Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
File: KS-wn35or-lfI5ExFObApqpyb90.mft (raw, json)
Hash identifier: aVc0G3pZ7E4KyNxbForz4fPnE3P5SvC+89tQUzQajtY=
Subject key identifier: 6E:06:A5:89:17:9D:31:BD:C2:F4:64:27:6B:29:25:67:B2:BB:B1:91
Authority key identifier: 29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
Certificate issuer: /CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Certificate serial: 019A2109A1381FB1FE380F57396170DBFDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
Manifest number: 040B
Signing time: Sun 26 Oct 2025 15:01:10 +0000
Manifest this update: Sun 26 Oct 2025 15:01:10 +0000
Manifest next update: Mon 27 Oct 2025 15:01:10 +0000
Files and hashes: 1: JyTHeWPSw0N2vvDNyoUd8epHXA4.roa (hash: OacdQD8AGHB+uL8UAW3yHrwnc616k4RTRtDRnug3bmo=)
2: KS-wn35or-lfI5ExFObApqpyb90.crl (hash: bZK85TPaF3/r8ggqcz74QChUqMBClqvZPCLb0nGYj+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:a1:38:1f:b1:fe:38:0f:57:39:61:70:db:fd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Validity
Not Before: Oct 26 15:01:10 2025 GMT
Not After : Oct 27 15:01:10 2025 GMT
Subject: CN=6e06a589179d31bdc2f464276b292567b2bbb191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:db:1c:2e:f0:c5:32:35:65:e4:93:a8:7d:
0c:f4:72:a1:a5:a3:37:0b:17:ff:8d:2f:99:b6:0e:
d3:de:d9:3b:da:01:53:f9:e2:9c:89:66:23:f8:dc:
2d:43:54:fc:67:9f:c3:d3:e0:69:29:1d:27:8d:3e:
a0:dd:fd:c1:9a:93:57:ee:ab:b0:91:b7:66:44:33:
96:1f:a1:7c:ac:01:93:c7:c4:1d:68:d4:0c:d6:75:
dd:bf:26:84:1b:89:97:be:67:2d:4f:fc:23:8b:4d:
fc:5a:68:78:52:ee:a3:38:56:e7:9a:09:31:d6:85:
e5:b6:59:15:0e:0d:af:33:b3:1e:9e:73:34:f1:63:
ed:09:25:64:7d:7a:1b:b5:4b:2c:ae:a9:25:8d:fe:
d7:ed:5c:7f:7e:02:2d:4f:b7:ed:bf:4c:6d:55:6f:
72:12:95:8f:44:50:1b:74:b2:51:5f:22:95:be:60:
9d:9e:2c:17:05:5c:25:cf:77:9b:b7:10:9a:33:e2:
1e:6b:53:a0:c7:07:46:48:26:66:a9:a1:d9:b6:ff:
02:47:12:e0:fc:e2:13:ee:48:45:a6:4b:fa:3b:90:
3d:67:fd:cb:90:5f:16:f4:d7:44:4c:40:cc:c6:f4:
17:23:44:ba:12:c3:bc:d0:a5:b3:dd:6c:4a:9f:65:
0f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:06:A5:89:17:9D:31:BD:C2:F4:64:27:6B:29:25:67:B2:BB:B1:91
X509v3 Authority Key Identifier:
keyid:29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:79:8e:99:28:49:a3:f3:c9:12:1a:c2:0b:a5:5d:92:6e:ad:
7f:cd:33:06:79:76:c4:51:ff:33:7d:30:17:0a:e3:ec:c0:2f:
15:00:b4:bf:14:d9:27:59:55:e3:3e:1e:6d:71:c1:7a:64:67:
6e:75:f1:ca:09:f5:4a:93:40:35:61:73:7b:a3:c0:8d:89:55:
b4:a3:96:13:f8:e1:9c:0d:4e:10:50:8f:55:49:ca:2b:b5:d0:
ed:bc:5c:06:7f:01:ae:28:4d:23:ad:6d:d0:96:a9:72:01:01:
7f:85:ad:74:d8:26:56:91:23:33:6d:fd:89:0d:be:53:56:1e:
3a:e9:c0:80:6b:ab:56:af:78:fb:db:95:10:26:c1:e5:6c:9f:
64:64:8e:af:5a:1d:ee:dc:da:65:9f:58:6d:ac:0a:cb:21:8c:
d2:3d:09:8a:c7:bc:59:4a:e5:7c:a1:04:70:16:05:32:9d:7a:
4b:9d:b4:da:76:8e:29:9a:b4:cd:96:65:a8:75:99:09:78:ae:
71:83:a4:15:38:83:31:95:51:f5:37:5b:1c:0f:e6:bd:98:e1:
eb:0d:3e:f5:dc:c8:e3:6c:3e:05:eb:a8:cd:1c:80:d7:f9:08:
2c:60:58:8a:e3:36:3d:07:f1:d2:c6:c1:b8:7a:32:d0:eb:16:
8b:87:0d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:17:14 2025 by rpki-client