Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
File: WgrUZVrtB8R0FuepRWBHlOuol6w.mft (raw, json)
Hash identifier: N7nxsGIPRnaeTWgSmjfPNWDgm3pMbz6te9gU7KdbJzY=
Subject key identifier: 39:74:C4:65:7E:86:BF:FA:25:FB:E9:5C:42:89:18:9E:F1:16:60:29
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 0199FC8F1F55C9D770F7A7EB5451FED5F01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
Manifest number: 1227
Signing time: Sun 19 Oct 2025 13:01:02 +0000
Manifest this update: Sun 19 Oct 2025 13:01:02 +0000
Manifest next update: Mon 20 Oct 2025 13:01:02 +0000
Files and hashes: 1: NvAPv-l4cBrLTji2iXv6GfI0gZg.roa (hash: BBOKh5jKHRu7y0Xpwzm9dX9BwYJwDLK16Nc2ib6JODU=)
2: WgrUZVrtB8R0FuepRWBHlOuol6w.crl (hash: MSGqau4pl6O+jI8b44fxa9bcid0uOBMfWZlLgzguIdg=)
3: aKrvV8xBl8sCHisqRYKu_FgNh7A.roa (hash: VWMQXxpmmku9lvmyl+DypVcQSIrG+GnuaLnSwfYRfGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:1f:55:c9:d7:70:f7:a7:eb:54:51:fe:d5:f0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Oct 19 13:01:02 2025 GMT
Not After : Oct 20 13:01:02 2025 GMT
Subject: CN=3974c4657e86bffa25fbe95c4289189ef1166029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:42:02:9a:2f:c2:6e:ae:0d:3e:00:b8:15:
f9:ce:69:23:07:7c:09:aa:60:bb:59:6f:96:ff:b7:
c4:4a:7d:9e:c3:20:5e:e1:93:5b:4a:ac:b0:94:ea:
7d:cb:27:9d:a0:cc:8e:e8:af:d8:2c:e0:32:b7:21:
ab:93:84:46:62:32:f7:80:4b:ae:5c:c7:03:c5:f8:
ce:cb:c6:0c:0d:5f:6a:26:83:30:f1:bf:85:ac:51:
3b:9c:18:fd:7e:e2:0b:76:1c:cc:e8:6d:e2:40:4a:
f5:80:cf:d8:88:51:24:9e:b9:50:31:fc:dc:6d:a0:
c5:59:d1:4d:c2:87:6f:83:c4:d3:c2:0f:de:66:8a:
df:d8:62:2f:3d:df:61:d3:bf:68:75:02:d2:3f:9a:
7e:8d:35:20:83:39:b2:21:df:4c:c1:7b:5d:6f:e7:
29:ff:8c:57:f1:db:6c:3f:51:bd:d7:e3:f1:77:30:
53:e6:5c:e6:32:9b:a0:b9:34:38:9b:06:3b:83:2f:
e8:20:79:10:52:6b:c7:df:10:97:a2:e0:f8:20:73:
0a:90:f5:53:ef:de:67:38:85:41:67:e5:27:06:e1:
8d:f0:54:54:11:8d:2d:ab:c3:5b:58:36:0a:37:07:
7b:ca:52:ac:dd:aa:fc:27:b7:f4:37:5f:4e:21:04:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:74:C4:65:7E:86:BF:FA:25:FB:E9:5C:42:89:18:9E:F1:16:60:29
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2e:56:9d:d6:f8:db:aa:91:f3:9f:dc:d6:2d:0f:c6:46:e6:
6a:b8:ad:99:be:72:20:22:6b:5a:8f:78:01:d7:ec:9f:88:67:
91:77:80:ef:25:61:d3:bf:c6:ae:6f:2b:59:22:08:4f:42:e5:
b2:75:35:52:1f:74:9b:72:80:47:c2:44:38:1d:cc:8a:bf:e9:
42:ec:77:1b:3b:10:71:3b:94:68:7b:e7:d6:d3:6f:20:d5:14:
df:5f:d4:d9:40:43:64:d1:88:1b:a8:d2:b8:ea:1b:f8:79:3b:
79:21:70:80:a1:73:ac:ca:19:61:05:ff:a4:4c:7c:b0:08:df:
1f:8b:fd:ec:14:f7:1c:1b:eb:5c:59:30:3a:c3:88:74:2b:58:
0b:4b:09:2c:c0:1c:02:ce:40:28:21:f6:71:f2:69:42:ce:84:
89:ac:27:db:0e:55:6e:c2:ba:79:0d:f8:cf:f3:8b:4d:c7:d2:
7b:f1:cf:34:3d:3a:23:e3:2f:3a:86:bf:cc:c9:bf:c1:d1:34:
3c:b5:35:9c:9c:c4:24:89:00:37:49:05:01:13:7e:39:42:c5:
70:e9:c2:e3:f9:5b:51:ad:29:5d:ad:5a:b5:d7:4f:5c:c8:67:
10:97:99:f6:df:60:4e:3a:e8:46:7f:ac:11:30:a7:d1:43:17:
cc:45:f8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:17 2025 by rpki-client