Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
File: WNidwYngCTYayyZVaA5mnAvEdFY.mft (raw, json)
Hash identifier: L/51UMT4yVUUJpW/gn8VCtKc7dN266CCUS43DImeAUQ=
Subject key identifier: 6D:2D:F1:6E:46:10:71:D7:34:BD:C2:E5:22:77:9E:E8:BC:7F:B0:C7
Authority key identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
Certificate issuer: /CN=58d89dc189e009361acb2655680e669c0bc47456
Certificate serial: 019A52637948F2FC6A89C26B6BBB26521D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
Manifest number: 0214
Signing time: Wed 05 Nov 2025 05:00:42 +0000
Manifest this update: Wed 05 Nov 2025 05:00:42 +0000
Manifest next update: Thu 06 Nov 2025 05:00:42 +0000
Files and hashes: 1: 28vwddYYnn-BejsfrgsHjSgfzQ4.roa (hash: UAZDR9r94HPPd9OVOKpoGQIjU2FUXfM+rJVeuMGWG0Y=)
2: WNidwYngCTYayyZVaA5mnAvEdFY.crl (hash: jWT6jUL4gNoQKlANsKrKm2zstHzQ0M67T2Es+X91/S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:79:48:f2:fc:6a:89:c2:6b:6b:bb:26:52:1d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d89dc189e009361acb2655680e669c0bc47456
Validity
Not Before: Nov 5 05:00:42 2025 GMT
Not After : Nov 6 05:00:42 2025 GMT
Subject: CN=6d2df16e461071d734bdc2e522779ee8bc7fb0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:e1:03:f9:4e:cf:71:1d:c8:9d:22:ff:75:
a6:42:df:2d:f2:a7:f3:c9:b2:c9:09:69:76:2a:72:
6e:3c:92:e6:93:a1:0a:d0:18:0f:bc:d5:71:93:62:
2f:a2:bd:47:1e:62:c4:07:d2:68:2e:62:fd:8a:f6:
8f:94:3d:c3:f1:bb:a1:a5:41:d5:01:1d:4e:49:41:
93:a1:07:01:4d:75:ff:76:f3:8b:38:4a:f4:fb:fb:
54:4c:1c:a7:b5:fa:d0:fb:63:01:50:e6:70:7a:8a:
29:ae:7e:2d:f4:74:71:9d:76:f2:a3:61:77:bd:80:
9f:50:3b:84:2c:75:1b:8d:f7:18:cc:1d:25:d6:67:
3f:83:fb:4f:05:e5:b5:bd:49:1f:34:36:88:cc:9b:
c2:c4:3a:07:da:b2:b8:0f:aa:8e:b8:d8:f9:67:da:
82:1c:50:79:bd:3b:4a:cf:8d:72:45:fb:2a:1d:9b:
9e:1a:a2:51:8f:f2:03:bd:9e:a4:a2:63:4f:0b:4f:
78:66:dd:a7:d5:65:2d:af:3f:e8:7a:f5:25:6d:ac:
62:23:a1:d4:e0:fa:e3:22:69:53:af:9a:19:cf:dd:
e4:94:99:36:46:30:89:fb:14:24:ca:39:56:79:03:
0d:95:3f:e3:66:ae:c8:49:5c:1c:20:9b:c0:21:ad:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2D:F1:6E:46:10:71:D7:34:BD:C2:E5:22:77:9E:E8:BC:7F:B0:C7
X509v3 Authority Key Identifier:
keyid:58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8e:d0:f0:51:ab:d9:5d:9f:60:3d:83:11:10:40:0b:5f:d1:
d7:c9:06:f3:53:f3:c5:5b:b4:84:6e:d7:b7:81:d0:c2:db:c4:
8e:49:c1:2d:1c:b0:16:1b:1c:6a:dd:52:d8:40:40:85:43:8d:
b7:15:e3:aa:38:68:2d:64:45:c6:47:f4:6a:9a:57:74:ca:a9:
4c:40:e4:d2:0d:81:40:18:a6:fc:fb:42:ca:0c:39:7c:d6:f7:
25:ea:84:a1:a3:11:22:59:e0:c2:7a:05:d6:de:f8:61:f4:3a:
cf:e6:a5:ed:71:09:60:c1:c3:61:81:c3:e8:19:a3:5c:1d:d1:
23:88:4c:fd:61:d9:4d:d6:c3:69:21:61:02:d4:de:b9:ad:5f:
bc:61:95:4a:94:55:11:24:e9:14:42:0a:16:c6:76:b0:8c:0b:
90:2b:c5:06:ab:5d:61:a5:d7:61:12:a8:80:84:64:7c:db:5e:
30:29:6a:b4:1a:21:c3:94:69:b2:2e:05:5a:77:2f:0b:4f:aa:
00:f0:6b:fc:7d:7b:a9:a3:f1:2c:f4:46:75:aa:ba:a2:35:91:
a7:ad:5c:19:3c:7f:92:e4:be:ed:8a:96:37:67:a9:79:04:bf:
d4:c9:19:cd:6a:30:30:a2:e2:5e:98:68:2b:3d:90:46:e2:1a:
d3:64:5d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:43:15 2025 by rpki-client