Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
File: wg8AjBzMpi5vw1bWNCBVpifcbPI.mft (raw, json)
Hash identifier: g7qNlB99tGZ9VhvdoQqW8venr4vMRxEef5LnlWeFazs=
Subject key identifier: 35:D0:0D:09:46:61:07:E9:56:FF:CD:08:EF:68:B4:16:B2:0D:9D:5C
Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
Certificate issuer: /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Certificate serial: 019A50751F0740DEB1679A89A141EB46A216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
Manifest number: 04FF
Signing time: Tue 04 Nov 2025 20:00:44 +0000
Manifest this update: Tue 04 Nov 2025 20:00:44 +0000
Manifest next update: Wed 05 Nov 2025 20:00:44 +0000
Files and hashes: 1: CGLcLVB_nqLd9iNoes6GRQjCoVY.roa (hash: PUaaifTKcP0kb/F/TYWEggzMP0VnUab0IhVecDySCrE=)
2: wg8AjBzMpi5vw1bWNCBVpifcbPI.crl (hash: rv80seoClVOuAgzaWGyV2+Zs9KdO6Ox3uoECglS7I9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:1f:07:40:de:b1:67:9a:89:a1:41:eb:46:a2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Validity
Not Before: Nov 4 20:00:44 2025 GMT
Not After : Nov 5 20:00:44 2025 GMT
Subject: CN=35d00d09466107e956ffcd08ef68b416b20d9d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:65:5a:bb:b1:62:68:91:7f:f1:3b:db:ae:
0c:27:94:ad:a9:51:3f:16:e0:27:f6:f9:c8:52:81:
3a:1d:2e:a6:c0:68:ff:1b:13:92:35:02:1c:7d:f9:
aa:57:f2:be:27:a4:b1:a5:8e:0e:a3:a3:dd:48:27:
a2:85:77:0e:41:43:7d:f7:5c:7b:bc:dd:3d:96:c0:
8e:2e:67:16:80:0a:e5:f6:10:79:6b:44:1a:ad:1f:
d5:71:cd:7c:72:09:ec:a0:05:14:15:c5:b1:18:75:
bd:c7:6a:0b:52:2f:d2:ed:9d:7b:97:d1:ac:4f:aa:
d3:44:ff:19:73:ee:22:e9:82:38:b7:79:ed:4b:08:
99:8c:47:2e:8e:84:3d:bc:97:f3:eb:59:e3:5e:19:
62:8b:32:3f:17:a4:1d:44:2a:bf:2e:13:dd:78:cc:
75:9d:39:d8:0e:fb:2f:6d:42:13:6a:ce:e7:66:c6:
b1:65:9d:3e:34:ee:c0:7b:56:23:95:22:a1:52:68:
44:58:47:d7:15:6b:3d:de:d5:a5:14:11:b0:01:97:
80:b7:7e:38:22:3b:13:1a:f1:89:75:51:dc:f9:96:
5a:a1:ff:0e:ac:07:43:b3:21:22:74:8b:d5:fa:f8:
22:9c:e2:9e:40:6d:2e:f5:10:8e:3f:a3:c1:46:8a:
49:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D0:0D:09:46:61:07:E9:56:FF:CD:08:EF:68:B4:16:B2:0D:9D:5C
X509v3 Authority Key Identifier:
keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:25:48:0c:73:35:69:c8:a8:92:79:fc:7f:79:66:d8:18:76:
14:24:85:37:e5:c4:17:8b:c8:39:f6:6f:3d:72:50:41:63:f9:
ee:ca:fc:7f:e9:a2:c7:af:39:a7:69:1a:f3:b0:34:08:07:f7:
1c:2c:67:8f:d7:2b:7e:00:b8:18:f8:6b:22:cd:1c:5c:1f:50:
5b:79:fb:83:8a:dd:99:16:37:9e:5a:39:81:69:7d:8d:cb:56:
4d:33:91:1d:bf:ab:14:97:3b:08:f7:06:ed:0a:09:be:34:ca:
ea:75:28:60:b8:dd:bb:c3:32:a4:72:ad:e2:06:3a:d6:e4:91:
58:dd:f1:3f:19:46:03:a7:c4:43:57:74:bb:10:c4:33:63:90:
e2:cb:77:6b:4e:e9:fa:a0:e6:b2:96:d2:5d:97:48:e3:cd:47:
17:15:ab:77:aa:78:37:6a:6d:af:f7:56:1a:2d:ca:3d:17:67:
e1:91:4c:67:be:3d:c0:aa:ef:82:ec:87:96:11:18:7b:1f:f4:
44:86:4d:cb:fb:3c:e4:7f:5a:79:2d:61:9d:4f:a9:2d:95:4e:
94:a7:30:a9:ab:2e:b5:ca:70:a8:b9:f1:53:88:a8:00:39:15:
4e:ce:02:ee:7e:74:92:0a:81:1a:8d:2b:33:47:8c:91:0e:e1:
9d:56:6c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:14 2025 by rpki-client