Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
File: KS-wn35or-lfI5ExFObApqpyb90.mft (raw, json)
Hash identifier: NqhwYFGSIZ32dVPgfRNzPARqnA9J2Os1tEhwGT2wt4s=
Subject key identifier: D2:44:25:FA:B8:66:17:4E:55:9A:44:91:27:ED:B8:50:3E:AB:D2:E2
Authority key identifier: 29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
Certificate issuer: /CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Certificate serial: 019931C83C80C03607286BBF441D4A97AB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
Manifest number: 038F
Signing time: Wed 10 Sep 2025 04:00:30 +0000
Manifest this update: Wed 10 Sep 2025 04:00:30 +0000
Manifest next update: Thu 11 Sep 2025 04:00:30 +0000
Files and hashes: 1: JyTHeWPSw0N2vvDNyoUd8epHXA4.roa (hash: OacdQD8AGHB+uL8UAW3yHrwnc616k4RTRtDRnug3bmo=)
2: KS-wn35or-lfI5ExFObApqpyb90.crl (hash: XyIV7iDNcXZk8aZtfGM8PazXvtanF2UVMGSBAcEj8qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:3c:80:c0:36:07:28:6b:bf:44:1d:4a:97:ab:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Validity
Not Before: Sep 10 04:00:30 2025 GMT
Not After : Sep 11 04:00:30 2025 GMT
Subject: CN=d24425fab866174e559a449127edb8503eabd2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:cc:ff:9c:5e:69:86:66:8d:70:95:8f:86:
a6:f9:49:92:06:36:c3:f2:83:59:99:8e:ec:60:ce:
39:6f:27:a6:2f:7d:92:f4:fe:2f:bc:76:3d:e6:c3:
40:2d:82:46:8a:ab:44:75:9f:d2:88:ea:44:c9:be:
1d:ef:67:bf:c5:a7:d5:0b:6d:d3:e6:0c:75:23:d1:
18:00:dc:65:13:e1:23:e0:0c:14:b3:0d:60:2e:fe:
85:4c:37:e6:88:b1:2e:44:6f:97:3c:a0:71:15:25:
9b:2b:53:ac:12:97:2d:3f:cb:95:6c:f6:db:2e:63:
6f:76:d5:9f:34:b7:9c:2f:45:2e:ca:c7:a9:10:80:
65:00:73:13:06:81:34:69:0f:b9:9e:92:9c:c3:9c:
dc:30:b1:30:59:4f:41:a7:e6:00:b4:0e:99:bd:d1:
83:21:6f:bf:f6:69:95:b4:2d:ec:f0:81:f9:fb:17:
a7:e3:64:b0:b7:ca:0f:49:33:5e:e6:3b:cb:db:27:
ac:a6:4b:93:19:0f:31:6a:86:2e:31:33:20:94:d4:
26:f8:df:dd:66:67:dd:63:78:26:d9:54:b4:d3:11:
e3:07:78:28:f6:0f:32:52:c8:d3:97:8d:3d:9a:d3:
52:38:e7:17:6a:43:42:27:66:2f:3f:84:8a:f7:cb:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:44:25:FA:B8:66:17:4E:55:9A:44:91:27:ED:B8:50:3E:AB:D2:E2
X509v3 Authority Key Identifier:
keyid:29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:81:c9:f2:c7:a5:33:cd:de:7e:1a:5b:e0:4f:b0:8e:2e:43:
b4:59:78:b3:26:ad:72:fa:e5:62:9c:7f:37:ba:9d:83:bf:50:
f7:4e:35:53:9b:0f:d3:74:62:e0:97:32:90:74:3f:54:7d:e3:
88:dc:91:a6:03:48:74:39:82:d7:a4:b8:ac:37:69:74:d2:dd:
0d:20:a1:2f:29:99:3f:c0:7c:cd:1b:df:1d:a8:e0:3c:30:8c:
86:9c:34:95:80:99:13:b7:fd:2b:11:fb:e1:dd:34:5f:f6:c4:
aa:89:ed:2a:b3:d1:dd:b8:a2:c5:14:11:28:84:f3:01:77:28:
8c:cf:24:6f:48:2c:4b:1b:42:2e:cf:02:ba:33:94:1e:24:d1:
cf:55:12:28:6a:19:80:77:03:06:ae:54:9b:10:e0:7c:ad:5f:
5f:f6:b1:7c:90:d3:7f:6d:3c:e3:0e:a0:c1:ce:9f:03:70:1b:
05:9d:fd:69:fd:4d:a8:6e:4b:ae:3e:bf:c8:d9:77:dc:f1:b5:
be:ac:42:07:fa:d7:49:4a:c1:48:89:f5:b8:72:09:bb:18:98:
a8:dc:a6:2d:0d:71:2e:93:56:22:1f:6a:26:ed:86:97:59:ac:
a7:f3:fb:d5:79:f3:10:aa:4d:b7:fc:65:90:a6:78:ee:c3:1e:
43:48:51:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxyDyAwDYHKGu/RB1Kl6t8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MmZiMDlmN2U2OGFmZTk1ZjIzOTEzMTE0ZTZjMGE2YWE3
MjZmZGQwHhcNMjUwOTEwMDQwMDMwWhcNMjUwOTExMDQwMDMwWjAzMTEwLwYDVQQD
EyhkMjQ0MjVmYWI4NjYxNzRlNTU5YTQ0OTEyN2VkYjg1MDNlYWJkMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv3M/5xeaYZmjXCVj4am+UmSBjbD
8oNZmY7sYM45byemL32S9P4vvHY95sNALYJGiqtEdZ/SiOpEyb4d72e/xafVC23T
5gx1I9EYANxlE+Ej4AwUsw1gLv6FTDfmiLEuRG+XPKBxFSWbK1OsEpctP8uVbPbb
LmNvdtWfNLecL0UuysepEIBlAHMTBoE0aQ+5npKcw5zcMLEwWU9Bp+YAtA6ZvdGD
IW+/9mmVtC3s8IH5+xen42Swt8oPSTNe5jvL2yespkuTGQ8xaoYuMTMglNQm+N/d
ZmfdY3gm2VS00xHjB3go9g8yUsjTl409mtNSOOcXakNCJ2YvP4SK98vVgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJEJfq4ZhdOVZpEkSftuFA+q9LiMB8GA1UdIwQY
MBaAFCkvsJ9+aK/pXyORMRTmwKaqcm/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Mtd24zNW9yLWxmSTVFeEZPYkFwcXB5YjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMTMxMTItNTc1OC00NTUyLWIyYWQt
ZWQxYjliOGU2NDcwLzEvS1Mtd24zNW9yLWxmSTVFeEZPYkFwcXB5YjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9lMTMxMTItNTc1OC00NTUyLWIyYWQtZWQxYjliOGU2NDcw
LzEvS1Mtd24zNW9yLWxmSTVFeEZPYkFwcXB5YjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYHJ8sel
M83efhpb4E+wji5DtFl4syatcvrlYpx/N7qdg79Q9041U5sP03Ri4JcykHQ/VH3j
iNyRpgNIdDmC16S4rDdpdNLdDSChLymZP8B8zRvfHajgPDCMhpw0lYCZE7f9KxH7
4d00X/bEqontKrPR3biixRQRKITzAXcojM8kb0gsSxtCLs8CujOUHiTRz1USKGoZ
gHcDBq5UmxDgfK1fX/axfJDTf2084w6gwc6fA3AbBZ39af1NqG5Lrj6/yNl33PG1
vqxCB/rXSUrBSIn1uHIJuxiYqNymLQ1xLpNWIh9qJu2Gl1msp/P71XnzEKpNt/xl
kKZ47sMeQ0hRqA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 10:02:48 2025 by rpki-client