Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
File: wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft (raw, json)
Hash identifier: /kag3twtFX3YRlcNJZ+fywBN6I3s/aASKU9kmKccF08=
Subject key identifier: 14:E4:F9:9A:92:8A:66:1C:5A:07:6D:62:76:4D:9B:4D:42:66:65:C3
Authority key identifier: C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7
Certificate issuer: /CN=c20e52dab06da4175b45c777961f4ea39b9307b7
Certificate serial: 0199FBEBC08D96EC9C8245C0A4F6CDF02217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:35 +0000
Manifest this update: Sun 19 Oct 2025 10:02:35 +0000
Manifest next update: Mon 20 Oct 2025 10:02:35 +0000
Files and hashes: 1: ktQ5-W9g4zZMeAt0G3_-eOcvNXg.roa (hash: PaRvSHJJoV4+LaWhDX1LkioRDCgsWXMWP6C+HnWRO88=)
2: wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl (hash: i59o/BpwfAlbUnbc/WoAhy7yiujn7XHCKSJzozJPhZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c0:8d:96:ec:9c:82:45:c0:a4:f6:cd:f0:22:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e52dab06da4175b45c777961f4ea39b9307b7
Validity
Not Before: Oct 19 10:02:35 2025 GMT
Not After : Oct 20 10:02:35 2025 GMT
Subject: CN=14e4f99a928a661c5a076d62764d9b4d426665c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:8e:bd:bc:41:35:fb:1a:1d:35:bc:66:1e:
d0:af:43:29:55:36:ae:64:6d:fd:27:a9:3b:c2:3d:
42:15:7c:ea:ca:ed:5e:a9:f0:53:b3:04:2d:d5:2e:
c5:1e:b2:ef:a3:0d:df:fd:4a:e7:0e:a2:9b:55:b0:
19:d1:06:ae:c3:26:92:3b:26:c1:14:37:c6:a8:95:
b1:f7:42:a7:4a:02:4f:2b:fb:33:9f:b7:d1:95:ff:
9a:4a:51:01:25:f3:18:c2:d6:55:3c:b0:c9:a9:c3:
64:d7:06:e5:04:06:05:3e:13:dd:18:f9:da:e1:06:
c8:4a:18:c9:37:19:85:d7:dc:96:2e:75:06:73:2a:
a9:30:99:bd:8b:47:da:ce:2d:af:f0:91:62:a7:4b:
29:37:8b:42:71:57:d6:f2:a9:08:b9:5f:cc:33:f3:
2a:96:77:3c:05:3c:93:3c:be:00:06:39:2d:d7:b6:
42:17:32:63:df:c0:cf:82:63:06:36:0d:1e:56:5e:
5a:b1:8d:d9:f7:ff:84:29:dd:2d:f2:f2:e6:88:50:
82:cf:c3:7d:f7:1e:56:55:7f:16:ef:7b:81:2c:ce:
94:67:25:a9:70:9f:d7:8d:37:f0:c5:ad:5c:cd:b5:
44:94:c9:ef:00:2d:32:08:18:b6:16:3d:9b:e8:5f:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E4:F9:9A:92:8A:66:1C:5A:07:6D:62:76:4D:9B:4D:42:66:65:C3
X509v3 Authority Key Identifier:
keyid:C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cc:3e:54:95:17:48:24:cc:e8:a4:e6:04:1a:f1:a2:57:ad:
e7:ad:e5:65:df:b4:ce:cf:88:0f:f6:3a:d9:86:a9:0b:f4:2a:
d4:2f:07:7f:11:b9:5a:07:48:a8:3a:ab:35:b7:4f:f0:53:10:
53:e1:e6:91:54:d0:77:06:c0:07:1c:f8:e7:a0:96:53:24:bb:
fc:99:11:f7:76:05:dd:dc:96:94:db:64:b4:01:fb:2f:52:9f:
42:75:b7:98:63:dd:99:5f:77:2c:20:cb:85:13:0b:3d:a9:36:
3a:6c:96:95:69:57:83:ac:b2:68:19:a1:0a:04:1a:fa:ee:02:
fe:54:a3:41:6f:84:d0:b7:c6:06:12:7e:71:c4:03:40:c4:26:
c2:15:67:9b:02:b0:96:26:3e:cb:11:ce:cb:26:6b:7e:53:d8:
cf:e0:0a:fa:1d:72:11:b6:b8:78:96:da:4e:9e:6a:75:88:1a:
ac:74:a7:f1:5f:f0:05:f8:ae:42:bb:80:09:61:27:64:36:e3:
9c:37:44:08:96:13:a8:9d:83:1e:96:03:80:e9:d3:5f:3c:fb:
5c:2d:b7:a1:dd:e8:58:a3:33:75:79:64:cc:77:0e:05:dc:79:
63:bf:59:f2:40:d4:1f:9d:74:cc:41:06:94:cf:f6:9a:d9:71:
87:38:35:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:38 2025 by rpki-client