Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
File: WUGkBv3_7iWThJa-WsmlPhu5xlk.mft (raw, json)
Hash identifier: xEdgLezgG/gzF1dFnW0ShH0v8UKloDWTqg5CtTmxqdE=
Subject key identifier: E0:24:82:7B:0D:DA:79:DD:1D:16:6B:1A:17:16:D1:96:66:B8:AC:A1
Authority key identifier: 59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59
Certificate issuer: /CN=5941a406fdffee25938496be5ac9a53e1bb9c659
Certificate serial: 019A4EF43E0DC136CA1EE648CEBE2F12D2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
Manifest number: 03BA
Signing time: Tue 04 Nov 2025 13:00:20 +0000
Manifest this update: Tue 04 Nov 2025 13:00:20 +0000
Manifest next update: Wed 05 Nov 2025 13:00:20 +0000
Files and hashes: 1: EEGZcBqsJai0qQqLe2F9AaWLFpk.roa (hash: FRcwu/tuv02SNpOdxXx1YsnWA5ggNN2a8+sJiuIasIw=)
2: WUGkBv3_7iWThJa-WsmlPhu5xlk.crl (hash: MWt/bcjpfAE7dGS3pFoCHlD8NXwOQ/tdEeclbewxDPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:3e:0d:c1:36:ca:1e:e6:48:ce:be:2f:12:d2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5941a406fdffee25938496be5ac9a53e1bb9c659
Validity
Not Before: Nov 4 13:00:20 2025 GMT
Not After : Nov 5 13:00:20 2025 GMT
Subject: CN=e024827b0dda79dd1d166b1a1716d19666b8aca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:85:68:fa:bd:9f:ca:af:e9:89:82:4f:0a:
20:56:ab:a3:de:4a:26:7b:17:5b:c6:5a:fa:2c:0b:
a3:5f:12:6a:28:85:bf:66:f9:b6:93:9f:3b:5c:4e:
29:a8:50:08:22:91:7d:19:7f:29:25:9d:e7:3c:07:
11:5c:6a:74:b9:c0:a7:f0:78:f7:9e:2b:68:18:35:
36:6a:02:4d:6f:8e:31:c2:90:0f:c0:b2:71:41:11:
c0:91:f7:64:3c:46:0d:15:cc:9c:79:9a:ce:76:b5:
37:61:e2:c7:2c:fd:77:7b:e0:e1:5c:e0:fa:c8:61:
06:eb:2a:4c:13:1d:6a:90:be:2b:e3:ca:eb:7b:20:
08:ca:be:b4:e9:a5:75:5d:69:6e:88:92:69:36:a4:
bc:de:67:c1:70:4f:16:b8:d2:63:72:f7:5a:13:ac:
dd:8a:27:92:4a:41:18:8a:42:e8:ab:0d:f1:90:86:
05:a7:44:22:f3:68:54:9f:70:cc:04:fa:db:57:e0:
dd:75:b2:63:18:dd:4d:42:81:ef:24:f8:60:7e:09:
fa:1e:17:da:c2:88:d5:07:e8:2a:92:f5:9d:de:bf:
33:97:5b:b7:4d:a6:cd:f3:e4:b7:55:cf:cc:4e:ef:
b7:56:7e:43:41:93:2c:87:80:74:eb:36:49:fc:00:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:24:82:7B:0D:DA:79:DD:1D:16:6B:1A:17:16:D1:96:66:B8:AC:A1
X509v3 Authority Key Identifier:
keyid:59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3e:dc:9f:be:75:c6:d9:26:e1:41:3f:b1:ea:bb:b7:72:35:
35:aa:20:84:fe:9f:13:68:72:ff:c5:7a:66:a6:ad:f1:c8:46:
6d:95:60:fb:97:72:21:13:69:c7:f1:ee:8b:e5:c3:9d:e3:ee:
1c:71:0b:10:88:f5:2c:c5:1c:5a:1e:a8:71:a9:a6:ce:7e:40:
d4:09:70:ec:02:5c:7b:03:36:ce:7d:37:55:47:f1:1e:8b:12:
08:c3:d1:2c:ef:b9:41:34:14:4d:07:70:09:2b:f1:05:99:42:
3d:2f:5d:f5:02:a8:e9:0c:58:9f:24:e8:66:57:38:62:3f:bb:
54:95:a8:69:97:18:2b:47:59:d6:a5:e9:88:01:95:aa:87:8e:
c9:3d:d6:51:76:a5:98:d1:91:69:74:93:ee:19:35:af:b5:57:
f0:ae:54:c0:fa:42:4e:09:e4:94:94:1d:be:61:2e:7f:e3:a1:
63:9f:94:be:45:8f:bb:27:5e:a3:38:f9:e4:08:bf:eb:c1:34:
fd:33:06:c1:79:6e:76:c6:03:94:61:97:23:2b:91:2b:f4:e6:
43:7f:ac:7e:0a:1c:ca:09:b4:09:65:9d:36:43:5c:06:55:b5:
83:32:37:06:15:e9:74:f0:78:59:06:d1:a8:52:bb:eb:47:80:
89:6b:da:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:47 2025 by rpki-client