Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
File: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft (raw, json)
Hash identifier: QfjSLQhRV6o9BQ6qzNdVgPfIEqzgrEBUqOj5upmtCcU=
Subject key identifier: 9A:7D:42:49:84:86:DE:BF:4B:56:88:B3:7D:4E:8D:4E:DC:43:CA:24
Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
Certificate issuer: /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Certificate serial: 0199228CDC585D972B141B52AD06AE57D5A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 05:01:20 +0000
Manifest this update: Sun 07 Sep 2025 05:01:20 +0000
Manifest next update: Mon 08 Sep 2025 05:01:20 +0000
Files and hashes: 1: o0fdFP8L6ZQ9z18ph8qAlZoBEzo.roa (hash: VPAIrOk53hiaGWh79TqFrzeWPMAWo/gbrSaxlcrP+GI=)
2: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl (hash: v6Qe1GlhSTT9U/q51m+d1laU0M7of3wkcmdz/ADqg3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:dc:58:5d:97:2b:14:1b:52:ad:06:ae:57:d5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Validity
Not Before: Sep 7 05:01:20 2025 GMT
Not After : Sep 8 05:01:20 2025 GMT
Subject: CN=9a7d42498486debf4b5688b37d4e8d4edc43ca24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:55:da:95:a4:cc:16:88:d2:1c:a4:6a:e1:
85:53:a4:23:41:e5:33:a3:7c:2f:1d:53:df:2d:de:
11:26:3f:31:08:50:a3:2b:35:d3:33:df:0c:1a:4e:
53:7f:bd:00:19:71:c6:02:d6:0a:e4:10:5b:89:ef:
4e:c9:2c:9a:84:7c:55:42:5e:68:bb:7e:b7:1f:1f:
a6:df:4b:ba:43:8c:c2:db:ab:06:1e:1a:a2:28:51:
cf:15:00:1a:78:42:54:46:13:58:f7:b7:a1:4c:30:
42:c9:5b:9c:da:d2:5e:7b:a8:5f:57:f8:83:84:ea:
7d:af:c5:de:f6:25:3c:26:d1:31:b4:fa:64:bc:5d:
42:15:1e:4e:59:61:bc:53:ed:ca:39:e2:d9:e6:f2:
3c:e3:e8:9d:13:d8:2f:f2:b1:8e:de:e4:fb:98:88:
d6:8f:e2:f2:97:3e:58:0d:8a:f7:03:20:b2:04:61:
7c:58:c6:0f:f1:1f:b8:e8:6c:a7:d5:4c:d3:a8:6f:
5c:ab:e3:f6:e9:1f:ff:51:2b:95:b0:5e:47:2b:53:
77:55:35:ea:05:80:0e:ce:15:3f:93:dc:5e:df:a1:
75:ec:0b:57:8a:9e:1a:81:81:dd:eb:22:3a:76:b9:
70:56:56:01:be:6f:06:d8:50:51:6e:77:c8:00:01:
f3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7D:42:49:84:86:DE:BF:4B:56:88:B3:7D:4E:8D:4E:DC:43:CA:24
X509v3 Authority Key Identifier:
keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2a:62:65:ba:71:99:b1:2b:da:88:0f:d0:19:eb:ff:45:4e:
4c:55:76:fc:db:cf:23:94:b1:e4:f8:2f:ce:5e:04:b2:70:14:
b3:c8:9c:79:f4:78:4c:bb:1a:e9:9d:85:30:5a:f6:f8:a9:ca:
8a:22:70:82:e5:20:10:cc:bf:75:e5:34:4d:10:b9:14:ae:08:
88:8f:e4:26:48:5e:3d:52:6c:8f:66:24:15:35:cc:4e:b5:40:
04:58:b1:71:33:78:82:46:8a:49:3c:7b:e4:22:67:81:4e:37:
52:b6:ee:26:80:fb:b7:a7:6c:30:62:ac:63:98:09:37:66:e8:
d6:37:d1:89:d7:75:36:de:fc:87:6d:3b:d2:31:63:f7:51:82:
6f:8b:f1:a5:24:27:34:11:b6:63:92:2b:c0:f2:32:42:98:dd:
a1:21:e5:67:aa:f0:50:a4:72:b6:0f:48:97:e0:19:ea:5d:60:
f6:d2:ab:e7:b4:2b:c5:dd:c9:af:13:25:68:4e:8d:96:4f:e6:
92:56:e2:bf:61:9a:f3:ae:de:35:27:e9:98:23:7e:ec:25:2d:
90:4d:b2:7f:4f:01:24:35:64:e3:54:9c:e8:48:94:c6:84:88:
1b:c1:1b:6a:58:dd:4d:dd:99:bf:8f:41:f0:61:04:59:6b:df:
12:5c:08:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:33 2025 by rpki-client