:da:b8:4f:02:c1:eb:59:be:40:0f:
a4:bb:28:fe:d9:15:d6:9d:88:f4:a8:4b:cf:dd:95:5d:93:f3:
b2:59:7d:08:9c:90:95:8b:88:08:1f:30:3c:9b:e0:c6:36:f6:
6d:72:ef:1d:4d:11:dc:ba:fd:47:c8:ee:aa:65:e0:83:2a:3b:
90:d8:c1:a1:df:7b:f7:09:a3:4d:08:e8:81:7c:ba:bd:22:39:
9c:d7:7c:ba:f2:62:3f:8e:df:7b:ea:1f:cd:1c:07:4d:7e:7f:
a3:ff:92:39:a6:7d:a2:d6:e3:28:f5:db:5d:f9:f8:98:e5:d4:
3a:1d:05:97:58:ec:38:77:75:e7:df:e7:0c:0b:0f:67:42:77:
7a:01:ec:94:9a:ed:ce:4d:7a:17:73:b1:58:97:3c:d5:9f:39:
4b:07:64:5a:04:0d:2f:2a:6f:b2:86:11:88:fd:c3:5a:6b:41:
52:5c:7e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:59 2025 by rpki-client