Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
File: wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json)
Hash identifier: 7TtcM0rPNRpx7R0ZBr4oUXNrCGR6r6m/ppWrnW7cbCY=
Subject key identifier: 3D:1D:05:DE:3E:06:D2:2D:85:79:6F:2B:3C:84:C6:7F:68:75:25:CD
Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
Certificate issuer: /CN=c272d4761240359acba8a337d3ac3a9397925a72
Certificate serial: 019A71EED2CD841D887A0D0E50ED5FF6692A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:01:08 +0000
Manifest this update: Tue 11 Nov 2025 08:01:08 +0000
Manifest next update: Wed 12 Nov 2025 08:01:08 +0000
Files and hashes: 1: 70HJo7jmffKHG2PpOcP0KSY9roI.roa (hash: DYvGlsMyhOdp02WTRHANgmcPEVdr2t5PTlBu3xJcVlU=)
2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: gNZHTiwlGcqmKcU75XCC/67DAxtmI0yaDShMFy68z/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d2:cd:84:1d:88:7a:0d:0e:50:ed:5f:f6:69:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72
Validity
Not Before: Nov 11 08:01:08 2025 GMT
Not After : Nov 12 08:01:08 2025 GMT
Subject: CN=3d1d05de3e06d22d85796f2b3c84c67f687525cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:27:f2:94:8f:34:1a:00:d7:11:28:a2:c9:
c4:83:cf:75:d7:55:27:27:f3:04:c3:60:6d:c7:3f:
35:49:38:5f:cc:ea:b9:92:79:34:ff:5a:00:e9:fe:
87:52:14:bb:35:3f:0f:11:33:a8:7e:80:f5:7e:30:
c0:0e:e9:79:77:4d:a6:0e:9c:aa:b8:bc:fc:5f:3e:
d4:bb:3a:52:aa:7b:a7:ea:ec:ae:99:ba:0a:e0:d6:
19:fa:49:70:12:8e:8c:74:a2:3c:3a:37:28:5e:d3:
58:d8:94:70:4b:4c:f1:4a:37:cc:e2:5b:c3:3b:26:
40:fb:f7:a4:5b:9a:45:75:81:6f:e8:a8:2c:d0:d5:
c7:77:89:c6:6c:0f:e8:82:87:c5:5f:25:db:5c:27:
94:c1:27:c4:09:28:c9:f3:a6:39:b0:2d:c2:8b:92:
2f:09:75:73:78:4b:b0:8e:f0:85:9a:94:be:c4:6c:
b0:78:30:da:76:38:d2:54:54:b1:2e:29:ab:bf:a2:
29:cd:7d:88:52:8c:61:50:ff:eb:75:b7:66:47:46:
76:4a:11:37:a7:a2:e9:f9:89:84:a3:b5:3d:77:2c:
ef:33:32:d2:4b:ce:0b:05:df:59:41:68:95:3e:2b:
25:4e:dc:72:a3:cd:65:da:81:65:b1:4e:59:48:df:
bf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1D:05:DE:3E:06:D2:2D:85:79:6F:2B:3C:84:C6:7F:68:75:25:CD
X509v3 Authority Key Identifier:
keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:11:53:b2:f7:09:87:5b:e4:08:dd:6f:e8:35:7b:fe:83:6f:
b0:9a:b5:49:ee:1d:cc:05:9b:aa:aa:c1:22:98:99:0e:c2:e5:
64:85:0b:44:ab:51:3b:d2:45:95:4f:1f:da:26:99:8c:17:f2:
61:28:d1:1a:9e:6f:17:9b:3c:84:8b:04:85:cc:7e:4d:40:f1:
7b:c8:2f:90:3a:9a:99:cf:a7:ab:e2:64:21:65:55:32:67:29:
f0:1c:bb:28:99:0b:69:9f:e4:ef:3c:7e:c8:99:a6:7f:36:6f:
a0:ee:f0:02:70:17:b0:33:d6:5e:ae:87:4a:e0:30:ee:f6:8f:
1c:4c:da:13:d2:fc:dd:ab:5e:7c:ac:d8:b8:0c:a5:cd:22:47:
02:5a:b9:11:71:28:9a:f7:5e:31:1c:6e:9a:c3:13:6f:d9:36:
ed:d3:bb:5b:f8:ba:72:ae:cd:ad:2b:d6:46:22:17:0c:50:a6:
11:17:bd:69:96:6b:27:a0:62:8e:6a:64:e1:28:1f:15:c4:a4:
3f:c9:31:e5:47:d0:61:13:ee:84:b5:aa:50:71:74:ab:64:3f:
a2:8a:af:99:c8:07:8b:e6:0b:fe:03:c5:e9:32:0f:de:2a:c1:
b2:50:9b:c2:53:6e:2a:3c:a7:95:76:f9:e9:94:f2:9d:67:dd:
8b:a1:20:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:17 2025 by rpki-client