Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
File: WNz7D_Tyi4_61usN0p6ytq9immg.mft (raw, json)
Hash identifier: l3OD/u7Yvu0z2D0eV5uTsqNA8DGECRefxasUO+4y6RM=
Subject key identifier: 34:BA:46:5D:EA:7A:8A:19:35:AA:9E:28:80:34:AB:29:CB:F1:1B:7F
Authority key identifier: 58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
Certificate issuer: /CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Certificate serial: 0199FC21A254CFE926820506F38D31DD1DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
Manifest number: 0940
Signing time: Sun 19 Oct 2025 11:01:26 +0000
Manifest this update: Sun 19 Oct 2025 11:01:26 +0000
Manifest next update: Mon 20 Oct 2025 11:01:26 +0000
Files and hashes: 1: WNz7D_Tyi4_61usN0p6ytq9immg.crl (hash: ZBrLP//bn9khMITo+5vF0o6rngoaqks67NLkzqmszUg=)
2: lgaTADVYOse5jNoGc-hlR1iyQcM.roa (hash: whet4s5rWCX20O/tP+eDuVvdhz/p6dV5HSU07qsog2g=)
3: sauoJPH8ZCzsvjvGozwJzjKKcxA.roa (hash: B9f46JTfl/pBuc2yfO6KIqonaBN9SLGFTMzKnpf4wu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a2:54:cf:e9:26:82:05:06:f3:8d:31:dd:1d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Validity
Not Before: Oct 19 11:01:26 2025 GMT
Not After : Oct 20 11:01:26 2025 GMT
Subject: CN=34ba465dea7a8a1935aa9e288034ab29cbf11b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:e5:48:ba:a0:ec:5d:8a:15:69:b9:cf:ef:
d1:e2:76:52:9b:b3:bb:5f:75:c6:d8:4c:16:31:b3:
3d:46:12:8a:fa:41:bc:5f:b8:19:c9:e9:92:c0:a4:
dc:4b:ff:ee:25:d4:43:26:b5:98:45:b1:01:f0:d9:
0b:ad:71:74:e8:0c:96:2d:6f:6b:0b:6e:0c:28:cb:
4c:d9:d0:9d:e3:f4:4b:fa:32:30:67:6c:f3:76:04:
b2:08:4f:c5:a1:92:2d:13:f0:7f:b3:7a:99:c1:b2:
9c:57:e9:d0:17:e2:05:33:5a:4a:1f:f0:42:8f:5e:
f5:95:e5:37:1a:2b:3c:32:14:d3:23:61:c3:b0:cc:
19:7d:97:3b:8c:d1:8a:2e:a4:1e:7f:04:8e:da:41:
aa:ef:59:fe:00:6c:dc:dd:c0:39:ba:2a:eb:62:3f:
11:50:0a:50:d9:01:30:09:ad:f1:f4:90:1c:12:02:
9d:a7:18:bd:bc:97:94:65:fe:59:69:3d:7e:7b:13:
d4:60:3f:04:49:89:a1:81:0d:4f:08:71:a3:8a:b3:
76:63:0d:b4:4b:9e:64:6c:1c:23:67:53:07:03:a2:
df:f4:84:a3:8e:fc:84:dc:f8:e5:a1:ca:85:12:94:
27:52:f9:49:dc:43:4a:54:d6:96:8d:43:bd:83:fe:
67:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BA:46:5D:EA:7A:8A:19:35:AA:9E:28:80:34:AB:29:CB:F1:1B:7F
X509v3 Authority Key Identifier:
keyid:58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c8:65:23:bd:85:8f:6b:c5:b3:8b:c7:dc:90:60:6e:d4:5d:
a5:62:6a:60:57:31:ed:13:36:fc:a4:53:d8:0c:0e:e3:3c:3a:
01:78:5d:51:c2:44:6e:a2:40:8b:c4:e8:ad:68:ef:19:65:90:
c4:8b:31:99:c8:39:2c:f2:18:e1:07:72:a5:6e:bb:53:8d:4e:
07:4f:0f:7d:0b:28:47:e2:b8:be:f7:59:cd:83:e2:82:c9:e3:
68:b7:1d:e6:c1:19:f0:c2:a6:b0:9d:12:ed:bf:d3:1a:98:9f:
db:65:cb:41:ad:ed:0a:72:2c:2b:2f:ff:c3:b1:eb:3c:db:80:
58:e2:2a:f0:ec:4b:57:32:90:99:ae:1a:28:c3:69:41:28:91:
73:d5:1b:5c:23:28:89:48:a7:ba:14:d1:ac:2d:2a:6f:93:e3:
2b:60:d8:a0:2b:97:c1:e5:9e:22:ad:99:1d:ba:77:d6:4f:73:
0a:b7:70:e8:52:3d:95:36:3a:16:b7:a2:b6:48:fc:88:5c:51:
71:d8:27:57:74:f8:db:4b:d9:5f:b0:74:ef:61:46:4b:f8:ab:
51:8f:eb:88:db:9b:86:55:68:95:2d:29:39:be:14:71:36:d3:
05:e2:87:9a:15:41:44:43:40:2e:fa:3e:15:7b:03:cc:12:5d:
78:e7:9b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:52 2025 by rpki-client