Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
File: wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json)
Hash identifier: Yzi0oiV8ByfW5KhEThQEBUXJz/luWJawjzGbXLZp7JE=
Subject key identifier: F7:42:12:F0:A7:CB:20:FE:C1:4B:B1:11:D9:45:41:61:0A:D0:B8:30
Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
Certificate issuer: /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Certificate serial: 0199FFC76EB01BB22C7A400EE12B5D3DB4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
Manifest number: 03CA
Signing time: Mon 20 Oct 2025 04:01:23 +0000
Manifest this update: Mon 20 Oct 2025 04:01:23 +0000
Manifest next update: Tue 21 Oct 2025 04:01:23 +0000
Files and hashes: 1: f45K-_tztLGikN2V1uWSCFuY_68.roa (hash: xJe3gW2GTPkOmGgSxCeDd1gAbtFU96D/eKs9HOKj+Eo=)
2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: eonKKHU+pPwfEoKC9CS1vk3Iz50c+eNY6XMTDqK91aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:6e:b0:1b:b2:2c:7a:40:0e:e1:2b:5d:3d:b4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Validity
Not Before: Oct 20 04:01:23 2025 GMT
Not After : Oct 21 04:01:23 2025 GMT
Subject: CN=f74212f0a7cb20fec14bb111d94541610ad0b830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:3e:fc:56:13:82:17:a6:31:fa:2d:c2:75:
65:88:d5:ca:a0:a4:f0:94:cd:a5:e2:df:14:3e:a3:
c1:12:ad:aa:d9:c8:30:40:a0:4e:d1:d6:ed:91:8d:
ce:fd:10:12:5f:34:27:f4:3c:a6:7b:4b:c1:26:0d:
c3:f4:00:3b:4a:72:35:99:8b:ef:48:5e:13:88:42:
f7:f9:91:3b:c3:e6:92:17:99:f7:4d:17:c0:c0:3f:
b2:8a:02:31:a3:52:d9:e7:7c:ea:27:bb:36:6c:4a:
98:dd:b4:c5:dc:ad:46:d8:e3:e9:f6:10:2b:9d:b8:
c2:35:3f:4c:02:97:9b:22:23:0f:f6:0a:ff:37:c9:
7b:0d:e6:de:a3:c3:43:57:30:2f:bd:e4:54:f6:07:
2b:e7:bc:8b:3e:d4:42:c4:09:a0:43:73:29:6c:80:
a8:ce:6d:68:da:8a:fa:a7:27:ba:74:ab:2f:25:ed:
22:f2:fc:6c:28:2c:d7:17:3d:d7:af:8b:df:a5:f0:
ee:80:b2:b4:0a:cc:53:df:45:5c:82:25:b4:7f:5c:
3f:bf:f5:b7:89:ba:ff:76:f3:e2:ec:1e:7c:57:c1:
52:a0:94:45:2c:ca:52:d1:ad:e8:83:a4:45:e1:9d:
87:3b:74:19:53:71:4a:b3:6e:fd:64:8d:75:dd:ef:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:42:12:F0:A7:CB:20:FE:C1:4B:B1:11:D9:45:41:61:0A:D0:B8:30
X509v3 Authority Key Identifier:
keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a5:4d:7a:31:b6:8e:fa:54:14:5b:22:d4:24:93:a6:fb:90:
80:9d:fc:ea:21:5a:dd:f6:c1:b2:4a:a1:11:c7:7a:d5:44:29:
95:83:83:e6:28:fb:f3:f2:15:dd:98:b3:dd:f8:a9:bc:7d:d1:
3b:a4:af:61:ef:93:45:9c:28:64:82:9d:00:18:e1:f3:95:8f:
0f:56:8a:88:89:33:20:d9:6c:ef:45:e5:ae:06:cf:79:77:9b:
13:5c:8d:ee:42:b0:7a:0f:52:db:aa:ba:32:1c:e1:42:6e:bb:
1e:65:13:e0:10:f0:0e:48:4f:66:bc:9f:37:cd:0c:4c:35:76:
d6:99:61:17:e3:15:f4:13:8c:e7:e2:f7:68:83:b6:c0:b7:04:
cd:47:cb:a8:e8:f4:0a:b7:ca:e9:01:ad:a1:1e:80:00:11:87:
65:31:fc:75:31:7f:13:8e:ad:20:f4:d0:34:d6:5f:bc:51:0b:
14:3c:02:79:b7:a8:70:2d:ef:a7:38:40:f7:f9:34:63:dd:20:
4e:f5:a5:28:65:f6:8c:79:f3:df:d7:22:46:b4:bf:c2:e7:f5:
43:db:91:2d:34:0e:c3:fc:66:2f:3b:31:b4:8c:eb:2c:71:4c:
90:b4:40:58:7a:3b:5d:31:24:2d:27:a4:01:29:cc:c1:bd:ed:
d8:1e:23:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:41 2025 by rpki-client