Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
File: WNKjVqVHgVW-qovGJWqG9tWz9zw.mft (raw, json)
Hash identifier: sEMqiGiX/57fnKh9NGnEgHlz8dlNqki/KYSq3APnsrI=
Subject key identifier: F5:4B:4D:BD:CC:7F:43:E0:3D:71:9D:B4:A4:52:66:82:11:F1:C3:2B
Authority key identifier: 58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
Certificate issuer: /CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Certificate serial: 0199172D438D52C4EC57D58AD6532A3BD82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
Manifest number: 166B
Signing time: Fri 05 Sep 2025 00:01:06 +0000
Manifest this update: Fri 05 Sep 2025 00:01:06 +0000
Manifest next update: Sat 06 Sep 2025 00:01:06 +0000
Files and hashes: 1: WNKjVqVHgVW-qovGJWqG9tWz9zw.crl (hash: GxlmiHX2xiShr3wwW5LRUAnWc60ceDh66cuQGdqwrmQ=)
2: g4DPD_TlI2jk4YtUIO3nppJCypo.roa (hash: 1cUob6Ttj1c9mZCdpqGoW3x2UVNqUiWBsqfqlcDpGkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2d:43:8d:52:c4:ec:57:d5:8a:d6:53:2a:3b:d8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Validity
Not Before: Sep 5 00:01:06 2025 GMT
Not After : Sep 6 00:01:06 2025 GMT
Subject: CN=f54b4dbdcc7f43e03d719db4a452668211f1c32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:1f:a4:ce:53:ed:88:7b:37:c6:39:5d:ea:
71:54:d3:2d:64:b5:f4:f4:53:bf:3e:ca:06:9f:f0:
d7:2d:2e:8a:c9:1c:10:d9:74:bc:47:a2:d0:4c:2a:
c1:08:3d:ff:86:f9:08:d8:df:f5:99:85:dc:58:9d:
4e:d4:61:9e:1b:a1:ed:89:d1:49:0d:c6:36:0e:46:
45:9f:9f:20:a9:cf:fa:9f:68:0e:dd:a1:49:ca:3e:
3c:42:62:37:f0:9c:fd:c4:5b:ee:da:97:76:67:78:
9a:69:30:5e:54:0b:53:bb:24:58:10:b0:2d:0b:99:
cd:3a:2f:d8:db:c4:1e:46:0b:6e:6e:f1:ce:f1:8f:
f5:3c:37:b5:b7:19:de:8a:15:01:dc:96:45:4a:ed:
6d:22:3e:d9:cc:4b:ae:8a:8a:1a:48:8b:0d:a9:23:
cc:22:3f:11:d0:d3:88:18:c9:44:85:ca:a8:8a:e0:
db:70:a5:f1:5b:e6:08:c5:ed:fa:ae:e8:74:3c:57:
41:60:84:65:dc:c2:c9:3b:f2:07:e1:3e:2c:01:fa:
dc:27:de:ce:ad:26:5e:dc:e4:af:16:66:f6:cc:13:
30:27:15:81:6d:69:dc:04:eb:20:4a:aa:ef:a5:10:
8e:1f:13:ba:0e:60:a9:4b:38:b5:34:e1:da:2e:4f:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4B:4D:BD:CC:7F:43:E0:3D:71:9D:B4:A4:52:66:82:11:F1:C3:2B
X509v3 Authority Key Identifier:
keyid:58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:59:40:f2:e1:81:dd:f8:0f:84:a9:f2:41:c7:ea:dd:9d:dc:
74:29:15:e3:fa:89:74:04:7e:37:31:c4:f0:76:8f:a1:fd:51:
3d:cc:6b:dc:1f:ff:db:93:bd:bf:34:6f:ca:a2:60:40:c4:d8:
44:c7:e2:c0:a0:5a:60:04:5b:bf:6d:ad:b1:0b:c0:25:0d:39:
af:53:4a:a2:d1:a3:4c:5d:aa:1c:72:e1:04:1f:3c:ba:b3:d0:
af:4c:24:28:37:42:7d:02:6f:0c:49:06:c2:9b:d9:11:09:fd:
5b:a9:cd:a4:4e:11:1b:05:c7:02:7e:e9:ba:4e:83:d9:55:0c:
a5:03:8e:ab:ae:af:ee:59:3b:ae:83:e8:00:ae:81:8f:51:9d:
79:a0:7c:25:08:57:a7:94:8e:13:0a:69:e3:eb:ed:e7:59:3c:
5b:d8:78:c9:a4:48:dc:11:41:98:4a:47:43:f4:35:f7:a7:d0:
9b:a2:38:6d:1b:0b:7a:db:59:8a:4b:4c:a9:9f:21:07:66:50:
d9:5e:c1:1b:1a:fe:2a:78:5a:fd:e8:71:18:60:35:51:9c:9b:
e7:e4:a8:83:a9:ab:4b:37:04:37:70:8f:77:d8:c5:40:b5:ef:
51:3d:92:f4:6b:d6:f5:9e:82:36:92:08:2e:96:79:d3:9a:e1:
14:a0:bc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:21 2025 by rpki-client