Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
File: PUx4cBk93824kLZkfMi1bBGW_wg.mft (raw, json)
Hash identifier: MIRccK1QDnqYv77x1frhUpkQfGTAphBlos06BfX26Vk=
Subject key identifier: 52:A6:4D:0C:8F:67:22:B4:2C:77:38:33:F5:9A:29:F1:FA:09:22:9A
Authority key identifier: 3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08
Certificate issuer: /CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
Certificate serial: 0198D65F13220CBA23C4D12D622A33E2D63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
Manifest number: 119B
Signing time: Sat 23 Aug 2025 10:00:11 +0000
Manifest this update: Sat 23 Aug 2025 10:00:11 +0000
Manifest next update: Sun 24 Aug 2025 10:00:11 +0000
Files and hashes: 1: 35NCpv0Oz6uQPI44W6WG3M5yYs4.roa (hash: JBTWGmE2iSKylKwI1WUPUhWSA2P7T3aiR9SueNbm1BQ=)
2: PUx4cBk93824kLZkfMi1bBGW_wg.crl (hash: qE3YleOFQ0SR9U8pMEy/oi7w0eVLkUcequPCXKowIgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:13:22:0c:ba:23:c4:d1:2d:62:2a:33:e2:d6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
Validity
Not Before: Aug 23 10:00:11 2025 GMT
Not After : Aug 24 10:00:11 2025 GMT
Subject: CN=52a64d0c8f6722b42c773833f59a29f1fa09229a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:c0:21:80:7d:25:0d:47:8f:be:6f:8c:ed:
ca:97:ec:33:48:2a:be:69:a8:e7:98:6c:fb:f3:ef:
40:6c:88:f5:e0:e6:b9:31:69:e2:77:68:d1:b3:20:
0a:d3:7f:65:74:d2:64:5e:e4:84:fe:09:7f:ac:06:
0f:85:27:a6:a8:da:61:a5:23:72:e1:b6:f7:c6:21:
48:44:cd:5c:84:ba:f8:ac:1d:70:f0:b4:49:eb:a1:
53:05:3f:6f:2c:c7:30:3f:db:cf:71:90:05:ec:0a:
3d:b7:68:e1:b3:3f:e5:0f:34:e8:87:2f:56:50:b6:
58:df:3e:55:61:40:33:2c:28:b1:b4:af:e3:1d:4a:
f3:eb:95:e5:e3:0d:1e:8c:bb:54:f0:20:bd:fc:c5:
14:e1:98:9c:97:59:e1:8b:f0:de:b7:9b:45:fb:fc:
a5:63:ec:50:e4:f4:fe:6a:31:0e:99:88:2c:30:36:
4a:cc:2c:a4:59:68:33:73:6f:a3:2d:d2:ea:b0:07:
96:67:09:b8:b3:4c:7e:5a:62:f2:f3:b7:dd:6a:08:
47:1c:14:a7:8b:a9:cb:37:b5:40:12:19:f0:14:13:
8b:f2:40:25:e9:2b:ff:d1:5e:ac:20:7d:16:f4:da:
df:7a:3c:51:1d:ff:37:ee:a9:14:e8:4d:f9:0c:09:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A6:4D:0C:8F:67:22:B4:2C:77:38:33:F5:9A:29:F1:FA:09:22:9A
X509v3 Authority Key Identifier:
keyid:3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1e:f6:5c:10:bf:8b:6e:e4:25:00:81:62:44:af:3c:a9:1a:
cc:d4:99:67:fd:dc:f9:e9:6e:5d:0f:55:d0:b9:2f:2e:61:3d:
68:7c:68:36:8e:ce:e8:c2:85:43:ac:a4:61:af:04:37:d5:7c:
13:8d:08:bd:22:fd:c2:5c:d0:3a:69:16:2a:8d:0a:56:6b:1d:
21:87:a1:5b:07:30:fd:de:db:de:15:9f:fb:6d:13:55:c7:68:
68:19:ed:94:78:b0:3b:ab:27:a6:bf:2f:1b:b6:f1:32:c2:0f:
ef:45:c3:81:36:ff:55:28:e9:ee:dd:07:74:c0:c6:8a:eb:50:
c7:b5:45:02:28:7f:bc:4b:71:72:b5:6d:a8:98:a3:8a:b5:74:
7b:70:a0:f3:80:f6:9a:90:a3:05:5e:e1:e7:9d:4f:d1:19:4d:
58:5f:96:82:03:6f:ef:ed:79:83:b8:29:de:e7:3c:79:c4:fd:
70:95:ec:3c:71:eb:c2:65:25:16:54:ce:4a:e1:8e:55:13:b8:
44:2d:97:b2:ae:d9:4b:e6:21:c9:5b:af:ef:17:64:03:e1:cc:
9d:17:99:9b:ef:8e:11:8e:70:af:82:1c:b1:7d:76:3f:4f:1c:
83:7e:9e:85:c9:8b:e9:d1:49:47:bd:1f:eb:8f:18:49:3f:b3:
1d:92:4f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:10 2025 by rpki-client