Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
File: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft (raw, json)
Hash identifier: kvyYni1uavBBG7UOzsZGGRZo02uCtMMppGDoig/K6HM=
Subject key identifier: DB:4A:61:39:11:50:1E:22:9C:FB:35:84:B2:D4:89:F1:AC:F7:0C:0A
Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
Certificate issuer: /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Certificate serial: 019A4DE18563A29C0B757346D72F95AE68E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:16 +0000
Manifest this update: Tue 04 Nov 2025 08:00:16 +0000
Manifest next update: Wed 05 Nov 2025 08:00:16 +0000
Files and hashes: 1: o0fdFP8L6ZQ9z18ph8qAlZoBEzo.roa (hash: VPAIrOk53hiaGWh79TqFrzeWPMAWo/gbrSaxlcrP+GI=)
2: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl (hash: kGM9SrKYIGWIVHfw8znGff1RTdnWOe8w/auQaSqkBTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:85:63:a2:9c:0b:75:73:46:d7:2f:95:ae:68:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Validity
Not Before: Nov 4 08:00:16 2025 GMT
Not After : Nov 5 08:00:16 2025 GMT
Subject: CN=db4a613911501e229cfb3584b2d489f1acf70c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:43:4c:3d:f1:59:e4:91:b5:1c:e6:81:38:
a0:70:5a:c6:d5:03:6d:81:3d:6e:ae:ad:6d:4f:f2:
fa:1c:0e:10:1a:66:bf:22:f1:85:01:bf:4e:5b:a2:
82:dc:d5:c8:ed:e5:84:ff:e9:5b:dc:c3:7c:8a:b2:
b9:31:87:a9:ce:64:a8:32:f7:eb:67:06:c9:96:84:
d3:05:a4:06:d5:76:82:d1:11:87:0a:ce:73:1e:d3:
60:87:24:17:ad:69:18:98:6c:02:85:0e:94:91:b1:
27:12:0e:0f:b4:fd:bc:47:24:4d:98:88:df:42:10:
dc:fb:db:2e:88:00:fd:de:e1:49:05:57:e6:9a:f8:
ec:fd:13:10:ee:b4:a6:0d:b8:92:05:14:bd:92:b4:
e7:01:45:ff:7e:b7:50:42:c0:c5:de:49:09:18:a3:
14:89:48:32:b3:76:c2:89:de:90:b3:6e:02:55:ed:
23:bf:06:c5:3c:f4:a3:c6:39:b0:72:0e:f7:a4:c6:
6e:2e:71:fa:2c:8d:25:f9:5c:c7:c7:f6:95:d6:69:
7c:81:79:8b:dc:fa:46:30:75:b7:97:2c:d6:ac:78:
c4:2c:7b:9d:c8:ab:54:52:44:9c:96:03:72:f4:15:
00:ed:0a:fb:28:07:4c:f4:9f:a2:82:c5:15:f2:23:
2d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4A:61:39:11:50:1E:22:9C:FB:35:84:B2:D4:89:F1:AC:F7:0C:0A
X509v3 Authority Key Identifier:
keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:8c:12:ee:e8:12:36:ce:c8:6e:a5:1c:d4:b3:19:ed:3c:ba:
22:29:cb:ca:45:cb:b6:af:7f:d3:e3:7d:69:c5:8c:0c:80:0a:
f6:d4:ba:11:d0:1e:ca:2c:8f:eb:65:7d:02:ed:e0:d5:18:a6:
69:c8:0a:93:17:28:d9:e8:4d:c1:ee:04:08:5a:b2:e4:6e:72:
a1:9a:47:ed:9c:3f:3e:3f:a0:50:74:5e:4c:2e:bb:13:cc:09:
00:f4:ac:f7:96:02:68:5a:c6:47:4f:e2:32:3a:c0:ad:5e:de:
c1:d0:b9:2b:a7:75:5e:43:1d:74:19:de:ea:af:c0:62:a5:bc:
35:92:70:5a:94:45:84:1d:6c:4c:e4:3d:8a:47:fb:3f:ab:62:
58:77:49:14:5e:d7:e3:ef:6b:5a:d6:5b:1e:9a:a7:a2:0b:2e:
6b:96:19:3c:97:c1:49:ab:df:4e:e6:e7:59:d0:1c:4b:1a:06:
25:2e:84:b5:03:ec:2f:26:53:32:67:5e:e9:93:4d:f9:89:9e:
12:7d:6e:75:01:8b:63:f9:ba:90:69:ad:2c:a5:4b:a3:57:98:
47:b0:60:6f:13:5a:ef:df:9d:0e:4d:2d:60:56:7c:b2:25:68:
12:15:ef:8e:9f:ac:8e:56:43:dd:be:fa:ec:4c:9d:4d:d8:c8:
49:22:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:54 2025 by rpki-client