Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
File: wnRsy35zqcww7wTt188WzB2UaJQ.mft (raw, json)
Hash identifier: g35TP8MCgQ8D1QdX3kveWk6QP80SVBv+ep9AIRIypRo=
Subject key identifier: 03:08:4D:55:80:A9:4B:2F:59:57:D3:69:7A:65:8C:76:FB:9C:00:B9
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial: 0199FBEB504EFD4B3609676517407CC8B9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
Manifest number: 1140
Signing time: Sun 19 Oct 2025 10:02:06 +0000
Manifest this update: Sun 19 Oct 2025 10:02:06 +0000
Manifest next update: Mon 20 Oct 2025 10:02:06 +0000
Files and hashes: 1: MaNg2WPI-q4to7SVp52zO_QNsfw.roa (hash: HsUZQaqhFj/mJrXYPb29143giiHL5X0iJfJWhLhO0VU=)
2: wnRsy35zqcww7wTt188WzB2UaJQ.crl (hash: MZ+1B8JoB+R3CybGxegcmYlK7+5B0UWs2TKPxK3AoXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:50:4e:fd:4b:36:09:67:65:17:40:7c:c8:b9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Validity
Not Before: Oct 19 10:02:06 2025 GMT
Not After : Oct 20 10:02:06 2025 GMT
Subject: CN=03084d5580a94b2f5957d3697a658c76fb9c00b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ab:fe:57:67:9b:a0:76:43:af:fc:8f:de:f6:
39:2b:86:01:42:8c:d0:2f:c8:0b:17:fb:8c:21:74:
07:24:70:f3:2f:b5:ec:97:de:78:82:b0:cb:9e:0b:
be:7a:e5:7b:d8:e5:9b:f9:90:5e:f4:0a:52:d9:3c:
32:0b:81:98:9b:4b:15:40:d2:78:2a:ef:4d:da:83:
ba:c5:8e:b4:48:8c:66:2d:53:41:15:82:c8:1c:8e:
5e:12:57:35:d4:e8:c8:d3:1c:60:70:e5:f6:4f:36:
d1:53:73:b8:23:ed:4a:ec:20:4f:cb:e5:2b:c6:8b:
f3:25:99:77:68:81:88:c2:70:c8:fa:c6:1d:8e:92:
98:54:2f:9c:8d:b2:09:20:c7:a7:17:12:2b:0f:3a:
af:4b:56:55:45:1f:e3:5a:7e:6d:3b:18:41:25:12:
41:88:a8:29:ff:ef:c2:52:3d:0e:ba:eb:2b:a9:94:
57:b9:ce:6a:fc:27:e6:06:50:f3:98:37:a2:5c:19:
f7:1b:e8:9d:d8:1e:49:e6:e5:28:21:96:60:88:15:
eb:16:de:fd:a5:bc:64:3d:40:99:c9:e2:fa:9b:db:
96:e8:4f:ec:31:81:22:63:89:bf:86:f8:a9:ec:0e:
b4:77:84:7f:26:aa:12:55:35:61:9c:99:ca:39:73:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:08:4D:55:80:A9:4B:2F:59:57:D3:69:7A:65:8C:76:FB:9C:00:B9
X509v3 Authority Key Identifier:
keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0a:f8:ff:0a:c1:8b:bf:3a:94:de:a9:77:db:92:aa:f2:df:
c3:3e:7b:1a:39:f3:64:af:af:45:d2:d6:d6:7c:8e:fd:72:44:
e5:28:17:81:80:bc:39:bc:1e:2c:61:d4:0f:24:e2:14:43:a0:
b6:f6:03:63:b2:52:03:71:b6:98:12:52:87:c5:85:a6:70:d7:
5b:df:10:21:eb:14:9c:6e:4e:ca:1a:8b:e3:a5:f0:43:35:81:
25:44:6d:09:0d:e5:88:b3:ef:a4:4c:ed:4a:a8:e2:ff:1b:52:
44:60:f2:66:68:60:8d:f9:2e:c0:a2:7c:2d:bb:31:35:ab:da:
32:6b:fb:4a:7f:36:51:1e:da:ea:8b:89:23:6c:ce:7c:20:37:
14:98:1b:55:64:9e:1f:c2:e9:de:dd:0d:59:53:05:90:ee:7b:
18:6d:e1:2b:26:a0:df:c1:32:9b:f9:d6:31:ee:30:af:50:07:
2b:ac:5c:7b:9c:6e:d4:9c:04:da:b8:5a:e0:e2:81:29:72:87:
c9:a8:de:cd:bd:7c:0e:ce:a4:b8:97:7f:06:d2:06:bc:ae:de:
56:97:16:7e:bf:bd:82:ce:93:a8:d4:a7:43:cf:5f:ed:68:54:
f3:20:78:3a:dc:79:f2:57:17:b0:f3:71:bc:c4:9a:65:63:ae:
6f:71:c9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:59 2025 by rpki-client