Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
File: wnRsy35zqcww7wTt188WzB2UaJQ.mft (raw, json)
Hash identifier: rcZrw78b7FfRejkaJY8UfzKSfRXpwBUyMPN2SeWNuqo=
Subject key identifier: 16:63:17:CF:BC:22:98:B5:97:0D:C3:09:34:35:5E:EA:09:52:9C:58
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial: 019A4D06E6C16DB345E1FDE688CE456F0BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
Manifest number: 116A
Signing time: Tue 04 Nov 2025 04:01:29 +0000
Manifest this update: Tue 04 Nov 2025 04:01:29 +0000
Manifest next update: Wed 05 Nov 2025 04:01:29 +0000
Files and hashes: 1: MaNg2WPI-q4to7SVp52zO_QNsfw.roa (hash: HsUZQaqhFj/mJrXYPb29143giiHL5X0iJfJWhLhO0VU=)
2: wnRsy35zqcww7wTt188WzB2UaJQ.crl (hash: ZYseWPiXcdh2k/6IUxtrRqjGEK+DkrIFeX38/Y1GueQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:e6:c1:6d:b3:45:e1:fd:e6:88:ce:45:6f:0b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Validity
Not Before: Nov 4 04:01:29 2025 GMT
Not After : Nov 5 04:01:29 2025 GMT
Subject: CN=166317cfbc2298b5970dc30934355eea09529c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e2:3d:80:d7:3a:01:b1:f7:d2:18:49:b3:df:
76:78:3c:6e:0c:96:74:90:ff:2f:a0:61:14:1f:f3:
86:0e:00:40:a0:26:e4:14:64:8f:a5:08:1e:0c:74:
ea:50:82:2e:14:d9:26:7c:83:23:52:8e:4a:03:3b:
22:40:a2:a5:bf:40:a1:9f:fa:b8:7b:bf:e0:7f:52:
8d:a8:69:04:a7:dd:c6:3e:f4:35:76:b8:92:b1:bb:
8d:4d:e8:a9:c1:e8:54:6c:8a:e1:a6:34:09:e9:08:
24:9d:7b:52:d2:61:d5:be:ed:91:0c:66:b1:8b:94:
72:29:e7:87:3d:8d:e1:a3:9c:da:76:46:a3:e2:a7:
0c:5a:27:55:0b:14:f4:a7:a9:ff:53:bd:c6:f7:3c:
69:31:23:26:1b:22:66:da:d6:33:29:08:8f:7f:04:
73:e9:e7:5f:cd:f3:0a:d8:b2:5a:87:fa:9e:cb:c8:
91:40:cc:17:35:cb:cf:a0:e0:78:20:2c:80:f7:24:
8b:6b:56:9e:ae:f1:98:59:a9:bc:89:1e:fa:22:29:
fb:79:c6:da:ac:7e:fb:81:38:91:cd:9e:81:65:02:
43:cc:5c:35:a8:9a:9e:6a:fd:ce:19:80:e4:5d:65:
71:de:45:98:63:dc:e9:be:83:0e:57:b8:84:1a:c6:
fc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:63:17:CF:BC:22:98:B5:97:0D:C3:09:34:35:5E:EA:09:52:9C:58
X509v3 Authority Key Identifier:
keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d3:5d:60:0a:06:6e:54:9d:06:8a:16:09:de:ae:fe:8b:06:
8e:1e:0a:0a:1d:ae:78:18:65:88:a2:4c:9c:5e:ef:22:ce:c1:
c0:f0:eb:84:a3:61:53:c2:da:48:96:ae:62:61:eb:ec:73:5f:
74:c6:51:ad:0b:81:97:dd:6e:1f:df:45:1c:1f:90:13:38:92:
37:33:9f:c6:71:6d:09:a7:12:a2:19:5b:91:29:1c:a5:c6:c7:
51:2d:61:e8:07:2f:8f:2b:ac:38:88:17:6b:89:e1:8b:c0:a6:
83:de:71:3d:14:e6:a5:af:5e:3b:7c:c9:97:3f:14:5b:cd:0d:
c5:8b:dc:9e:a6:8c:93:25:72:ae:d4:e6:7a:0b:30:32:74:e5:
93:5c:d1:a1:af:43:e9:42:de:aa:da:9e:5b:d3:51:95:e9:6c:
2c:67:ea:e9:ab:e3:8c:97:78:38:71:c0:a6:06:22:78:73:b1:
c4:fe:47:8a:36:b5:62:e4:6c:36:c1:14:6a:e7:8d:ec:0e:65:
a4:4e:1e:f4:3c:ac:be:55:d9:fb:a9:fb:98:cc:f7:cf:00:b9:
be:b4:ae:cd:1e:b7:05:dd:9a:64:40:77:32:e9:e4:9e:dd:1e:
b9:f8:31:a2:8f:a1:dc:df:b4:9c:94:c2:59:dd:14:19:c2:a3:
87:da:21:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:45 2025 by rpki-client