Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
File: wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json)
Hash identifier: Jzz4FVIIMl4UmUUu6JI8CV7hQ7UD8h0dNry6XSVyq1g=
Subject key identifier: 09:6F:68:ED:D2:65:B7:2B:93:2A:2E:68:96:F0:00:C4:9B:2D:B2:36
Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
Certificate issuer: /CN=c272d4761240359acba8a337d3ac3a9397925a72
Certificate serial: 0199FC217469B8E1E128295B8992396FB125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:14 +0000
Manifest this update: Sun 19 Oct 2025 11:01:14 +0000
Manifest next update: Mon 20 Oct 2025 11:01:14 +0000
Files and hashes: 1: 70HJo7jmffKHG2PpOcP0KSY9roI.roa (hash: DYvGlsMyhOdp02WTRHANgmcPEVdr2t5PTlBu3xJcVlU=)
2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: dM5rCK3CVJAX0N5nLpZ2IuHAzjVXLARwcyyt9bdrcnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:74:69:b8:e1:e1:28:29:5b:89:92:39:6f:b1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72
Validity
Not Before: Oct 19 11:01:14 2025 GMT
Not After : Oct 20 11:01:14 2025 GMT
Subject: CN=096f68edd265b72b932a2e6896f000c49b2db236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:88:ea:7d:ef:38:85:dd:05:d2:21:20:5d:57:
94:56:29:72:8d:2d:33:d5:dc:cb:0f:32:98:58:85:
d9:93:69:1f:b6:9b:9c:d4:50:b7:17:95:82:5e:1e:
4a:e4:64:11:e7:30:02:d5:ac:38:2e:ca:52:1b:d9:
fc:a7:ba:df:8a:a9:a7:1d:1f:fd:4a:79:a3:12:a2:
66:3a:a0:2b:1f:02:50:e1:9f:0e:c9:c6:1c:34:0f:
5b:89:7b:0b:66:62:7c:fe:8d:87:b0:1e:8f:62:0b:
36:6f:14:7b:36:f2:ea:60:ba:db:d3:54:69:92:8f:
eb:1a:2e:38:9f:36:f2:c7:85:cc:6a:4a:f8:33:01:
13:d0:4e:3c:48:1d:18:cd:60:d8:94:e6:c3:7a:83:
5f:e5:87:fa:6d:b6:d8:5e:44:7f:66:55:14:7d:89:
61:a8:16:d3:7f:7a:9e:7e:d2:b8:88:fb:18:69:78:
f0:af:a7:04:51:19:d2:e2:36:11:dc:56:90:dd:a6:
db:ca:7f:12:ed:31:a7:0f:49:0d:b0:6a:47:b2:60:
19:68:e5:14:78:c7:7b:a4:47:9e:25:8b:48:0e:d4:
27:30:cd:8b:a5:72:a2:59:8a:c7:31:6d:73:76:b1:
78:99:30:af:d3:e5:d8:56:1c:6e:7a:69:56:39:e5:
ed:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6F:68:ED:D2:65:B7:2B:93:2A:2E:68:96:F0:00:C4:9B:2D:B2:36
X509v3 Authority Key Identifier:
keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:23:6f:31:b0:ad:8c:66:48:85:fb:5c:11:b0:95:74:d1:6f:
a6:3d:c5:4e:83:4b:22:21:84:84:94:91:54:47:99:78:08:b7:
9e:b4:74:0a:c5:0b:b4:94:33:5c:ed:14:b2:3c:fc:25:a9:12:
e3:c7:e6:06:b6:3d:c3:09:2f:ee:7f:40:0d:61:26:d4:c1:d8:
1e:30:44:44:2f:c3:a7:a2:85:dc:7a:38:91:8b:16:42:d9:4f:
39:50:21:86:35:1f:ea:cf:fc:a1:c3:12:f5:70:fd:a5:e2:7a:
e7:b0:e5:5a:b7:2e:9c:8c:a2:04:2d:7c:f0:a3:c2:40:a4:71:
b2:45:e1:de:e6:9b:32:18:75:90:a3:6e:71:e7:9f:f2:34:a7:
6e:0a:46:86:9a:af:61:e9:a3:23:b9:bf:0a:46:df:03:86:0d:
47:27:8f:c8:42:59:c9:f4:ec:ac:88:1f:36:0a:64:65:e2:c5:
0f:72:00:5b:06:0c:ff:a5:72:fb:9e:2c:f0:e8:dd:09:2d:be:
92:cd:6b:5b:ac:49:77:bf:38:5d:09:0f:8e:56:eb:39:ab:41:
87:e8:90:38:88:05:17:33:e8:9e:8c:92:2b:90:cb:eb:47:50:
e3:cd:46:d2:05:01:af:94:d4:cd:55:1f:57:c5:64:8c:a0:8a:
bc:0b:f8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:49 2025 by rpki-client