Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json)
Hash identifier: aira1pEadbkgacV9VAc1AgVJsp5a1gXN+FZCdwD7j/w=
Subject key identifier: 50:34:FF:0F:33:9A:1D:4C:DF:69:00:41:0D:15:7F:DF:FD:AF:78:45
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial: 019A21AD951D47A2B932118C159EA41D3A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
Manifest number: 06A4
Signing time: Sun 26 Oct 2025 18:00:15 +0000
Manifest this update: Sun 26 Oct 2025 18:00:15 +0000
Manifest next update: Mon 27 Oct 2025 18:00:15 +0000
Files and hashes: 1: Ye0egtqoH6uMAlA-InFGtPoYhOI.roa (hash: zCIyCUBIV+P7SfqRZSH5RkFwyM3/tcMjHBwHN8QTJs8=)
2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: Nxcp1QJ1vkVovzbTuL4/6G9rBvcZe55FDShhPQ9uA0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:95:1d:47:a2:b9:32:11:8c:15:9e:a4:1d:3a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Validity
Not Before: Oct 26 18:00:15 2025 GMT
Not After : Oct 27 18:00:15 2025 GMT
Subject: CN=5034ff0f339a1d4cdf6900410d157fdffdaf7845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:a1:92:11:0a:28:da:da:e8:c5:70:a9:f6:
bc:c2:c5:fe:cd:e3:2f:93:d5:97:08:11:41:f1:1f:
5d:be:4a:52:65:5d:bd:7d:f0:b0:d6:8e:48:7e:7e:
cb:59:24:27:c9:6c:e8:c8:9f:01:62:a0:c8:00:b4:
05:77:39:5d:bb:24:f5:0b:a2:63:d6:e7:34:6a:af:
37:a8:14:43:b2:49:20:ea:c3:11:3d:33:a4:6f:73:
7a:67:b4:55:43:a1:fc:47:6f:03:54:e2:66:b3:41:
90:f3:89:27:a4:c6:39:e9:df:26:b3:2b:ef:33:43:
c6:41:99:4c:74:f9:c1:4c:93:e9:eb:cd:2d:10:64:
37:c8:0e:90:5c:79:38:14:17:f5:6d:e9:4a:63:3a:
be:f2:f5:fe:53:b8:f8:96:41:95:10:9f:d2:ca:43:
3a:8c:5a:0a:f2:17:f4:02:dd:e0:60:b7:08:c5:44:
c7:30:b1:be:9a:a7:44:c7:10:10:a1:84:f0:56:e7:
84:c0:0c:34:11:39:83:22:56:56:29:48:18:bd:e6:
60:e3:c5:03:75:47:c7:20:be:db:1a:e0:9f:76:d0:
9b:4d:c6:de:81:9c:1e:79:1d:95:1e:5a:d4:fc:63:
e2:b6:6a:1c:cd:9c:df:e3:9b:c2:de:09:f4:e1:17:
6d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:34:FF:0F:33:9A:1D:4C:DF:69:00:41:0D:15:7F:DF:FD:AF:78:45
X509v3 Authority Key Identifier:
keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:74:43:76:0a:39:4c:c3:c0:01:fc:d1:26:4f:21:67:f5:cd:
31:1e:70:4b:90:a5:fa:a8:f0:5b:23:60:70:87:8f:82:33:ec:
c2:24:7b:75:b0:e0:9b:e6:df:28:a2:fd:25:59:f4:c9:32:2a:
d1:07:b9:9c:b1:f1:4c:ff:5f:da:bd:63:11:2e:3b:46:b5:1e:
ac:ee:05:18:4c:63:55:62:ad:54:66:36:52:9c:56:47:e8:a2:
b6:83:ed:56:80:ec:7d:68:07:10:00:f2:0b:da:33:4f:f8:fa:
50:89:ed:77:a5:a1:7c:ab:32:aa:03:7b:6b:f9:19:c3:6f:4f:
7b:23:6f:63:5a:b0:8a:f0:75:4b:3f:0c:96:ac:73:d8:b6:14:
b3:76:cc:96:e8:2b:c9:73:b4:27:b3:33:a9:7e:2d:43:6c:89:
0d:e3:c4:ec:e5:d8:86:5b:a7:4d:40:08:0d:3c:52:eb:0a:e0:
f1:48:a4:64:d0:36:ec:80:9f:a6:3d:21:0c:f6:f4:f8:0c:ce:
9a:11:dc:29:1c:6b:d2:e6:9f:71:fd:2b:b7:37:e0:8b:43:4a:
4d:f3:4f:f5:81:40:49:13:1b:ab:50:79:9e:5f:d8:e5:1d:38:
03:d9:be:d8:29:16:87:4d:b1:9e:34:69:d1:5e:b3:ce:d9:ff:
0c:bd:98:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:57:20 2025 by rpki-client