Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
File: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft (raw, json)
Hash identifier: scl8AvpjmIEH/a2BYT/Jqemq2jrNSGTTr/70C4UBcRU=
Subject key identifier: B7:C4:7D:5A:3A:C5:2C:D9:63:30:02:4E:DF:FB:30:29:E7:3D:40:32
Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
Certificate issuer: /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Certificate serial: 019A4DE187D085B81C5F9A91EA4FC3D0D067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
Manifest number: 0985
Signing time: Tue 04 Nov 2025 08:00:17 +0000
Manifest this update: Tue 04 Nov 2025 08:00:17 +0000
Manifest next update: Wed 05 Nov 2025 08:00:17 +0000
Files and hashes: 1: U3hg_F1n66wHfUJa1B5AwM1jPe0.roa (hash: P69ebvhq55UOViQWYuaYwNEg2G9WcwEDt0JaOwktWKA=)
2: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl (hash: HNYEK9UuCsnJBlYV4AkkH55iMOJmSJw3ujER/4OC5GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:87:d0:85:b8:1c:5f:9a:91:ea:4f:c3:d0:d0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Validity
Not Before: Nov 4 08:00:17 2025 GMT
Not After : Nov 5 08:00:17 2025 GMT
Subject: CN=b7c47d5a3ac52cd96330024edffb3029e73d4032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:ca:51:3f:62:fe:50:6e:ce:e9:d0:2b:5c:
ab:dc:f9:0e:62:19:30:b7:d1:5d:46:45:9c:ed:9e:
f7:b8:f8:e2:1a:dc:d7:3e:4b:08:54:52:8c:b2:9e:
c2:e4:c5:a8:ed:78:bf:03:62:d1:6b:3c:1b:6a:b8:
e6:ab:ef:41:0a:db:86:41:20:5a:2a:62:6c:33:75:
a1:e1:28:50:fc:d1:60:fe:aa:8b:41:fe:1a:ef:60:
8f:50:b5:e6:a9:dc:bc:65:f5:c7:5e:b9:d2:4a:c7:
bb:6e:cc:9a:8b:ff:36:af:63:a8:7d:de:96:f1:e4:
71:c0:79:a0:ef:af:10:7b:89:3a:05:e0:31:b1:33:
2f:6d:da:06:01:08:30:e8:d6:75:ff:6e:f8:ce:bf:
d0:6e:3f:ca:74:12:46:f4:55:fb:81:91:05:13:8a:
b6:6b:76:21:2f:9f:1c:8f:8b:e9:2a:d4:df:d0:a4:
f2:c4:43:b7:0a:76:c6:2b:e2:92:37:a6:b7:f5:bb:
ec:a8:df:a4:7d:f6:30:73:d0:b7:06:11:25:d5:6c:
fe:58:6c:78:5d:39:d3:c7:bc:02:85:0c:be:cc:dd:
02:e9:61:cd:89:b9:32:02:8e:d3:08:c4:7f:40:94:
41:ce:6b:de:7e:4a:1b:20:28:03:72:bd:73:5d:79:
5e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C4:7D:5A:3A:C5:2C:D9:63:30:02:4E:DF:FB:30:29:E7:3D:40:32
X509v3 Authority Key Identifier:
keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6c:f3:2b:7d:d9:17:a6:fa:c3:d8:ea:80:e7:d6:4e:2f:7e:
47:88:60:19:ad:1b:fa:05:c6:25:b6:34:01:12:3a:89:2d:85:
ed:66:f0:8c:0b:fc:db:89:54:68:ea:21:b9:55:d6:81:ed:62:
4d:6d:53:a7:45:b6:34:30:e7:36:31:68:8d:f3:84:e7:eb:e6:
4c:d8:25:7a:38:8e:54:61:b0:96:5c:62:bd:52:09:72:d0:1f:
ba:ee:96:fb:a5:b4:35:b5:f7:93:e5:56:ab:3c:d8:65:fe:3d:
ac:8f:d5:3d:c5:12:9e:58:f4:79:06:db:76:13:a3:f7:f6:53:
63:54:43:59:66:9b:bd:09:7c:97:c0:2d:a7:8e:82:28:01:17:
dc:74:e3:8b:00:e1:bb:e0:2a:7b:54:f9:df:8d:0e:b2:2c:b3:
da:01:c6:16:cf:c3:16:ca:0b:1e:c4:21:cf:6c:cf:99:c8:8f:
32:94:59:89:89:5e:2b:5e:3b:4a:4e:45:be:a7:df:ad:55:1a:
a4:bf:1f:4d:f6:73:14:d3:0d:d7:59:0f:58:0f:b3:8c:dd:8e:
ed:29:a8:2f:0c:83:bb:4d:ea:64:84:55:fc:47:62:09:28:4d:
03:30:61:f8:5a:eb:a4:ac:9c:08:8c:24:ca:a1:9e:3f:79:d8:
55:c2:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:13 2025 by rpki-client