Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
File: PUx4cBk93824kLZkfMi1bBGW_wg.mft (raw, json)
Hash identifier: F0hE95PCvDf5VNnLh4zZ06A3Gqkawaq+Nfk7pbqQ0fY=
Subject key identifier: C8:C7:37:70:36:83:AC:02:EF:31:0B:F4:DC:EB:17:69:3D:E5:0D:9B
Authority key identifier: 3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08
Certificate issuer: /CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
Certificate serial: 0199FBEA903FA8994F278A812994A4E2422B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
Manifest number: 1233
Signing time: Sun 19 Oct 2025 10:01:17 +0000
Manifest this update: Sun 19 Oct 2025 10:01:17 +0000
Manifest next update: Mon 20 Oct 2025 10:01:17 +0000
Files and hashes: 1: 35NCpv0Oz6uQPI44W6WG3M5yYs4.roa (hash: JBTWGmE2iSKylKwI1WUPUhWSA2P7T3aiR9SueNbm1BQ=)
2: PUx4cBk93824kLZkfMi1bBGW_wg.crl (hash: PRxwFEQ+s1IuZD7LCyuxj9pT8njxA4RA/4sDXRseJdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:90:3f:a8:99:4f:27:8a:81:29:94:a4:e2:42:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
Validity
Not Before: Oct 19 10:01:17 2025 GMT
Not After : Oct 20 10:01:17 2025 GMT
Subject: CN=c8c737703683ac02ef310bf4dceb17693de50d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:5a:91:64:a1:56:24:0d:f1:e8:28:28:8b:
c5:42:ea:85:a3:8a:3b:45:6e:77:35:54:b1:8e:87:
e7:85:56:9d:77:73:54:c6:fa:9b:be:22:47:30:ef:
25:38:1a:e0:9c:4c:b2:d8:2a:0b:73:18:12:2f:54:
93:23:49:d0:4b:1a:20:ff:30:df:10:a3:eb:48:70:
29:96:bd:ec:0b:4c:5c:cf:93:ea:0d:15:8d:4b:fb:
5a:2c:1f:ef:62:ad:eb:3c:f4:75:ba:5f:5c:4b:33:
cb:6d:c9:a0:4a:f8:ac:b0:a2:24:94:7b:58:af:d8:
fd:d8:36:86:81:cb:70:df:f4:e0:11:59:c6:0c:12:
48:76:df:31:00:9f:b9:0a:7d:c7:5a:55:31:c2:c3:
a7:81:5b:7c:6a:45:ef:70:6e:2c:a3:2a:f7:44:08:
3b:14:a9:45:f5:f6:5d:37:cb:40:41:49:31:b5:f2:
00:19:7c:23:8d:66:c9:68:92:5c:80:b6:01:24:2f:
52:7c:e4:5f:b8:39:fc:54:be:0b:d5:56:77:6e:e3:
f4:9c:79:41:b7:ea:de:aa:a1:9c:61:7d:1a:e9:9b:
b2:5b:32:99:5b:ab:31:88:a4:1b:91:58:35:70:25:
ca:01:79:9c:6e:05:67:e9:51:39:63:3b:a9:b5:4f:
fb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C7:37:70:36:83:AC:02:EF:31:0B:F4:DC:EB:17:69:3D:E5:0D:9B
X509v3 Authority Key Identifier:
keyid:3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ff:7b:86:16:d5:24:01:a9:c5:61:d7:fe:e4:ad:4b:d9:30:
0f:07:d3:ff:aa:68:9b:07:3e:9f:cf:0a:78:bc:7d:b1:c1:12:
5d:ad:c7:9a:18:19:19:73:fe:a0:f4:e2:6b:45:3b:67:31:78:
b8:ac:1c:3b:6f:78:f7:aa:fe:40:03:af:ed:d5:5a:f0:94:eb:
ad:61:5b:01:54:f1:dc:df:c9:40:5a:e6:02:01:55:ea:e9:4a:
4a:c9:e8:c0:58:a3:c3:ea:34:dc:00:3f:bd:d6:fb:73:cf:4b:
6c:ca:28:a9:65:50:d7:f8:ac:33:ca:ce:80:6f:cd:40:e3:bc:
f1:9b:82:dc:85:f8:3c:d8:e5:36:2d:f9:74:69:fc:e7:f1:fc:
76:c6:41:8c:6b:98:8b:d4:6d:4d:55:a8:82:b4:fb:1c:21:79:
a6:e5:7d:28:d3:1a:05:44:04:ba:ac:ec:6f:07:f5:93:cc:41:
44:5f:cd:69:ad:80:19:85:9b:b7:45:9a:e3:5a:ae:80:5f:30:
17:6c:4a:c8:e3:9e:3c:a7:eb:b5:cd:69:4d:b6:69:96:5b:96:
11:03:c1:9e:60:b5:05:6a:f0:96:e9:fa:c3:3f:13:89:e2:9b:
7c:53:18:b0:4d:71:d9:c4:05:f6:dd:87:0c:31:bd:c0:24:19:
2c:83:08:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:50 2025 by rpki-client