Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
File: wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json)
Hash identifier: L8vcSqWVKNKFVnAeJvu0eOGCVJ5ql2KX3vWEkD/trwY=
Subject key identifier: 5E:04:C9:BA:0D:04:4A:F1:33:DA:C0:34:2B:1F:8E:16:F2:E4:A9:E4
Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
Certificate issuer: /CN=c272d4761240359acba8a337d3ac3a9397925a72
Certificate serial: 0198D4A824A4EA4AFE87E0C69CF2E1664EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:45 +0000
Manifest this update: Sat 23 Aug 2025 02:00:45 +0000
Manifest next update: Sun 24 Aug 2025 02:00:45 +0000
Files and hashes: 1: 70HJo7jmffKHG2PpOcP0KSY9roI.roa (hash: DYvGlsMyhOdp02WTRHANgmcPEVdr2t5PTlBu3xJcVlU=)
2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: 9WBhTizV5aLolDgaR3kS4odwDGxI9njgYsh9icHa+xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:24:a4:ea:4a:fe:87:e0:c6:9c:f2:e1:66:4e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72
Validity
Not Before: Aug 23 02:00:45 2025 GMT
Not After : Aug 24 02:00:45 2025 GMT
Subject: CN=5e04c9ba0d044af133dac0342b1f8e16f2e4a9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bb:cd:92:1b:e8:16:b8:21:0e:33:a6:80:22:
48:f8:72:6e:92:89:5b:b0:67:34:0e:ae:05:7d:c3:
f2:23:b9:91:8f:e6:1d:7d:26:5a:99:3a:82:c2:fc:
7a:aa:60:ed:34:f1:72:92:74:d7:5d:58:ab:03:8f:
8b:d8:3d:1c:e3:22:07:e4:23:9c:3c:66:26:35:ab:
36:85:16:0c:c6:26:29:b2:72:b3:db:9e:14:3c:22:
d3:21:a5:ca:9f:50:85:39:31:9a:61:eb:9d:15:74:
51:01:c4:bb:4f:76:1d:fa:26:49:16:16:62:5e:bf:
43:00:ee:d0:99:b9:5b:7b:bf:1e:bd:9e:25:0c:5b:
13:19:83:3e:26:1c:d0:20:f7:4d:34:de:84:82:23:
f3:db:a0:b8:d8:1f:a4:9a:43:d2:08:3c:53:79:de:
20:d0:8a:e0:ce:db:cd:47:9e:ef:2c:bd:ef:01:a6:
bb:65:ca:96:f4:b9:ee:9b:8b:bd:05:c2:f2:aa:7d:
a5:00:e6:34:33:32:25:25:da:08:4a:d1:1e:0f:9a:
c9:66:86:74:37:53:87:91:57:be:0c:bd:85:b0:8d:
33:13:b1:83:53:db:4f:04:db:68:4b:43:07:e4:40:
e7:96:0e:0c:3d:62:30:fd:2f:50:32:f0:15:0a:23:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:04:C9:BA:0D:04:4A:F1:33:DA:C0:34:2B:1F:8E:16:F2:E4:A9:E4
X509v3 Authority Key Identifier:
keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:eb:93:49:51:9a:86:25:d1:23:82:b1:71:c4:88:cf:6f:e7:
3b:87:f3:14:4c:25:69:0f:8e:60:57:70:0a:34:dc:96:62:56:
b6:50:68:20:72:a3:db:e8:f7:76:17:69:79:c9:34:b0:23:af:
d2:24:73:fa:9b:2f:b0:6e:5c:cc:f4:96:3b:71:6d:68:8d:56:
3b:63:b0:6c:22:b8:d2:1e:12:42:a3:b1:6e:ba:e1:8f:e4:12:
96:62:51:88:b0:de:54:2a:f9:be:ff:1f:75:b3:6f:bd:fb:be:
65:82:00:06:7c:8d:76:f1:49:8f:d6:98:52:a5:dc:da:d0:57:
cf:56:44:79:ac:92:74:6a:b0:71:98:5e:99:d3:a6:6c:43:e8:
35:07:22:32:37:2d:93:29:7f:28:e0:1f:67:8f:bd:a3:05:7f:
4e:d1:f7:74:98:34:68:20:9f:99:f6:71:15:11:04:7a:8c:40:
6d:37:98:3a:13:c4:01:16:76:b2:bc:f7:32:6d:cf:1a:f8:39:
9b:65:ec:c2:ed:e5:5e:df:07:aa:c1:2b:28:f9:e1:da:b3:be:
28:76:26:27:b1:61:6e:70:04:05:b7:92:2c:e8:3b:d5:b9:4d:
97:a4:10:43:4e:ae:b4:a1:74:c3:84:65:a5:3f:cc:c9:02:96:
30:31:39:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:30 2025 by rpki-client