
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
File: WNidwYngCTYayyZVaA5mnAvEdFY.mft (raw, json)
Hash identifier: xwGy5s0KCxJPqS88iQV5jxj/7gxEXEgYdJuuuznGL2Y=
Subject key identifier: 4C:9D:6A:DF:39:EF:CF:AD:85:2D:C3:55:52:C7:52:E0:64:C3:84:DF
Authority key identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
Certificate issuer: /CN=58d89dc189e009361acb2655680e669c0bc47456
Certificate serial: 0199FF597A16D6724A3181B474F875198328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
Manifest number: 01E9
Signing time: Mon 20 Oct 2025 02:01:17 +0000
Manifest this update: Mon 20 Oct 2025 02:01:17 +0000
Manifest next update: Tue 21 Oct 2025 02:01:17 +0000
Files and hashes: 1: 28vwddYYnn-BejsfrgsHjSgfzQ4.roa (hash: UAZDR9r94HPPd9OVOKpoGQIjU2FUXfM+rJVeuMGWG0Y=)
2: WNidwYngCTYayyZVaA5mnAvEdFY.crl (hash: mKMJXQSn6nAxY8wqdHxK56nJARrJoxG5Pnde3tVGRfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:7a:16:d6:72:4a:31:81:b4:74:f8:75:19:83:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d89dc189e009361acb2655680e669c0bc47456
Validity
Not Before: Oct 20 02:01:17 2025 GMT
Not After : Oct 21 02:01:17 2025 GMT
Subject: CN=4c9d6adf39efcfad852dc35552c752e064c384df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:50:55:b2:56:79:75:30:84:1b:03:ef:5b:13:
f2:6a:bf:02:a6:ac:0f:2c:0b:a6:f7:54:a3:05:f4:
06:51:63:d5:db:ac:e0:49:ee:82:94:12:88:3f:bd:
21:d2:d4:ec:9d:72:0c:8c:8f:c8:f3:c9:29:ee:72:
c1:9c:bd:36:d9:bd:29:e1:f4:63:2e:96:c4:47:dd:
67:cb:49:80:16:fa:c3:cc:23:46:90:3c:82:b8:8a:
cc:20:13:7e:d9:76:84:f9:62:b5:62:63:f5:4c:d6:
ec:e0:d2:30:77:3b:34:4b:65:ab:8b:31:c7:e8:a4:
9f:a4:cd:ea:bf:08:22:3e:ff:c1:4b:62:41:1b:db:
48:77:4d:3a:54:31:d8:7f:fa:f3:cc:85:bc:93:95:
66:7b:ea:76:93:96:72:1c:85:ae:da:02:bb:75:dc:
ef:1e:9e:d3:d6:9e:97:14:ef:86:d3:ef:70:3c:1f:
78:8b:83:2b:d9:44:62:21:68:dc:24:ba:7f:46:ab:
c0:c0:d2:f7:e7:52:1c:5b:23:ee:cd:f9:3c:84:2a:
15:7b:62:fb:64:1f:6d:cb:44:58:44:0a:00:5d:26:
2c:15:d4:0e:83:8c:a3:98:cf:31:0f:cb:fe:90:6e:
89:e6:d8:56:ad:e1:7e:c6:1a:cd:21:ce:e7:6a:a5:
4d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9D:6A:DF:39:EF:CF:AD:85:2D:C3:55:52:C7:52:E0:64:C3:84:DF
X509v3 Authority Key Identifier:
keyid:58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a0:e2:3d:92:10:0b:71:bc:5b:b6:6d:46:57:1e:04:4b:f7:
3e:cf:f0:bf:be:c1:32:13:dc:05:dd:15:d0:1a:06:45:78:ba:
32:26:a4:17:a1:67:a7:f3:42:cb:4a:f6:ae:d2:dc:af:89:d1:
17:79:ed:45:c4:f4:6b:82:4f:d6:e7:76:17:39:08:81:d2:25:
b8:3d:fc:ca:70:e3:03:04:5c:94:f2:f9:9f:26:43:96:5b:d0:
5a:6d:ae:b2:3c:38:c5:3d:7f:1b:e1:8a:96:40:74:d9:e7:8b:
24:94:81:ec:af:c2:22:4a:de:40:9b:b6:bd:65:c4:26:a6:43:
ae:02:bb:ae:89:92:2d:ad:7a:17:3a:79:e2:f6:0b:32:27:97:
16:40:96:24:16:7b:e0:40:bc:ed:74:5a:0e:0a:74:42:ba:33:
6e:31:c8:04:27:78:5d:7f:73:f7:f6:f9:02:fc:f5:5d:e8:7e:
75:2a:59:8c:78:eb:fb:7b:04:21:8a:30:8d:35:15:c4:fc:62:
8c:3d:bb:e9:35:1b:a0:7f:87:51:9a:7f:47:71:87:b1:1c:a1:
c9:c5:77:e1:cc:94:0a:d2:54:38:bd:b7:c7:b7:56:f6:e2:d1:
79:3c:41:0e:b5:32:93:0c:68:fe:4f:84:79:1e:6c:f1:e7:3b:
e0:9d:99:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:29 2025 by rpki-client