Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
File: wg8AjBzMpi5vw1bWNCBVpifcbPI.mft (raw, json)
Hash identifier: PDzvaEaRBjlZIu77iHJc8Klz/1fi1MFBNK3DpLEscaw=
Subject key identifier: 3F:45:07:C4:DF:D1:B1:A5:C2:8F:6D:7A:53:2E:5A:B3:C9:90:8E:8A
Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
Certificate issuer: /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Certificate serial: 0199FB7CBE5A334ACCFE5F1FA2B6BA09C1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
Manifest number: 04D3
Signing time: Sun 19 Oct 2025 08:01:20 +0000
Manifest this update: Sun 19 Oct 2025 08:01:20 +0000
Manifest next update: Mon 20 Oct 2025 08:01:20 +0000
Files and hashes: 1: CGLcLVB_nqLd9iNoes6GRQjCoVY.roa (hash: PUaaifTKcP0kb/F/TYWEggzMP0VnUab0IhVecDySCrE=)
2: wg8AjBzMpi5vw1bWNCBVpifcbPI.crl (hash: c3PSBJIY1tDjbO+e0eOheppu374M8XicC5519rSgq08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:be:5a:33:4a:cc:fe:5f:1f:a2:b6:ba:09:c1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Validity
Not Before: Oct 19 08:01:20 2025 GMT
Not After : Oct 20 08:01:20 2025 GMT
Subject: CN=3f4507c4dfd1b1a5c28f6d7a532e5ab3c9908e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:8c:d5:0c:92:3e:26:50:7e:97:70:b0:cd:
6e:d2:14:13:67:4e:67:b9:b7:cc:02:93:47:8a:f7:
06:fa:e1:be:c4:84:81:7b:1c:af:aa:09:3a:5c:03:
0c:ea:22:0a:e1:e4:2e:2d:71:54:10:da:a4:2e:73:
9a:66:2d:7b:5c:8b:7d:38:9d:a9:75:12:ef:e0:93:
4b:c4:0c:5c:31:53:34:3c:7b:22:39:db:58:e3:ed:
db:c3:1e:fb:0c:a2:8a:38:cf:4f:7d:0e:7c:9c:d8:
bf:3f:c3:e6:42:27:89:2b:84:3d:66:36:43:3b:1c:
85:a6:53:5b:1e:cf:91:13:14:8b:e0:c2:c0:f8:f5:
eb:22:7c:d9:5c:6e:49:b0:d7:8e:91:d4:63:83:83:
ef:a7:2e:a0:5b:7c:d4:68:bf:e0:a2:58:19:78:a8:
52:59:c8:88:fc:81:06:c2:59:58:a9:ef:b4:e7:00:
f7:47:00:84:1c:31:89:97:df:34:0f:ab:49:04:a8:
2b:07:08:29:91:f0:8d:c6:06:34:9e:b9:f7:f1:7c:
54:63:15:d3:e2:84:6a:49:67:49:fd:52:c6:bb:2a:
76:30:83:7d:0d:0a:6e:18:bf:e1:50:61:d4:ab:09:
bc:0c:43:0d:f2:33:a3:56:c7:33:1f:55:c5:7f:e9:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:45:07:C4:DF:D1:B1:A5:C2:8F:6D:7A:53:2E:5A:B3:C9:90:8E:8A
X509v3 Authority Key Identifier:
keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fc:8e:5d:87:6a:d7:2b:b4:5c:49:2d:44:d5:1a:f9:6f:c0:
5a:8b:c3:32:01:6f:42:5b:ce:dc:79:03:28:c1:8c:54:92:84:
c3:fd:ce:e5:45:2b:c7:14:35:cf:7e:99:c1:a4:02:d2:23:c4:
4d:51:6b:a5:03:fe:c9:eb:42:18:60:fb:39:d6:16:d1:4c:4f:
65:57:4d:3c:a6:c0:6a:fa:f9:b7:73:77:29:b4:f7:fd:6b:e3:
b5:00:5d:7d:b7:b6:2a:58:7e:98:ac:79:90:ee:73:97:ea:52:
df:ac:12:f0:78:ea:47:1a:73:59:2f:ca:f3:86:be:fb:71:77:
e1:73:f4:75:04:1e:19:26:26:b4:af:76:29:29:c8:c3:19:ad:
4f:47:a8:36:d2:ca:61:4f:37:52:9a:ee:84:28:65:4c:42:3b:
3a:c8:f7:2e:b3:7c:fe:08:0e:ff:44:0b:e6:ad:7b:4f:c3:ef:
97:49:25:64:6c:71:a2:2b:ce:60:55:79:14:4f:41:48:13:b2:
86:71:27:58:95:e2:be:8e:c9:01:36:cb:81:c8:8c:f8:86:aa:
84:45:6f:bc:90:f9:de:bc:ed:c1:f9:31:e0:44:a3:b1:43:c5:
2a:2a:b9:16:5b:f1:6c:a8:0b:cd:53:71:bb:77:9e:4f:34:04:
17:e5:0f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:06 2025 by rpki-client