Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
File: wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json)
Hash identifier: +EFc9RQ9Lu5JuOvqxe+Qr7ENMQ3soBvuiA0jqLp97Wk=
Subject key identifier: 68:8F:85:53:11:D7:51:35:F8:FE:8F:01:FE:04:5F:1E:57:A9:86:16
Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
Certificate issuer: /CN=c20e65caddbecd48d2f87787993113842bdfce5d
Certificate serial: 019A4F6285A2FE13B491460A8E3FD724E078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
Manifest number: 1195
Signing time: Tue 04 Nov 2025 15:00:48 +0000
Manifest this update: Tue 04 Nov 2025 15:00:48 +0000
Manifest next update: Wed 05 Nov 2025 15:00:48 +0000
Files and hashes: 1: 7kdmagU4QbQazPFAKJN_jh3ESjI.roa (hash: UKie7fx67vGuUXCr+OJM9sf2md8+FYbcDpZ0gOMQ3f0=)
2: oMWup55nUaojGXh2IYtrkxVaIxk.roa (hash: IgvfZQFj2syunyqqYTcXoGNSKYWlXxrN3iDEjFeptJ0=)
3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: YvXEEdCOlBgQOnA18zyZWz2xZbL4aRWoVLujRyuT6qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:85:a2:fe:13:b4:91:46:0a:8e:3f:d7:24:e0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d
Validity
Not Before: Nov 4 15:00:48 2025 GMT
Not After : Nov 5 15:00:48 2025 GMT
Subject: CN=688f855311d75135f8fe8f01fe045f1e57a98616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:4f:ba:5b:a4:f1:96:67:0e:eb:0a:90:3e:
54:07:88:2b:a5:5d:51:08:b3:2e:ef:1c:97:42:3f:
65:b3:2c:be:93:ee:b2:4b:ae:54:b2:6b:0a:ed:66:
48:1d:59:cb:dd:39:47:25:87:7b:48:2e:a4:82:55:
15:d4:15:74:a6:bb:42:a9:1a:7c:74:e9:52:b5:56:
62:5a:0d:eb:9e:f5:63:14:27:7d:15:c8:f0:56:38:
18:f9:5b:e9:c0:14:70:27:e7:ea:81:27:35:41:4a:
e6:4e:6f:39:6e:2d:ab:54:d9:bd:25:e5:5c:8e:5a:
97:88:24:0b:fb:6d:04:39:3b:08:ce:fc:6f:91:54:
84:71:aa:89:ea:75:0f:c3:96:50:af:f9:e6:36:ad:
62:15:57:1e:fa:31:15:27:85:36:f2:8a:d4:cf:37:
03:50:35:c2:e4:51:b8:13:77:82:e0:6c:20:d0:7b:
35:4c:f3:ee:92:89:7c:69:8a:bb:b0:d2:ad:35:2d:
30:56:17:99:da:9e:9e:af:b7:8b:4b:0d:04:8f:a6:
05:ab:7d:20:90:e2:da:81:52:09:4e:17:f6:f1:dc:
4e:2c:70:ba:85:30:34:40:78:40:26:92:a7:53:13:
7a:86:15:84:54:09:ff:42:65:0c:cb:29:8c:30:86:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:85:53:11:D7:51:35:F8:FE:8F:01:FE:04:5F:1E:57:A9:86:16
X509v3 Authority Key Identifier:
keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:20:8e:f9:c2:13:f0:77:6f:e2:ca:90:54:ef:e6:5d:ff:7d:
08:ae:51:9b:dd:71:c4:fd:64:fd:91:d8:5f:74:e5:a3:06:a8:
be:4f:92:ec:d8:cc:38:35:52:49:36:df:0a:39:e7:2f:68:f2:
c4:6b:0c:73:7a:0c:81:41:7a:c0:e6:f0:c3:d0:df:87:d1:84:
7c:b8:24:a3:ae:23:2b:33:62:0d:2f:4a:35:80:19:c3:01:a6:
95:0e:08:61:f4:a0:cf:eb:26:16:4b:be:29:17:f2:b5:a8:e4:
e8:0b:b5:31:8a:7c:99:82:6c:13:6d:f1:a4:b5:c7:34:27:aa:
58:26:7e:38:16:e3:db:64:53:d6:73:0e:68:46:e1:59:7c:59:
40:5c:8b:33:5a:2b:2f:12:66:1c:16:44:d8:5b:24:64:95:ef:
76:8c:c3:ca:76:2d:aa:0e:24:56:75:9d:08:be:c7:4d:be:f9:
ed:b4:68:48:b2:68:7a:0a:73:9c:37:84:02:6c:08:24:9f:5b:
e0:3e:6f:dd:56:6e:f0:bf:1b:a9:a1:a2:b7:04:91:1f:7f:af:
06:0d:ea:f6:41:d8:5f:9e:c2:20:ee:fe:08:4c:54:47:ab:99:
3b:86:aa:0b:ce:4f:fd:c9:fb:6a:e8:50:f1:24:92:5d:da:67:
bc:e3:e0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:13 2025 by rpki-client