Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
File: WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft (raw, json)
Hash identifier: 9A/BAhwLRzjr65gmZ686PlE/1KVX1Sx8i4mEvVqhh6E=
Subject key identifier: AC:21:16:ED:0C:81:91:13:E2:29:95:C6:57:38:33:26:57:B0:11:A8
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 0199FFC7143483AB58921F7E0F0D2AD9A5B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
Manifest number: 14E7
Signing time: Mon 20 Oct 2025 04:01:00 +0000
Manifest this update: Mon 20 Oct 2025 04:01:00 +0000
Manifest next update: Tue 21 Oct 2025 04:01:00 +0000
Files and hashes: 1: 8selzdDBcWCOuVgfCsfOfBE5_CU.roa (hash: p2O5tRV4Q6XqdGNl3EZYTg9FiLjgZdrbbWtNR0sxUHQ=)
2: WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl (hash: a22+1+pfADwXvqjndlUia1WbZGqqZtUo45wnawxHaU0=)
3: igZS5QD16n_qiKkVlzEX0Nd3KpQ.roa (hash: s1QAXQBqaJ5SElDe9N3pzr6SkITHndqfwDSrBBBJ6v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:14:34:83:ab:58:92:1f:7e:0f:0d:2a:d9:a5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Oct 20 04:01:00 2025 GMT
Not After : Oct 21 04:01:00 2025 GMT
Subject: CN=ac2116ed0c819113e22995c65738332657b011a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:aa:84:bc:15:39:92:c9:7d:4d:fc:dc:59:
db:71:33:e3:5b:0d:58:56:df:b2:d5:79:27:0e:c2:
b4:bd:b0:d6:d4:1e:d3:23:98:3f:e0:8f:ee:3d:98:
34:f4:be:d3:ad:08:d9:c4:bc:88:c3:c1:bf:81:f5:
b7:6e:4b:be:69:a8:d5:35:05:19:4a:08:8c:9c:16:
50:3b:72:c1:3a:60:7f:b6:5d:58:1d:b8:20:2a:46:
9f:58:89:3b:5a:97:19:04:8d:5f:4b:85:ec:26:e3:
0b:6f:17:f0:1b:db:3d:a9:3c:9a:89:93:b7:2d:2e:
fd:f7:d6:52:cd:bb:84:e6:1e:35:72:a1:cc:0c:61:
db:0f:7d:49:ac:c4:b2:7a:9d:b5:18:e8:89:91:ce:
49:f2:14:d3:b6:b4:c5:7f:87:7e:1c:78:6d:0f:5c:
69:65:d4:dc:70:a4:28:6e:7a:28:6b:fe:0f:95:07:
2f:bb:47:03:be:f9:fb:de:2b:1d:77:38:09:4c:ef:
7a:15:2e:04:10:1d:eb:f3:4b:18:10:74:2a:e1:b0:
05:9d:d5:d8:7a:b6:f7:fe:f0:63:69:b2:d2:e7:38:
14:34:9f:47:4c:f7:36:90:64:ea:3e:1a:1e:98:fd:
01:3e:65:66:50:a5:71:0b:31:0d:2d:5b:d2:0e:32:
22:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:21:16:ED:0C:81:91:13:E2:29:95:C6:57:38:33:26:57:B0:11:A8
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f6:f1:5a:cd:23:d2:3e:0e:c6:5f:7d:5f:26:ac:91:e2:43:
25:40:0a:21:89:75:78:2a:5a:45:3a:dc:98:f2:0e:78:fd:6d:
56:ae:0b:c3:dd:25:ec:58:22:2b:4f:b4:a8:c0:2e:23:f2:32:
43:d7:37:fe:23:3c:95:77:dc:71:29:82:86:e8:0e:a2:9c:d8:
51:4b:19:68:d8:64:d4:24:d2:97:cd:ec:d3:2f:50:76:5b:17:
eb:88:e5:ce:af:fd:54:a5:f9:ee:c8:8f:5f:55:46:b5:12:30:
75:55:bd:43:c6:98:f8:6c:bd:f9:3f:23:4b:19:40:5c:e9:52:
42:5f:e7:a3:25:46:c7:b9:53:57:7a:34:1d:d6:c6:2d:4d:57:
63:5c:73:dc:4c:25:de:97:74:52:ac:2c:30:a9:dd:00:00:da:
10:2d:17:cc:79:c8:a2:f6:fc:e8:ac:ae:5e:d7:d3:99:70:18:
bc:13:65:96:06:7b:a2:17:f6:67:e0:e5:14:69:ab:e3:9f:60:
a4:d6:8f:f4:1e:09:0c:d3:7f:57:9a:c2:dc:56:0f:5e:0a:4b:
ff:dd:e6:be:98:cc:38:c9:4a:30:19:d3:bd:ba:bf:7a:68:bb:
d6:ba:cf:e7:db:d8:0c:15:0e:f3:83:b6:4d:93:2c:3f:73:7a:
d2:75:72:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:38:46 2025 by rpki-client