Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json)
Hash identifier: MQB8UIdc/rXaAmX/1/nL268aoODVQJsEMPSJWDHs4Vc=
Subject key identifier: 7E:DA:48:C9:3C:2F:BC:3D:D1:FA:23:C7:0B:42:70:84:58:4C:28:FE
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial: 0199FCFD5BCAE9DAC0E10FEB4C9F8DC6E08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
Manifest number: 0691
Signing time: Sun 19 Oct 2025 15:01:26 +0000
Manifest this update: Sun 19 Oct 2025 15:01:26 +0000
Manifest next update: Mon 20 Oct 2025 15:01:26 +0000
Files and hashes: 1: Ye0egtqoH6uMAlA-InFGtPoYhOI.roa (hash: zCIyCUBIV+P7SfqRZSH5RkFwyM3/tcMjHBwHN8QTJs8=)
2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: /Lvx1dt6gGyGet8UyFkjFeJhthHotPkivPd14+xkrdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:5b:ca:e9:da:c0:e1:0f:eb:4c:9f:8d:c6:e0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Validity
Not Before: Oct 19 15:01:26 2025 GMT
Not After : Oct 20 15:01:26 2025 GMT
Subject: CN=7eda48c93c2fbc3dd1fa23c70b427084584c28fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:91:45:b2:51:d0:7c:bc:73:35:55:18:f2:
6b:08:67:57:64:68:a8:c7:b3:cd:1c:d5:0c:08:e7:
c0:a8:c7:03:27:4c:57:6d:19:31:58:b6:78:5f:94:
71:d2:fc:4f:bc:67:57:87:1f:b8:35:e9:73:8c:2d:
70:7d:64:fd:fa:5c:4f:6c:7d:ef:de:3a:b6:9f:9e:
35:2a:80:4a:d9:7b:a2:ec:48:19:59:bb:0e:b9:4b:
fb:86:d9:86:e5:59:99:35:0c:da:93:21:07:70:ba:
f3:fa:0b:f1:9f:83:42:7c:15:b7:ef:4c:0c:4c:44:
7d:0d:93:87:dc:7a:76:b6:ec:20:38:27:65:ee:d9:
dd:7a:ab:8d:b6:1c:be:97:7d:34:92:3d:bc:30:b6:
5c:02:41:f5:08:c2:14:88:ee:f7:35:ff:3f:d7:a9:
65:e2:0b:42:d3:d7:36:0a:84:3a:3a:74:07:3a:30:
25:09:8a:46:dd:c5:30:39:cb:ff:29:7c:56:49:ea:
38:c3:40:e8:81:41:e2:e0:ee:6d:ce:be:bf:be:c6:
dd:49:aa:71:68:4d:e8:38:17:e4:ad:a6:70:1a:f4:
da:63:6c:95:73:54:5b:a9:b0:fa:8e:43:c1:e2:de:
42:5b:3a:ed:67:26:28:cd:aa:0c:27:11:9d:ac:c6:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DA:48:C9:3C:2F:BC:3D:D1:FA:23:C7:0B:42:70:84:58:4C:28:FE
X509v3 Authority Key Identifier:
keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ae:75:38:b0:94:73:98:2c:fd:48:f2:01:f0:a5:0d:42:4d:
80:c0:31:bf:20:c4:92:c7:c3:ca:23:32:63:df:67:ab:63:ba:
77:a0:79:eb:ca:be:56:6b:96:b2:19:de:83:31:e6:a8:d4:1c:
b8:2c:e3:7f:f7:53:73:8e:cf:19:a7:84:0a:f6:72:6a:3b:a8:
19:a8:56:6f:1e:16:f8:48:3d:ff:37:3c:b3:d5:b6:e8:7e:bc:
18:d8:4f:6b:13:43:39:78:93:ac:9b:14:f7:21:45:88:be:a6:
2a:24:85:65:ec:73:6a:21:38:65:22:b8:8f:2b:9c:ef:3b:12:
f4:36:28:d8:5d:9d:30:de:06:97:27:c8:7f:0f:dc:19:d1:52:
eb:bc:30:4b:34:b1:75:d4:2a:e8:17:5c:61:84:10:15:b4:59:
62:01:eb:f1:d9:64:09:13:f2:c2:8a:83:ef:3d:59:d0:d7:c2:
08:40:24:97:3a:78:f5:fa:4f:d5:2b:e7:d3:af:e5:06:d4:bc:
3b:cc:23:2c:be:ad:d8:32:e6:14:21:a2:4a:55:7b:b3:f9:da:
cc:b1:07:5d:cb:64:85:0e:af:83:11:10:01:7b:91:72:b7:6e:
35:64:1a:b6:01:6b:66:27:03:16:2f:e0:63:33:c4:a3:6c:e5:
2b:c7:38:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/VvK6drA4Q/rTJ+NxuCOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzlkMTFlN2Q0OTkyZjlhZmIzMDQzMWUzNjA0MmFhZmRk
ZTVjMGEwHhcNMjUxMDE5MTUwMTI2WhcNMjUxMDIwMTUwMTI2WjAzMTEwLwYDVQQD
Eyg3ZWRhNDhjOTNjMmZiYzNkZDFmYTIzYzcwYjQyNzA4NDU4NGMyOGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymGRRbJR0Hy8czVVGPJrCGdXZGio
x7PNHNUMCOfAqMcDJ0xXbRkxWLZ4X5Rx0vxPvGdXhx+4NelzjC1wfWT9+lxPbH3v
3jq2n541KoBK2Xui7EgZWbsOuUv7htmG5VmZNQzakyEHcLrz+gvxn4NCfBW370wM
TER9DZOH3Hp2tuwgOCdl7tndequNthy+l300kj28MLZcAkH1CMIUiO73Nf8/16ll
4gtC09c2CoQ6OnQHOjAlCYpG3cUwOcv/KXxWSeo4w0DogUHi4O5tzr6/vsbdSapx
aE3oOBfkraZwGvTaY2yVc1RbqbD6jkPB4t5CWzrtZyYozaoMJxGdrMaEewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7aSMk8L7w90fojxwtCcIRYTCj+MB8GA1UdIwQY
MBaAFMM50R59SZL5r7MEMeNgQqr93lwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEt
MmQ4MDE5MDE3ODQ5LzEvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEtMmQ4MDE5MDE3ODQ5
LzEvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZK51OLCU
c5gs/UjyAfClDUJNgMAxvyDEksfDyiMyY99nq2O6d6B568q+VmuWshnegzHmqNQc
uCzjf/dTc47PGaeECvZyajuoGahWbx4W+Eg9/zc8s9W26H68GNhPaxNDOXiTrJsU
9yFFiL6mKiSFZexzaiE4ZSK4jyuc7zsS9DYo2F2dMN4GlyfIfw/cGdFS67wwSzSx
ddQq6BdcYYQQFbRZYgHr8dlkCRPywoqD7z1Z0NfCCEAklzp49fpP1Svn06/lBtS8
O8wjLL6t2DLmFCGiSlV7s/nazLEHXctkhQ6vgxEQAXuRcrduNWQatgFrZicDFi/g
YzPEo2zlK8c4Cw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:14 2025 by rpki-client