Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
File: WNKjVqVHgVW-qovGJWqG9tWz9zw.mft (raw, json)
Hash identifier: a73ylSETSvA+QZf+OJtLef7VToJV0/9rS+IWFuFgqTs=
Subject key identifier: 6C:18:7B:17:1A:2C:32:9D:EF:8A:A9:50:13:9B:F4:E4:18:DB:57:28
Authority key identifier: 58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
Certificate issuer: /CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Certificate serial: 0199FB0EDF4BA6F47DB89EAD2765D79B3F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 06:01:19 +0000
Manifest this update: Sun 19 Oct 2025 06:01:19 +0000
Manifest next update: Mon 20 Oct 2025 06:01:19 +0000
Files and hashes: 1: WNKjVqVHgVW-qovGJWqG9tWz9zw.crl (hash: 2LhrEPDbOOHrueopLocyup9eaS6dQ8h2SwcEW2gGa+U=)
2: g4DPD_TlI2jk4YtUIO3nppJCypo.roa (hash: 1cUob6Ttj1c9mZCdpqGoW3x2UVNqUiWBsqfqlcDpGkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:df:4b:a6:f4:7d:b8:9e:ad:27:65:d7:9b:3f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Validity
Not Before: Oct 19 06:01:19 2025 GMT
Not After : Oct 20 06:01:19 2025 GMT
Subject: CN=6c187b171a2c329def8aa950139bf4e418db5728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a0:68:4c:8c:15:fa:c6:77:7c:70:24:f5:cf:
c7:0f:e3:56:1d:d1:34:c7:5b:11:7a:3e:0d:32:22:
91:a9:7c:e0:0f:bc:da:32:82:df:cc:32:ba:23:42:
09:f1:56:5c:02:66:66:04:1c:e8:cc:c0:dc:e2:c4:
d0:56:d2:80:17:fa:6b:e1:8b:1c:17:27:51:2b:6d:
d3:13:c7:fc:fc:9d:3c:fc:b5:18:21:a6:b7:de:cf:
00:a7:05:cc:1e:81:6b:d0:48:df:31:28:18:c3:48:
df:18:54:c4:89:d9:36:45:fd:57:b4:41:fa:3e:fa:
c1:fb:98:88:92:00:db:c8:3f:78:5c:75:b2:8e:9e:
81:19:28:f5:cc:0f:cc:af:bb:f5:45:88:41:16:e3:
3f:73:73:d8:e8:17:f8:de:59:d4:3d:1b:ba:16:36:
2d:56:f9:37:1e:9e:33:e1:93:43:e7:97:c6:12:72:
aa:9a:96:a1:22:33:e3:23:c8:1e:d5:d1:24:80:2f:
c8:fa:45:cf:52:fe:75:98:94:c9:b5:45:c6:f7:40:
64:d5:62:d9:2f:30:d5:ca:7f:6e:66:10:ad:6e:37:
55:e5:b5:ec:ec:61:be:26:38:54:98:ec:7e:09:79:
4c:74:1d:94:c1:e9:06:6e:38:7f:1d:47:6e:83:3e:
e1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:18:7B:17:1A:2C:32:9D:EF:8A:A9:50:13:9B:F4:E4:18:DB:57:28
X509v3 Authority Key Identifier:
keyid:58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6f:d9:f0:58:75:86:b3:b4:3d:11:4e:47:a3:00:48:cc:79:
53:be:f2:89:7b:b3:75:3e:2d:e8:1d:11:d7:bc:c9:67:ff:21:
13:db:f8:67:43:a0:15:5e:31:83:44:53:53:97:1b:75:87:2d:
19:7a:df:d8:f0:4e:35:2b:d6:fb:65:93:09:ac:6c:fe:b8:d4:
e2:a9:99:31:7f:ae:70:ae:c7:c5:9d:5b:39:8b:c9:84:d3:c4:
94:ba:cf:a1:33:87:c3:2c:ed:ae:72:0f:8c:f5:d8:54:ef:96:
5f:4c:0e:bd:b0:6c:5a:3d:33:d5:71:56:17:2b:f8:79:e3:b4:
16:0f:20:d3:06:bc:77:0f:12:45:19:c4:d0:44:d8:8c:cf:7f:
32:14:8f:a2:e5:d6:d0:31:d3:10:ca:93:83:7e:2d:2f:60:d6:
ab:b7:d3:e0:6d:9d:61:76:a6:0e:00:47:91:f4:4a:7c:e5:c4:
55:8b:5c:08:1d:99:6d:3a:f8:1a:82:c8:f6:11:82:91:eb:cb:
8e:a7:62:71:00:c0:bd:a3:4c:f7:6b:d9:e8:8e:fd:eb:5e:b5:
9e:7a:53:11:a4:e6:8a:25:85:1c:bd:05:05:e0:ae:8c:16:cf:
f1:ba:aa:c3:39:3d:52:25:3f:2d:db:90:ab:f6:7b:e2:99:f1:
32:57:c9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:49 2025 by rpki-client