
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
File: WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft (raw, json)
Hash identifier: ukprKBYFLw2olim2sauUqzFVVm2nEdH9UbVAibxxqxY=
Subject key identifier: A0:D6:E8:DB:9A:74:28:51:5D:F9:E5:56:0F:F7:43:90:B9:B5:07:87
Authority key identifier: 58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
Certificate issuer: /CN=58dd42ab3460279709c134b570f76e34e4d95b91
Certificate serial: 0199FAD7CEBB2075C621E36F61C352B1B65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
Manifest number: 1406
Signing time: Sun 19 Oct 2025 05:01:11 +0000
Manifest this update: Sun 19 Oct 2025 05:01:11 +0000
Manifest next update: Mon 20 Oct 2025 05:01:11 +0000
Files and hashes: 1: WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl (hash: kHwSrtswkxfJ81hl55ao33wsOHSZTvjBeFKI0NXQ0LE=)
2: fyfyl5NsL0BWisw7TSdl5mH8Mlw.roa (hash: /XQvoo54R4s6GryMB7e6F8gsZAvkqlu3TTwYzBkmBbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ce:bb:20:75:c6:21:e3:6f:61:c3:52:b1:b6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dd42ab3460279709c134b570f76e34e4d95b91
Validity
Not Before: Oct 19 05:01:11 2025 GMT
Not After : Oct 20 05:01:11 2025 GMT
Subject: CN=a0d6e8db9a7428515df9e5560ff74390b9b50787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:da:16:3c:02:dd:8c:36:f1:88:21:b6:bd:
40:4f:d3:32:0c:7b:7f:55:45:66:f5:12:e5:9d:d7:
9c:f6:10:a8:2f:22:2e:92:e8:e4:d7:ff:51:ce:50:
45:4c:a4:24:da:c3:fd:ce:c0:c6:62:af:99:6e:57:
bd:7e:14:8e:2b:e1:cd:7f:b5:49:ae:c8:09:04:9e:
f1:93:c0:23:b8:06:d1:a6:03:d3:ea:af:06:fd:fa:
18:bb:ef:8e:8c:38:8d:81:e0:c2:cf:fa:ee:be:95:
60:cc:e8:f3:7e:6b:4e:66:cc:21:24:2b:7a:7d:da:
65:f6:27:ae:ba:e5:26:75:22:d1:f6:a4:89:f5:9f:
c3:07:a2:9d:7e:70:8c:95:de:07:81:1a:13:60:c2:
dc:49:ea:0d:ba:e7:7e:2c:d4:9b:c3:da:67:c3:ce:
a2:92:16:d7:8c:65:bb:f4:96:a2:48:68:b8:cb:fa:
b5:9f:2f:cb:7c:50:7b:fc:9a:14:b9:63:fc:5f:21:
87:c8:fc:41:82:cb:08:8c:c4:14:8b:02:8e:ad:36:
01:3f:3f:80:98:69:17:ba:63:fc:18:ea:7a:1e:f7:
e4:67:66:48:6c:e9:6b:ad:2a:1a:b1:a3:ef:88:fe:
6b:82:b4:9a:5f:3a:2b:b1:30:66:e3:75:83:47:db:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D6:E8:DB:9A:74:28:51:5D:F9:E5:56:0F:F7:43:90:B9:B5:07:87
X509v3 Authority Key Identifier:
keyid:58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:42:85:e7:24:be:ae:e2:68:4d:59:f7:e4:b2:ea:57:6c:b8:
36:24:bf:73:3e:05:d4:72:88:c9:fc:8f:9e:e8:5c:38:55:1c:
96:7d:32:9f:2c:79:9e:c5:ca:9b:c7:a2:5c:87:66:e2:4c:21:
8f:7c:3b:46:b5:1e:46:0c:69:7c:60:69:5c:86:42:29:b8:a9:
37:ae:bf:62:d6:c6:39:c2:7a:26:ab:9d:0d:cf:b1:72:78:56:
c0:3d:4b:f6:b5:b5:a4:01:2e:d3:8f:19:5c:dc:c0:d3:dd:2c:
b0:c9:f3:9c:81:3f:75:50:51:58:10:50:c4:14:d5:ef:d4:d1:
22:d3:8b:7b:35:3f:9f:2e:c6:05:7a:85:80:ef:84:6b:1c:62:
45:49:4f:f8:2b:22:fd:f0:59:f9:ce:87:00:d0:dc:38:3f:85:
ed:7d:96:86:cb:07:c8:0f:0e:55:11:86:6f:67:5d:a5:ac:ab:
ed:41:e5:ed:2c:ed:77:29:a0:0c:e2:76:ea:be:8d:a0:53:97:
a3:66:33:03:f7:f0:1c:a5:d6:28:47:8f:80:83:46:4b:c7:43:
23:98:76:aa:7f:0a:9f:5d:a2:ad:c9:11:8f:e5:9d:59:f8:ae:
7a:54:74:81:54:e7:da:a6:bb:ed:de:54:bc:c5:dd:a7:c4:93:
0b:f5:5f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:26 2025 by rpki-client