Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json)
Hash identifier: dBMqQg6ie67wIgoS0hP3GbPzxBgyk/Pkk4zuzBOQDU4=
Subject key identifier: B9:73:77:D2:83:41:9E:17:7B:1C:4A:6C:A9:55:BF:C5:BF:0E:18:1F
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial: 019A55D28455190921E12A1BC38E992F779A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
Manifest number: 06BF
Signing time: Wed 05 Nov 2025 21:00:50 +0000
Manifest this update: Wed 05 Nov 2025 21:00:50 +0000
Manifest next update: Thu 06 Nov 2025 21:00:50 +0000
Files and hashes: 1: Ye0egtqoH6uMAlA-InFGtPoYhOI.roa (hash: zCIyCUBIV+P7SfqRZSH5RkFwyM3/tcMjHBwHN8QTJs8=)
2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: l2PjfoaXILws6uMqPHXzrp6ZF3psVlD6lhmCNz/icVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:d2:84:55:19:09:21:e1:2a:1b:c3:8e:99:2f:77:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Validity
Not Before: Nov 5 21:00:50 2025 GMT
Not After : Nov 6 21:00:50 2025 GMT
Subject: CN=b97377d283419e177b1c4a6ca955bfc5bf0e181f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:03:ba:90:8c:0b:cb:a0:27:e8:ba:e9:bf:
bb:b3:bb:68:05:c1:9a:50:5a:cd:53:49:2c:af:f7:
6a:7b:bd:86:c1:ed:3c:20:55:bf:0f:1b:73:a6:06:
17:71:11:b1:2e:0d:c5:b1:00:76:d4:d0:f5:71:e4:
b0:ee:c0:8e:26:b4:fa:4a:2e:fa:9e:94:f1:67:a2:
ec:d7:08:aa:f8:e2:95:69:5b:3b:ef:cd:3c:73:2b:
88:4a:81:1b:5f:52:6c:ac:2b:cf:06:d9:93:e5:52:
2e:1e:e9:bd:66:8e:2a:f5:ed:be:8d:1b:77:66:3c:
12:c3:ff:71:62:a4:63:89:d3:8c:a4:41:63:99:64:
b3:b8:f3:08:db:bc:5d:26:4f:0c:0d:bf:1e:43:71:
c0:73:73:17:87:df:fc:be:9e:3e:c9:e6:d2:eb:3e:
2d:40:77:93:70:bd:04:00:15:25:35:6b:bf:c4:db:
3b:14:09:97:98:f8:59:72:b7:a8:0e:46:fa:69:65:
e1:32:49:60:79:72:43:1b:c6:5a:85:3a:f8:56:b9:
c2:fc:b7:0a:63:66:51:45:93:b6:e3:44:35:f8:ad:
01:3a:70:c5:7d:53:7d:e4:48:6a:52:98:c6:77:8e:
22:f1:af:56:67:c3:e9:f2:f7:be:67:f6:38:31:d6:
d1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:73:77:D2:83:41:9E:17:7B:1C:4A:6C:A9:55:BF:C5:BF:0E:18:1F
X509v3 Authority Key Identifier:
keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:75:c7:a7:13:f9:78:10:18:d7:5d:85:2a:7e:94:71:f2:06:
ae:8c:31:42:99:76:0c:ab:63:1f:55:e1:0d:42:79:97:4c:f1:
24:a3:04:6b:80:c4:85:83:78:61:2c:cd:30:ae:0b:b3:b4:62:
78:6c:2d:76:ce:f5:d7:bd:25:b2:1c:12:34:d2:25:6e:46:bf:
70:64:47:8f:f8:31:25:67:5f:a5:47:0b:92:ae:e6:53:d0:39:
1b:e9:49:1f:45:3e:ad:30:bc:6d:53:64:51:0f:70:9d:6d:eb:
1a:16:19:cb:5c:9a:92:ff:61:bc:82:65:47:36:30:b0:12:c3:
df:4f:5d:93:f8:39:9f:c2:43:a6:d7:13:ee:c6:56:2f:11:e9:
85:c2:70:5b:02:57:67:6f:6d:40:77:88:11:9d:08:57:40:28:
99:84:8c:9f:f1:19:72:98:82:29:ad:52:3a:18:ee:57:cd:f1:
d9:79:e4:ee:58:59:ed:12:42:f0:35:78:e4:1d:8f:da:fa:fa:
ce:b3:3e:df:6d:dc:ab:a6:e3:d9:0a:9f:92:05:59:b9:5d:86:
4c:18:cd:7e:f7:c6:9f:51:d5:3d:35:98:0a:a7:9e:e7:e2:b0:
b7:c5:6c:4e:dd:2e:7c:c9:42:14:9e:6d:97:4c:bb:b2:d7:86:
81:c5:83:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:35:33 2025 by rpki-client