Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
File: _WNpJxttE6au3Koj67KeKbeWpGs.mft (raw, json)
Hash identifier: WFvujjtejkKrnAqQekgTOwf8DCkQD4kgZCrj29BVpqk=
Subject key identifier: F0:74:ED:B6:F3:C8:5D:B7:05:14:2F:7A:99:A9:E8:F0:62:FD:20:FB
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial: 0199FE472B55468A18439FA3ED967DB8BAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
Manifest number: 1119
Signing time: Sun 19 Oct 2025 21:01:40 +0000
Manifest this update: Sun 19 Oct 2025 21:01:40 +0000
Manifest next update: Mon 20 Oct 2025 21:01:40 +0000
Files and hashes: 1: _WNpJxttE6au3Koj67KeKbeWpGs.crl (hash: yRLtQiDopXDenblgcHUWBmZvYf2U2S2BiIP27K9AADM=)
2: jJZ2HGBh9sf4zKvFBoawkCSE36M.roa (hash: /j0hgJuEgbh9wJPPT5skbRnDVTk4N5FaC35FuOjVz1M=)
3: lhJ5RbjQbCIcx6Snzw8-3JVMgGE.roa (hash: VcH6B7wbqshRYaE0Py9Bav3UnTpHMEOSu603CVWuDjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:2b:55:46:8a:18:43:9f:a3:ed:96:7d:b8:ba:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Validity
Not Before: Oct 19 21:01:40 2025 GMT
Not After : Oct 20 21:01:40 2025 GMT
Subject: CN=f074edb6f3c85db705142f7a99a9e8f062fd20fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:c8:ae:1b:3b:4b:87:0e:27:59:d4:94:c8:
13:8b:8e:e3:a4:d6:52:65:e1:db:cf:3e:42:03:89:
94:1c:94:e5:34:0c:df:35:de:6c:95:16:76:56:26:
36:a1:e5:14:e2:4c:47:9b:4d:a4:0b:26:65:1a:b0:
23:2f:82:92:59:37:de:80:10:8f:cc:70:36:67:4c:
4e:1b:91:7d:c7:52:fa:45:ca:be:ab:5c:cf:59:2d:
18:02:0d:4e:8f:3f:2b:24:7d:56:61:47:cc:8d:cc:
73:e1:3e:5c:0f:a6:ab:77:d4:79:55:04:14:9e:58:
ba:b1:3f:37:ba:70:4d:63:f4:ba:31:72:fb:63:84:
52:29:6f:8d:e0:06:34:f8:b3:52:37:d4:a1:89:ee:
ad:b3:1d:58:80:ba:e0:71:0f:4b:95:28:74:ac:fc:
1c:fa:18:9f:f8:a8:1d:2c:2b:88:24:1a:f7:46:71:
cb:b7:20:a7:c8:39:d6:ed:9b:4b:6a:c9:b6:33:9d:
fe:67:a4:9c:70:8a:1f:6b:ae:2e:fe:d1:55:7a:1a:
93:e9:20:35:4b:70:19:50:0a:20:92:3d:91:5b:49:
64:39:59:c6:f5:e4:b7:d8:bf:62:e5:e6:73:40:8a:
08:b0:b6:50:f9:69:1d:28:4c:86:49:32:39:85:bb:
37:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:74:ED:B6:F3:C8:5D:B7:05:14:2F:7A:99:A9:E8:F0:62:FD:20:FB
X509v3 Authority Key Identifier:
keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6d:7f:06:68:93:54:e5:58:59:ac:c5:5a:2f:f7:de:d5:bb:
97:25:66:db:2a:59:d1:29:77:43:21:ec:cc:cf:33:c2:9d:b6:
04:0b:76:f8:e7:d2:29:e4:dd:4a:e5:d2:b5:71:cc:1c:fc:88:
e2:0a:9f:0d:a2:99:32:43:e0:55:f0:7d:bd:bc:fc:16:db:8c:
da:5d:dc:10:30:b6:52:f8:68:c9:20:15:fc:e4:5a:5c:27:7d:
27:9a:d7:5b:54:b0:76:a9:9d:41:42:73:f4:df:f1:f3:b1:3c:
31:e6:42:0e:08:4e:48:89:d9:18:79:93:15:60:90:d3:c6:14:
e6:61:66:65:89:f8:10:27:24:07:96:60:eb:d2:08:c9:2e:ce:
2b:64:c0:a6:6a:13:3d:16:8c:84:29:25:45:39:02:d0:77:85:
42:4f:c5:a1:97:0c:59:09:29:bc:1e:4b:cc:c9:0b:ab:d9:52:
c5:60:58:95:c0:fc:e8:00:51:1b:e6:74:1c:5a:26:18:9a:c3:
82:0c:49:6b:6d:db:12:36:df:e9:a0:ba:60:73:74:0b:43:ea:
42:17:4c:c6:8d:08:8e:0c:d8:f9:88:03:1a:e9:d8:f6:c8:74:
a5:ba:88:48:68:2f:7a:98:6a:aa:5d:09:0c:ba:ea:a0:ce:c5:
6c:cd:2c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:43 2025 by rpki-client