Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
File: wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json)
Hash identifier: RPH88Dzv4pBcD2XzCI2lskl/zSXXJBzeMy/fci2C2CI=
Subject key identifier: 02:81:68:EE:96:21:89:FA:60:CB:CF:88:34:EE:0A:05:4E:33:6F:70
Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
Certificate issuer: /CN=c272d4761240359acba8a337d3ac3a9397925a72
Certificate serial: 019847ADC087CFCC4180F3D8F0CC36D62D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 17:00:25 +0000
Manifest this update: Sat 26 Jul 2025 17:00:25 +0000
Manifest next update: Sun 27 Jul 2025 17:00:25 +0000
Files and hashes: 1: 70HJo7jmffKHG2PpOcP0KSY9roI.roa (hash: DYvGlsMyhOdp02WTRHANgmcPEVdr2t5PTlBu3xJcVlU=)
2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: L38YHAG+o2pR/Fww4R24FBoKR+0Nvm/nyCYEJXRE3DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:c0:87:cf:cc:41:80:f3:d8:f0:cc:36:d6:2d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72
Validity
Not Before: Jul 26 17:00:25 2025 GMT
Not After : Jul 27 17:00:25 2025 GMT
Subject: CN=028168ee962189fa60cbcf8834ee0a054e336f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:fe:be:2d:b0:dc:f9:ce:13:62:16:68:23:
c1:6a:73:5b:38:91:da:04:e9:55:58:a0:38:3a:07:
cb:c2:cd:c4:2d:47:25:99:ef:62:d3:3e:f2:e4:f2:
81:b1:2c:d9:73:be:1f:e6:ee:89:34:ed:e9:6f:bc:
0b:7b:65:42:c5:9f:ee:bc:94:ca:bb:73:ea:73:4a:
db:4b:81:51:b1:12:fa:0b:0e:31:9f:c5:ba:a8:b6:
a7:48:98:8c:d2:d6:b0:95:07:79:09:9e:9b:21:66:
f8:39:ef:cd:22:aa:25:26:5e:07:0c:0a:d0:8f:5d:
9c:b4:f4:40:a7:14:f5:25:b1:df:f0:b6:cd:27:38:
49:91:e7:b3:18:e2:81:81:c0:5c:e2:09:e1:9b:9e:
3c:c0:27:38:c7:83:1c:48:c6:3c:45:b5:56:9e:b1:
8a:e6:08:62:52:dc:17:4b:f8:14:ec:d7:df:d8:50:
bd:e6:7a:08:31:70:a6:70:af:98:54:c2:76:26:f0:
da:84:b3:00:b5:10:c4:d1:7a:ac:11:b4:16:d3:25:
36:d0:fb:d8:c4:3b:0b:e7:c0:c8:07:1b:4b:9c:02:
80:44:25:49:d2:94:54:00:dd:e7:5f:ea:bc:5c:49:
fa:bc:a3:49:36:58:24:9c:b5:cc:52:12:f6:41:3c:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:81:68:EE:96:21:89:FA:60:CB:CF:88:34:EE:0A:05:4E:33:6F:70
X509v3 Authority Key Identifier:
keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:46:0c:de:1e:4d:23:a6:97:bc:6f:6c:a9:26:47:f0:6a:ec:
c5:1a:d1:ea:d6:9c:38:3b:44:7e:97:84:45:e7:7c:c5:bd:d9:
9a:76:04:4c:36:76:69:bf:f0:80:d0:1f:fe:47:40:3d:72:e1:
d9:05:03:5d:e4:d3:49:78:15:81:5d:80:49:3b:6e:b0:63:b4:
c8:43:e5:da:2d:3a:cb:61:e4:5c:d3:49:e3:14:1a:c6:72:b5:
70:ed:36:57:82:f8:22:ec:93:97:8d:d0:4e:d2:f3:73:c5:b4:
6b:63:12:17:1d:bc:d3:0e:5a:4d:ef:40:59:72:6b:56:f5:c9:
84:43:51:bc:6d:a3:b2:ab:9d:2e:6a:67:a2:9a:7c:86:82:e6:
fe:dc:34:d0:b5:04:3b:4f:dc:ed:5f:62:08:a2:37:4e:a6:c0:
9a:81:7b:ae:81:0e:7d:bc:46:fe:55:87:b8:36:03:ee:65:78:
65:93:86:07:1d:56:45:11:b8:fe:42:d1:c5:77:d1:b1:e8:2f:
4c:2b:86:dc:f0:03:fc:37:61:5b:07:41:f1:12:43:cf:36:5b:
97:1f:17:ee:f6:43:fa:c5:11:51:14:4c:7e:ac:e2:fd:0d:46:
bd:68:1e:a6:91:7e:62:86:43:e4:8f:4a:7a:65:00:f5:a9:e7:
e9:5c:98:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHrcCHz8xBgPPY8Mw21i0wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzJkNDc2MTI0MDM1OWFjYmE4YTMzN2QzYWMzYTkzOTc5
MjVhNzIwHhcNMjUwNzI2MTcwMDI1WhcNMjUwNzI3MTcwMDI1WjAzMTEwLwYDVQQD
EygwMjgxNjhlZTk2MjE4OWZhNjBjYmNmODgzNGVlMGEwNTRlMzM2ZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG7+vi2w3PnOE2IWaCPBanNbOJHa
BOlVWKA4OgfLws3ELUclme9i0z7y5PKBsSzZc74f5u6JNO3pb7wLe2VCxZ/uvJTK
u3Pqc0rbS4FRsRL6Cw4xn8W6qLanSJiM0tawlQd5CZ6bIWb4Oe/NIqolJl4HDArQ
j12ctPRApxT1JbHf8LbNJzhJkeezGOKBgcBc4gnhm548wCc4x4McSMY8RbVWnrGK
5ghiUtwXS/gU7Nff2FC95noIMXCmcK+YVMJ2JvDahLMAtRDE0XqsEbQW0yU20PvY
xDsL58DIBxtLnAKARCVJ0pRUAN3nX+q8XEn6vKNJNlgknLXMUhL2QTxogQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKBaO6WIYn6YMvPiDTuCgVOM29wMB8GA1UdIwQY
MBaAFMJy1HYSQDWay6ijN9OsOpOXklpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lZGU0YzctNjE1MC00ZWQwLTlkMzAt
MTBkZTY3MTIxMTk3LzEvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lZGU0YzctNjE1MC00ZWQwLTlkMzAtMTBkZTY3MTIxMTk3
LzEvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkYM3h5N
I6aXvG9sqSZH8GrsxRrR6tacODtEfpeERed8xb3ZmnYETDZ2ab/wgNAf/kdAPXLh
2QUDXeTTSXgVgV2ASTtusGO0yEPl2i06y2HkXNNJ4xQaxnK1cO02V4L4IuyTl43Q
TtLzc8W0a2MSFx280w5aTe9AWXJrVvXJhENRvG2jsqudLmpnopp8hoLm/tw00LUE
O0/c7V9iCKI3TqbAmoF7roEOfbxG/lWHuDYD7mV4ZZOGBx1WRRG4/kLRxXfRsegv
TCuG3PAD/DdhWwdB8RJDzzZblx8X7vZD+sURURRMfqzi/Q1GvWgeppF+YoZD5I9K
emUA9ann6VyYfg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:38:14 2025 by rpki-client