Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
File: wSgWX47uGF-q-aozh19O5BKxD4w.mft (raw, json)
Hash identifier: 1mrFGzsqucqZdPDRqwBpaFDye9WVDQ+95uozw1MoKi0=
Subject key identifier: 27:C4:69:FB:25:15:59:30:52:DE:BB:C5:77:34:29:32:CD:5C:DC:CD
Authority key identifier: C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
Certificate issuer: /CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Certificate serial: 0199FBEB738AB55C82CCF6C906BB6F2B7310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
Manifest number: 10DC
Signing time: Sun 19 Oct 2025 10:02:15 +0000
Manifest this update: Sun 19 Oct 2025 10:02:15 +0000
Manifest next update: Mon 20 Oct 2025 10:02:15 +0000
Files and hashes: 1: IGaAmqWaXDC8Jd-8Qa85p2QBKSs.roa (hash: m3bXj57F8BUs8aS9v6HaMmQ2fB5Rx7CSbbCBnNNdBUY=)
2: wSgWX47uGF-q-aozh19O5BKxD4w.crl (hash: r6nEYB3a4I+gq24KU1dnaaTWAOxF+KtZK8QY28g87gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:73:8a:b5:5c:82:cc:f6:c9:06:bb:6f:2b:73:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Validity
Not Before: Oct 19 10:02:15 2025 GMT
Not After : Oct 20 10:02:15 2025 GMT
Subject: CN=27c469fb2515593052debbc577342932cd5cdccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:44:d5:f0:b1:9e:ff:96:48:b8:db:39:76:d0:
c6:8f:26:89:33:16:a7:24:1e:89:12:10:e9:66:04:
fc:24:83:57:9a:fd:5b:44:2c:04:66:69:36:d4:7c:
df:a8:ac:b3:4d:21:8a:72:0b:ca:bd:87:4e:55:85:
ed:a8:c1:f5:70:77:1e:94:28:54:4a:54:6d:c0:60:
c7:93:0a:12:1d:c1:fe:26:f4:7e:79:db:e9:9f:cb:
73:ec:73:08:ed:bc:ed:72:7a:3f:e2:e4:9e:73:fc:
4b:64:b4:8c:24:d9:55:b7:0b:f5:b2:1e:2e:63:af:
73:1a:58:b6:b7:4b:98:b3:ea:aa:06:e6:c8:4f:9b:
82:a0:fa:54:4e:81:f2:24:34:ac:a2:e9:cb:eb:83:
0f:ab:17:f7:58:34:8f:0a:67:c9:6a:76:5e:e3:8b:
ac:b1:b2:5f:2b:ce:3f:df:66:43:d0:69:70:71:8e:
c7:aa:76:ed:09:f1:6c:98:ac:0b:aa:d3:a6:64:ff:
fa:a5:95:3f:62:cd:a8:19:ce:28:4c:d0:0e:76:c4:
bb:29:25:c6:e1:e0:63:8d:75:50:a1:7b:d1:fe:b6:
00:f4:59:89:55:ef:89:f5:45:3b:ee:78:0c:e5:61:
38:74:24:2e:3f:cb:09:4c:6a:22:07:97:19:f8:ff:
8a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C4:69:FB:25:15:59:30:52:DE:BB:C5:77:34:29:32:CD:5C:DC:CD
X509v3 Authority Key Identifier:
keyid:C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2b:14:62:65:d6:b4:5f:0b:9a:82:af:eb:ee:a6:83:9e:21:
24:f2:bf:a1:c9:e0:15:ba:23:0d:33:7d:8f:71:2b:15:12:cf:
4a:ce:a6:95:44:33:b4:88:45:b4:9f:00:96:a5:e8:28:e5:05:
80:2c:3b:73:71:d8:ed:04:ab:9a:e7:8c:c8:e5:17:d7:51:35:
29:22:b7:47:04:07:a1:6b:3a:44:5d:7f:91:c1:3c:e5:ee:04:
83:4c:3b:53:8c:3d:ce:85:0e:b9:76:f7:14:de:a5:c7:ea:d6:
fd:0b:5d:c2:24:21:89:65:fa:eb:31:4f:80:26:19:db:7d:96:
6b:1e:db:c9:3f:cd:a6:77:d3:42:8d:5c:80:f3:d5:66:16:28:
44:87:94:a0:95:02:cb:7c:f9:3e:2a:00:d7:56:76:91:b2:3d:
e7:d6:5d:08:94:d8:e5:8b:46:e7:e5:d1:79:21:e2:b8:d0:54:
a2:e8:cc:6b:b2:3b:ce:e7:97:3a:e8:ab:fd:64:49:22:c4:28:
8a:98:16:f6:70:51:a4:fc:85:70:e8:20:f4:bb:a0:4c:34:54:
c4:18:f1:cb:c8:c3:b6:ab:b0:11:dc:03:d6:fa:dd:5e:1d:0a:
b5:c1:9f:9c:01:57:89:e7:30:8d:68:9b:1d:cf:57:29:ce:e6:
9c:b0:79:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:27 2025 by rpki-client