Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: 8nySjNVMbm4UBVBigelPhrHZ8H6oZBJZaTQjJb1BT10=
Subject key identifier: C8:4A:6E:5F:58:E4:80:32:73:FC:91:B6:59:FE:50:27:F3:BE:3A:8B
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 019A2A4419D9F942474A1731F4F3EFAB4298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 0263
Signing time: Tue 28 Oct 2025 10:01:37 +0000
Manifest this update: Tue 28 Oct 2025 10:01:37 +0000
Manifest next update: Wed 29 Oct 2025 10:01:37 +0000
Files and hashes: 1: 1-5XVVmVVHnbWezmHevbBtqQuslE.roa (hash: TCMJyFyTSXpsoaD5GEolasl3XtqDe4iETZ7PPnlIixY=)
2: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: b0af9sbofnakzGs4aoC+/kboYxPkAX2oKLG6op2Iq+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:19:d9:f9:42:47:4a:17:31:f4:f3:ef:ab:42:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: Oct 28 10:01:37 2025 GMT
Not After : Oct 29 10:01:37 2025 GMT
Subject: CN=c84a6e5f58e4803273fc91b659fe5027f3be3a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:a0:a7:bf:64:86:04:2c:a9:88:c2:d8:4d:
e5:7d:c5:49:dc:c6:28:4c:f0:16:ea:e2:45:90:58:
f4:2b:b5:51:71:0d:94:07:04:27:38:4f:ff:ff:7e:
20:2c:11:75:37:f0:bb:00:a1:92:54:a9:55:ca:93:
ed:e5:54:0f:dc:ad:e7:12:12:87:5b:38:49:ff:00:
08:eb:3d:42:7c:80:c9:ad:63:76:ea:3c:e5:64:d4:
98:a3:a2:55:38:b2:d8:d3:77:12:0a:2d:ed:ae:b0:
3f:f4:9f:1f:9b:9e:b4:77:16:87:05:8d:99:e5:d0:
cb:79:87:70:cc:1d:ac:22:50:b2:f0:d6:a1:01:01:
28:fe:c8:1c:4b:65:fa:e3:19:fa:95:d2:1b:e5:ff:
48:03:10:07:b6:4a:44:d5:c1:40:01:52:47:8b:27:
f9:f5:2d:ea:43:99:8e:6e:17:91:ac:95:30:18:dd:
0e:3f:38:30:42:b2:c8:de:85:80:82:9e:13:94:2e:
79:04:c5:ff:ba:97:75:a8:8e:49:3c:34:f5:63:fd:
94:62:ce:a8:58:47:e2:21:00:f2:28:51:69:22:1e:
ae:46:3f:eb:63:a1:32:6e:69:39:d9:c7:98:f5:1f:
3b:c6:22:ae:30:aa:0b:79:8a:79:aa:b2:93:80:f9:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4A:6E:5F:58:E4:80:32:73:FC:91:B6:59:FE:50:27:F3:BE:3A:8B
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d9:10:29:ee:78:e4:f1:93:b5:c9:ad:07:43:12:40:2f:f1:
05:f0:e8:49:f0:ec:24:bd:36:5e:f5:0d:c8:05:f5:30:03:44:
68:6c:67:a1:83:f4:5d:f6:e3:bf:74:dd:57:29:11:4d:07:75:
83:c4:88:62:bc:4d:f3:b9:3b:60:c3:d9:2b:42:a5:ee:7d:b7:
c4:e2:06:89:57:6c:58:ec:50:75:d3:e2:87:85:15:d7:1f:e6:
a9:85:79:7d:e2:46:ca:71:0a:a0:ec:40:39:8b:82:e5:14:2a:
87:55:7c:d7:e1:a0:34:8d:72:04:3b:9e:69:49:b4:7a:20:fb:
4c:38:4c:d2:10:e7:ab:5e:71:aa:65:19:d8:ab:4d:51:a4:2c:
2e:f7:9d:cc:f4:12:ae:07:80:8f:8b:85:31:6e:32:a4:ed:a0:
1a:0e:f7:cd:81:2d:37:89:1c:72:53:6f:51:60:e6:df:39:71:
44:7e:e1:4d:62:d6:14:d9:ac:bf:a8:39:5a:4a:36:f9:a7:e0:
63:b2:2e:df:bf:bd:4f:2c:c0:ac:6b:ce:f3:c5:c2:5b:d2:43:
a5:73:87:cb:fc:21:89:07:1e:c5:0b:6b:05:a2:65:2c:86:2b:
a1:1e:6f:98:a0:b2:ae:ba:4c:58:8e:7f:a8:33:28:ac:d3:c4:
ab:2c:f7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:39:41 2025 by rpki-client