Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
File: KS-wn35or-lfI5ExFObApqpyb90.mft (raw, json)
Hash identifier: q1jlJ+7TBLUYvLZU8U7Q/zTU5UnPgr0C62lyp/1pfvw=
Subject key identifier: CD:C9:B0:59:7F:BF:C3:A6:AA:96:15:5B:1A:EE:F8:81:01:6F:B9:DC
Authority key identifier: 29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
Certificate issuer: /CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Certificate serial: 0199FE4715BA036F161A96F6B267CEDC40FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
Manifest number: 03F9
Signing time: Sun 19 Oct 2025 21:01:35 +0000
Manifest this update: Sun 19 Oct 2025 21:01:35 +0000
Manifest next update: Mon 20 Oct 2025 21:01:35 +0000
Files and hashes: 1: JyTHeWPSw0N2vvDNyoUd8epHXA4.roa (hash: OacdQD8AGHB+uL8UAW3yHrwnc616k4RTRtDRnug3bmo=)
2: KS-wn35or-lfI5ExFObApqpyb90.crl (hash: w1cXz0lE6qFukwQQ5mnLRKVg+lZvcZ6raoOFwdQlbkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:15:ba:03:6f:16:1a:96:f6:b2:67:ce:dc:40:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Validity
Not Before: Oct 19 21:01:35 2025 GMT
Not After : Oct 20 21:01:35 2025 GMT
Subject: CN=cdc9b0597fbfc3a6aa96155b1aeef881016fb9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:0c:12:3f:9a:a0:89:48:28:11:73:e4:30:
e9:3a:33:4c:e9:cb:96:54:0c:4e:2d:a6:53:0f:9f:
e2:bf:75:59:54:6d:64:8d:f0:a6:a8:e6:7f:69:13:
17:6f:09:a8:98:a3:80:75:4b:73:45:1a:52:8b:70:
69:8e:f1:73:d6:aa:7e:e6:60:93:d9:a2:4a:b4:dd:
45:30:75:68:92:ce:a6:64:99:54:83:22:82:c0:fc:
9b:84:58:bb:0e:c2:3d:09:e9:a4:b6:0f:5a:7f:11:
2d:5f:59:fe:1d:de:ce:ea:c5:55:5c:6d:e1:de:32:
98:ab:93:db:ba:df:70:8d:06:16:1a:31:e3:ec:8c:
03:04:66:a6:3e:98:08:7e:bf:ab:36:f4:ba:d8:6a:
b0:92:58:71:01:0e:9f:d8:d5:9c:98:c6:c3:21:cc:
89:f1:44:7a:0c:31:f2:32:45:65:61:b5:72:ba:f2:
a5:fc:90:8b:91:c0:28:21:5e:3b:bd:29:8b:2d:54:
1d:69:8a:8c:37:63:39:4b:c9:03:6e:5b:bb:42:af:
4a:82:7a:1c:de:b8:9c:b4:89:10:4d:3a:e6:59:e6:
2a:34:bf:52:f8:09:b5:4f:eb:19:96:3e:15:a0:9b:
8b:79:3d:c3:04:f1:54:54:d8:d7:b6:af:fd:b7:a7:
e5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C9:B0:59:7F:BF:C3:A6:AA:96:15:5B:1A:EE:F8:81:01:6F:B9:DC
X509v3 Authority Key Identifier:
keyid:29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:54:22:e6:59:2b:05:fb:dc:21:ed:ae:9e:b3:b4:3c:ee:4f:
d2:3a:52:cf:a4:36:21:a2:92:56:47:11:76:f4:51:8a:50:81:
53:94:16:84:46:79:09:b3:e8:c7:59:39:c9:9e:67:1b:27:4a:
03:a8:2b:a8:af:81:76:d0:d0:8b:78:ca:cb:36:20:d4:6f:a4:
14:41:bf:5f:6b:88:4f:ca:f7:33:43:ac:6f:b2:4f:b1:1c:d3:
21:2c:74:fe:aa:63:b8:79:64:07:8f:b2:24:f9:be:32:15:92:
8e:d2:b3:3c:df:11:49:7c:11:ca:fb:2d:25:57:13:66:c5:3b:
38:05:be:8f:21:6d:43:04:57:63:79:ff:34:5a:56:08:c7:b3:
06:dc:79:ce:86:8d:ca:d7:05:e6:ff:54:0c:41:f5:64:c1:e9:
02:70:1b:01:16:be:8f:e2:e5:b7:76:73:a7:06:e0:d5:d8:4c:
f1:f2:9d:75:4b:75:70:ff:2a:5b:87:80:c5:61:85:9b:69:8c:
d5:75:f0:c6:2e:1f:cd:6a:47:d9:c9:d0:7c:df:12:ce:87:64:
aa:f1:8a:25:93:6d:c7:ef:ff:8d:09:39:24:cc:ca:43:05:4d:
26:46:ed:62:46:76:19:57:90:4d:21:2e:cd:72:d4:92:19:5b:
45:8a:cd:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RxW6A28WGpb2smfO3ED7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MmZiMDlmN2U2OGFmZTk1ZjIzOTEzMTE0ZTZjMGE2YWE3
MjZmZGQwHhcNMjUxMDE5MjEwMTM1WhcNMjUxMDIwMjEwMTM1WjAzMTEwLwYDVQQD
EyhjZGM5YjA1OTdmYmZjM2E2YWE5NjE1NWIxYWVlZjg4MTAxNmZiOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKIMEj+aoIlIKBFz5DDpOjNM6cuW
VAxOLaZTD5/iv3VZVG1kjfCmqOZ/aRMXbwmomKOAdUtzRRpSi3BpjvFz1qp+5mCT
2aJKtN1FMHVoks6mZJlUgyKCwPybhFi7DsI9Cemktg9afxEtX1n+Hd7O6sVVXG3h
3jKYq5Pbut9wjQYWGjHj7IwDBGamPpgIfr+rNvS62GqwklhxAQ6f2NWcmMbDIcyJ
8UR6DDHyMkVlYbVyuvKl/JCLkcAoIV47vSmLLVQdaYqMN2M5S8kDblu7Qq9Kgnoc
3rictIkQTTrmWeYqNL9S+Am1T+sZlj4VoJuLeT3DBPFUVNjXtq/9t6fliQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3JsFl/v8OmqpYVWxru+IEBb7ncMB8GA1UdIwQY
MBaAFCkvsJ9+aK/pXyORMRTmwKaqcm/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Mtd24zNW9yLWxmSTVFeEZPYkFwcXB5YjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMTMxMTItNTc1OC00NTUyLWIyYWQt
ZWQxYjliOGU2NDcwLzEvS1Mtd24zNW9yLWxmSTVFeEZPYkFwcXB5YjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9lMTMxMTItNTc1OC00NTUyLWIyYWQtZWQxYjliOGU2NDcw
LzEvS1Mtd24zNW9yLWxmSTVFeEZPYkFwcXB5YjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFQi5lkr
BfvcIe2unrO0PO5P0jpSz6Q2IaKSVkcRdvRRilCBU5QWhEZ5CbPox1k5yZ5nGydK
A6grqK+BdtDQi3jKyzYg1G+kFEG/X2uIT8r3M0Osb7JPsRzTISx0/qpjuHlkB4+y
JPm+MhWSjtKzPN8RSXwRyvstJVcTZsU7OAW+jyFtQwRXY3n/NFpWCMezBtx5zoaN
ytcF5v9UDEH1ZMHpAnAbARa+j+Llt3Zzpwbg1dhM8fKddUt1cP8qW4eAxWGFm2mM
1XXwxi4fzWpH2cnQfN8SzodkqvGKJZNtx+//jQk5JMzKQwVNJkbtYkZ2GVeQTSEu
zXLUkhlbRYrN2Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:40 2025 by rpki-client