Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
File: wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json)
Hash identifier: 64b53mp00GGGEdcmETDjKf4YnsfDn6myh15etXIO0K4=
Subject key identifier: 1A:C9:56:70:39:88:39:16:A3:05:D8:BB:4B:2E:FD:4F:16:7C:A9:EC
Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
Certificate issuer: /CN=c272d4761240359acba8a337d3ac3a9397925a72
Certificate serial: 01988B45CC57353DCD7A9A9B3C3611D15556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 20:01:03 +0000
Manifest this update: Fri 08 Aug 2025 20:01:03 +0000
Manifest next update: Sat 09 Aug 2025 20:01:03 +0000
Files and hashes: 1: 70HJo7jmffKHG2PpOcP0KSY9roI.roa (hash: DYvGlsMyhOdp02WTRHANgmcPEVdr2t5PTlBu3xJcVlU=)
2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: vNr1uaOODReocamIBxNuifur4q6eEp9AjsRTikg21MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:cc:57:35:3d:cd:7a:9a:9b:3c:36:11:d1:55:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72
Validity
Not Before: Aug 8 20:01:03 2025 GMT
Not After : Aug 9 20:01:03 2025 GMT
Subject: CN=1ac9567039883916a305d8bb4b2efd4f167ca9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:56:1d:3c:4d:c9:49:03:d2:6b:de:0e:9a:dd:
e0:b6:cf:d4:2a:f8:17:1d:b9:b5:4b:21:3b:d2:b2:
85:bf:2a:ae:fb:91:4f:83:15:9d:18:21:b3:80:37:
fb:27:c4:24:fb:c3:68:0c:b2:e6:1c:f7:ff:75:51:
e3:c6:2b:74:93:7b:ed:0a:85:e1:ce:94:20:46:bf:
64:a7:7b:78:fe:04:f3:2b:df:38:17:08:7d:dc:f2:
03:34:b9:f7:d0:8f:45:73:9e:7a:11:3d:8b:85:a9:
9e:0e:d8:0d:0e:9f:df:93:97:a8:b0:6a:6a:46:05:
f8:0b:e7:cb:35:fe:29:33:0c:de:8d:04:d3:81:7f:
8c:66:36:2f:53:aa:07:d0:1b:03:c1:54:5e:07:80:
ec:f9:09:20:75:1e:f8:2c:9a:fe:fc:26:0b:6e:e8:
a2:ae:9f:14:aa:1e:8b:3c:3a:2d:95:58:a2:ae:9e:
1d:21:79:07:53:5d:04:c7:0f:26:df:a0:d0:66:c7:
48:9b:53:b2:59:72:3d:bb:bc:3c:8b:98:2a:9a:8b:
2f:e7:88:e0:ad:87:2a:83:db:6c:b3:f4:12:97:b4:
cc:13:26:5d:c5:d9:e4:67:e2:3c:88:06:e0:4c:b9:
8e:06:9d:b7:e7:65:a8:bb:a9:f7:ff:49:ad:aa:03:
6a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C9:56:70:39:88:39:16:A3:05:D8:BB:4B:2E:FD:4F:16:7C:A9:EC
X509v3 Authority Key Identifier:
keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:87:ff:c0:11:54:9b:a0:05:38:be:e7:15:5a:1b:ba:22:87:
78:84:b2:a7:54:48:56:27:3d:f0:6b:14:f5:f2:6b:0c:d2:ff:
13:97:66:e6:dc:ab:d5:0a:a6:d1:8e:88:bb:12:e5:c1:56:2e:
ce:43:d5:85:1a:9a:b4:9a:11:87:f1:b4:2b:8b:98:e0:e5:a4:
b2:77:a6:52:62:cd:12:fb:d1:09:a8:2f:24:32:2d:9f:cb:e7:
56:3e:3f:d4:78:e5:d9:de:24:27:fb:6f:92:81:de:97:cf:12:
c6:5f:e9:1e:59:36:1d:1e:00:ec:d6:c2:c1:8b:da:f1:56:8f:
b3:d0:dd:75:fa:48:4c:74:ef:c9:a1:71:67:ec:10:97:e9:b1:
50:d6:a1:18:6d:93:0c:3b:8f:a3:8b:15:68:d9:2a:88:00:fc:
10:97:87:82:64:ab:fc:1a:a2:60:4c:be:19:cf:89:0f:fb:08:
8d:f8:1a:44:8c:f8:09:b7:7d:18:38:0b:8a:67:4d:a9:00:56:
9d:b4:46:f4:a4:c1:75:85:10:c1:a8:80:c0:b1:04:4a:d1:d2:
2f:98:7e:22:8b:49:4d:da:81:5c:fb:08:ac:20:ae:9f:55:9a:
f8:a2:4c:e4:53:60:20:f5:dc:60:0a:5b:63:42:90:4d:7f:a1:
57:b0:9c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:37 2025 by rpki-client