Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
File: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft (raw, json)
Hash identifier: GlVsAp7OULJeeE0gSquP8Z/v3db7EdsXJmcA5jReYmU=
Subject key identifier: 7F:28:E2:CE:AB:54:D5:D8:55:91:3F:6B:59:44:BA:BC:83:76:46:25
Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
Certificate issuer: /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Certificate serial: 019A72935C1A1614DF510A7B1274B2FE8D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:00:51 +0000
Manifest this update: Tue 11 Nov 2025 11:00:51 +0000
Manifest next update: Wed 12 Nov 2025 11:00:51 +0000
Files and hashes: 1: o0fdFP8L6ZQ9z18ph8qAlZoBEzo.roa (hash: VPAIrOk53hiaGWh79TqFrzeWPMAWo/gbrSaxlcrP+GI=)
2: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl (hash: slLvh/kGqwi9lyrVG9+qTKsprGfsoPKHqwJEYBdTiUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5c:1a:16:14:df:51:0a:7b:12:74:b2:fe:8d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Validity
Not Before: Nov 11 11:00:51 2025 GMT
Not After : Nov 12 11:00:51 2025 GMT
Subject: CN=7f28e2ceab54d5d855913f6b5944babc83764625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:b1:b6:07:55:ad:e1:de:7e:91:c0:24:48:
8f:83:0d:d4:f4:26:54:50:1e:65:25:5c:bc:a7:1b:
99:da:45:89:0c:8e:e3:97:4f:dd:d9:ee:0f:d8:91:
3b:cc:7e:2b:42:77:ff:72:31:e2:25:16:e6:4d:84:
23:f7:52:5a:ef:60:20:5b:e0:c7:42:ae:b2:b7:05:
0e:88:39:0f:bf:54:52:96:2e:84:e0:02:42:5e:be:
b0:dc:67:2d:81:53:bf:93:9f:a4:cd:ec:72:67:f5:
ba:ae:dd:ac:bf:36:54:35:21:9f:96:2c:c4:39:2d:
2d:f5:4f:9d:4a:93:b0:bf:5d:04:84:ae:3d:e2:36:
17:7b:38:aa:4e:cd:da:5d:82:47:6c:40:63:d6:1d:
61:ba:45:69:2b:e9:38:25:28:03:e4:fb:da:29:85:
a0:21:16:36:c4:1e:a0:7a:15:c0:a2:78:73:fd:4d:
50:95:3b:0b:e5:0b:c5:00:18:b8:73:be:4c:f1:a0:
b1:fa:9c:04:7d:c5:16:1c:c6:b3:9f:19:56:1d:76:
3b:b1:05:21:c9:ec:18:70:cb:48:c7:8d:51:1e:23:
ce:0f:f3:c1:59:bd:f0:53:4e:57:f7:ca:76:0e:59:
d3:44:de:ed:76:e4:a9:f1:b0:3b:4f:14:60:da:01:
5b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:28:E2:CE:AB:54:D5:D8:55:91:3F:6B:59:44:BA:BC:83:76:46:25
X509v3 Authority Key Identifier:
keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:03:32:74:a7:17:56:75:8b:24:cb:d3:01:23:7e:9c:c2:a3:
33:78:18:1c:f0:60:4e:b0:c0:dc:3e:94:08:68:89:d4:1f:1d:
eb:1b:b5:c4:ed:b4:73:d4:89:01:28:8b:71:fd:af:3c:c9:c0:
49:5e:86:02:b2:3f:86:26:79:07:58:ed:9e:6d:63:f3:02:06:
56:f9:97:12:e5:62:42:8c:9a:b9:10:5b:85:f8:6e:e8:a3:09:
48:d1:27:b9:1d:62:94:c1:fa:b8:52:fe:f6:9c:76:b5:82:f1:
30:85:44:5c:eb:aa:83:7a:53:57:2d:3f:b1:5f:8d:8c:04:7a:
91:1f:ea:61:db:45:08:ba:3d:ed:c2:40:45:86:f9:d6:e2:59:
fa:8f:27:a0:e0:6c:c7:93:41:0c:b6:c3:c9:48:c2:59:5b:46:
97:f4:d0:b1:d2:82:08:f2:9c:2e:08:26:93:2d:62:e0:d5:26:
1e:50:bb:dd:43:38:72:3f:13:85:12:cb:53:88:78:8b:65:d9:
d2:9a:00:ac:77:12:47:f8:b1:94:67:88:2f:f7:c7:95:ef:7b:
24:bc:27:b0:f9:30:06:d0:f5:e0:8b:e0:4c:48:65:6c:5a:be:
6b:34:51:fd:97:a5:6c:a5:0d:3f:7b:68:c9:51:1c:e2:42:da:
93:75:c3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:31 2025 by rpki-client