Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: 3kV56dJaQ1ectty3ZoRSCHAJhdwqqUCEswq0NgKxulk=
Subject key identifier: 1C:16:2C:74:6A:31:59:CB:44:03:5D:50:3F:54:E6:C9:30:C4:F9:7E
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 0199FBEB47C12897E0A92D09E5F2E972230E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 024B
Signing time: Sun 19 Oct 2025 10:02:04 +0000
Manifest this update: Sun 19 Oct 2025 10:02:04 +0000
Manifest next update: Mon 20 Oct 2025 10:02:04 +0000
Files and hashes: 1: 1-5XVVmVVHnbWezmHevbBtqQuslE.roa (hash: TCMJyFyTSXpsoaD5GEolasl3XtqDe4iETZ7PPnlIixY=)
2: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: BzwlbCRPwH+umC/ZkPhzYhu5RIQeo0PHQUj0x0R9VMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:47:c1:28:97:e0:a9:2d:09:e5:f2:e9:72:23:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: Oct 19 10:02:04 2025 GMT
Not After : Oct 20 10:02:04 2025 GMT
Subject: CN=1c162c746a3159cb44035d503f54e6c930c4f97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:4e:52:9c:bc:cb:43:90:4e:4c:3b:43:43:
00:fe:db:fa:7d:92:6c:b4:a3:f6:c8:2a:4d:39:b1:
09:dc:10:5e:82:93:03:f5:9d:90:b0:50:97:51:c9:
3b:d6:6e:92:9c:b9:89:4d:20:e4:b1:e9:4a:77:77:
59:f8:35:13:fa:56:9f:19:c4:6e:4a:36:f8:ed:6a:
38:4e:a3:d4:2e:a2:2f:1e:d4:45:83:39:24:9b:88:
1a:b2:f3:8e:92:22:91:bd:ab:9e:4b:06:bc:9d:82:
b5:a9:e6:48:2b:8e:d2:ca:c4:69:25:17:ea:40:e9:
78:95:4b:67:07:69:bf:27:22:aa:b9:4b:21:3e:e5:
96:24:e4:58:4b:29:bc:35:8a:96:38:5c:b4:94:68:
1b:bd:a7:8d:f7:83:94:71:05:ab:67:14:ef:1a:17:
92:1a:1d:c3:7e:2a:be:42:4b:d0:e4:af:3d:a1:0b:
57:c3:23:82:b9:c6:3c:6e:cd:9c:7e:2f:82:92:5a:
8d:09:9d:5a:81:4d:0a:59:9f:fd:d7:55:77:64:f7:
20:7e:a5:2d:d8:59:b1:e5:76:9d:75:1c:bf:56:05:
a0:03:0d:e6:75:41:cc:3a:72:dd:86:99:c0:9c:d2:
55:1e:81:45:8b:cd:08:64:e0:66:35:b1:7d:73:57:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:16:2C:74:6A:31:59:CB:44:03:5D:50:3F:54:E6:C9:30:C4:F9:7E
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1f:24:9e:58:61:74:a7:54:a0:78:65:b1:e5:9e:54:6c:89:
45:51:81:d7:22:5c:c2:79:4d:71:ba:9a:5d:74:da:4c:83:d9:
97:90:f1:92:58:7c:8c:a4:6a:26:30:63:bf:61:f1:35:39:83:
5d:74:3f:55:6d:f9:c5:63:8a:c8:fc:90:e0:92:81:18:72:35:
c0:05:05:39:e0:e4:80:8d:fb:fa:ae:f4:3f:43:e3:59:0f:38:
98:e2:58:8a:4b:d3:93:f2:98:05:51:3a:8f:65:ab:cc:9b:fa:
77:88:dd:4d:20:92:11:c8:a5:84:35:44:f5:33:2a:01:00:80:
95:1b:a5:dd:fe:be:1b:e5:15:ae:c9:17:6f:90:d5:f0:64:c6:
05:0a:91:54:af:a0:f1:89:b4:88:f7:b5:01:1e:9e:53:fe:87:
2c:88:2e:e4:a9:77:59:15:a1:63:55:6b:90:08:91:7c:b7:6a:
cb:a9:79:16:06:0d:3a:f9:24:2c:e9:81:0e:b5:7b:12:21:38:
b3:6e:d7:04:51:8d:21:bd:a1:cf:9f:e7:76:a8:47:77:e1:f1:
f6:99:e3:3a:7d:9b:87:5f:d1:c7:a5:d8:34:af:6c:0e:cd:06:
32:3e:07:32:a1:b8:2e:a0:9b:48:4c:f5:a5:11:14:f7:b9:f7:
0f:51:b8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:56 2025 by rpki-client