Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
File: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft (raw, json)
Hash identifier: OZlX/KV5byHqlBLsduZb5TflZHHozNdO6+hUSugrBsQ=
Subject key identifier: 81:FA:BB:1A:62:9B:64:D2:62:3D:A5:2F:93:AF:99:F8:1F:17:DF:8C
Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Certificate issuer: /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Certificate serial: 019A51BE7399DEAD79817175EE49EB71AA8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
Manifest number: 09DF
Signing time: Wed 05 Nov 2025 02:00:27 +0000
Manifest this update: Wed 05 Nov 2025 02:00:27 +0000
Manifest next update: Thu 06 Nov 2025 02:00:27 +0000
Files and hashes: 1: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl (hash: PaOy+RgbDcKeCtbcC2SkGBPJTutJg/FD1ZsQsf+OuQQ=)
2: fPdaDi8Q6kMa2if35eGudsLEQ8o.roa (hash: vc9oGx1t9ju95rv1gQobwnbtC4KxraULnnXmJJ4pSRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:73:99:de:ad:79:81:71:75:ee:49:eb:71:aa:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Validity
Not Before: Nov 5 02:00:27 2025 GMT
Not After : Nov 6 02:00:27 2025 GMT
Subject: CN=81fabb1a629b64d2623da52f93af99f81f17df8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:5a:69:bc:01:78:61:17:75:47:40:fc:4f:
95:a1:86:ec:96:29:02:f6:2e:33:7c:a0:68:3d:dc:
ab:c9:6e:be:c5:44:be:a8:62:ff:d8:91:bd:da:5e:
77:bc:91:f2:c1:b6:9a:8d:73:67:98:5c:e0:21:4c:
d2:a1:cb:12:df:fb:9c:e1:ad:91:cf:f5:3e:fe:be:
39:e3:81:42:ba:0b:34:54:e0:cd:0f:e0:b7:c9:8e:
a6:f4:72:64:f0:b3:30:ec:34:5f:cd:a9:0a:46:9f:
63:40:de:aa:59:e0:dd:87:81:95:b3:10:6c:17:83:
3b:6f:17:9e:11:75:9e:d5:fa:b8:44:c7:03:07:18:
3b:cb:0d:93:87:e1:2d:09:95:f0:09:26:7b:ac:7a:
84:76:60:89:57:1a:a0:89:f6:ea:43:10:70:6b:af:
67:f8:6a:da:14:33:8a:fd:bd:71:58:1e:ff:87:2b:
74:b9:56:5e:87:0a:7d:c7:8d:0a:6c:51:70:67:24:
68:82:15:4f:eb:76:15:1b:fb:9f:a7:22:28:ca:72:
d6:4e:4f:0c:d8:71:11:87:e3:15:ca:e1:30:1e:2d:
a8:c6:4e:a0:51:60:44:29:a7:4a:ec:9c:57:fa:09:
61:02:2d:9f:5d:b9:10:82:c2:74:74:6c:84:e9:c5:
88:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FA:BB:1A:62:9B:64:D2:62:3D:A5:2F:93:AF:99:F8:1F:17:DF:8C
X509v3 Authority Key Identifier:
keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a9:ad:5e:07:7f:f7:5d:3e:d9:94:2b:07:a5:aa:b2:07:8f:
94:b7:ad:e2:d5:d6:87:77:70:43:d4:84:97:6c:cb:c7:24:5d:
85:05:0d:77:4b:fc:47:ee:32:22:a0:c7:a2:93:b8:78:5e:48:
d3:69:18:59:61:a6:06:34:96:66:1e:00:12:68:72:c6:8a:12:
e2:fb:b5:f0:94:e8:2c:97:71:91:9c:0c:ca:19:2e:be:45:0a:
4f:27:5e:06:71:5f:fd:4e:40:b0:00:66:1b:ab:03:2c:11:2d:
b4:1c:95:2f:d6:0a:7d:16:9e:9f:d7:6f:0b:72:dd:61:44:ee:
de:d2:d8:f8:80:3d:a0:2a:47:ad:61:a4:10:a4:94:ab:a3:ae:
87:b1:69:aa:bb:19:e7:35:08:02:78:c2:e8:43:0a:1f:eb:fd:
15:69:54:bc:78:f8:f2:2b:0f:0e:65:73:88:dd:55:63:a0:db:
88:69:cd:3e:b4:7e:53:82:e5:bc:24:d0:d3:74:b7:db:4c:fd:
cf:0c:ce:9c:da:2d:b6:33:34:31:79:30:19:e2:18:8a:29:58:
90:f4:a8:df:cb:4c:a0:39:5e:4e:b9:97:21:37:d8:bf:d7:62:
3b:d9:16:08:fe:6c:db:76:46:1b:4a:c5:56:7e:7a:4d:90:e4:
d8:7e:c4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:18:09 2025 by rpki-client