Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: 9/di4CCHZmReXEcnMUEoK3SDbiua/QvyaEHD0Zm7LII=
Subject key identifier: FA:9D:95:2B:C3:91:85:7B:1B:9C:AE:AD:E6:34:31:FA:A5:8B:99:05
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 01993314224C168A93D5398A364C92641CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 01E3
Signing time: Wed 10 Sep 2025 10:03:01 +0000
Manifest this update: Wed 10 Sep 2025 10:03:01 +0000
Manifest next update: Thu 11 Sep 2025 10:03:01 +0000
Files and hashes: 1: 1-5XVVmVVHnbWezmHevbBtqQuslE.roa (hash: TCMJyFyTSXpsoaD5GEolasl3XtqDe4iETZ7PPnlIixY=)
2: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: tVn1XDVpV4K0BcVjfgEQSflv+NygeeQzEqFJb1hDwlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:14:22:4c:16:8a:93:d5:39:8a:36:4c:92:64:1c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: Sep 10 10:03:01 2025 GMT
Not After : Sep 11 10:03:01 2025 GMT
Subject: CN=fa9d952bc391857b1b9caeade63431faa58b9905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:ba:e5:ba:dd:37:4e:8b:3b:55:e6:6e:61:
4f:a3:53:5a:e4:da:18:9e:f2:92:b1:4d:52:63:54:
a1:6b:29:68:d4:48:07:23:38:e3:79:37:7a:bc:3d:
c8:43:92:77:19:b0:ec:96:f1:45:b5:42:d8:bc:16:
e1:5d:2b:a4:54:90:4d:ba:c5:81:bc:c6:12:65:01:
b4:46:ba:90:24:fe:8d:cd:76:2d:a7:02:3d:3e:24:
46:0c:c1:c3:1d:3c:d8:84:db:41:6d:2a:a6:a9:df:
8f:88:0b:98:d5:53:78:d5:d5:de:e5:16:73:08:38:
7f:b5:cc:15:6d:3a:9f:e9:40:ad:cd:d0:0d:ed:e3:
7c:33:f5:a8:6f:05:03:88:6a:fa:d3:2d:6d:8d:aa:
b4:cc:0c:2d:49:f3:bb:a5:f4:0c:0c:7d:e0:b1:bd:
14:58:bd:e5:10:9c:97:d6:55:5d:21:58:c5:6d:07:
0a:85:c9:b1:79:98:fd:74:b5:dd:93:06:c0:ca:d5:
a8:c2:52:d7:03:d6:53:e8:11:df:b7:b7:86:80:98:
31:33:30:15:82:24:b2:19:19:b8:18:0c:7f:cc:88:
e1:af:3b:86:d1:89:ee:18:f0:2d:d2:13:18:6b:8d:
d1:92:33:37:b6:5c:bc:27:fc:7f:e7:8b:7c:d5:1d:
12:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9D:95:2B:C3:91:85:7B:1B:9C:AE:AD:E6:34:31:FA:A5:8B:99:05
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c4:85:a5:66:32:0d:43:51:3e:09:14:a7:20:07:86:42:1c:
ba:59:80:55:27:8a:e2:54:26:67:18:fe:2a:a7:a2:31:57:26:
0e:ba:a6:66:29:53:9c:e3:81:e4:6b:ad:e2:66:da:39:d1:f8:
eb:b7:8f:78:fe:da:8e:bb:8a:09:ae:e0:3e:10:d2:4a:43:d3:
8b:5f:42:bb:bb:2c:87:24:6d:3d:9c:d4:17:8f:0f:66:c9:ac:
3c:52:9b:43:1e:b7:aa:d2:83:b9:04:64:df:b5:3f:4a:d4:7c:
bc:e6:22:45:6e:b4:53:dc:60:84:6c:4e:e7:84:fd:a7:54:53:
6a:15:9b:da:eb:8b:78:a7:c4:fb:b3:11:c9:6e:f6:5b:d7:f5:
68:ee:ed:58:b4:8b:bb:e4:71:02:6f:b4:5f:3c:74:e0:29:88:
0a:6b:9c:0f:25:49:90:06:8c:cb:c5:a2:00:e1:ef:fd:d4:44:
27:06:f4:32:66:b5:d2:64:71:5c:bc:82:e5:9b:52:a2:bf:bb:
3a:51:df:f8:d1:2e:f0:7e:a5:54:e1:a8:43:ef:c2:d5:12:9d:
90:f5:75:5b:23:71:72:6d:8b:55:59:d7:b6:93:42:62:3f:dd:
46:f0:b7:24:7d:f9:10:2e:20:31:a2:a8:7e:e0:0b:15:cd:a3:
50:6f:5f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:15:53 2025 by rpki-client