
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
File: P_WH5OB6zfs4niWRYdoYazhrT2M.mft (raw, json)
Hash identifier: JxFhqbOOQvIaUBd1DwHzpt8oufdTo9O0CVEjEwB5bQ4=
Subject key identifier: E7:D9:AE:93:AA:E1:18:60:6E:83:32:38:62:98:9D:22:AF:CA:E8:A7
Authority key identifier: 3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63
Certificate issuer: /CN=3ff587e4e07acdfb389e259161da186b386b4f63
Certificate serial: 0198D65F15E2B6B5893000C65BE710FD08B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
Manifest number: F8
Signing time: Sat 23 Aug 2025 10:00:12 +0000
Manifest this update: Sat 23 Aug 2025 10:00:12 +0000
Manifest next update: Sun 24 Aug 2025 10:00:12 +0000
Files and hashes: 1: P_WH5OB6zfs4niWRYdoYazhrT2M.crl (hash: D+XkfIFqgocP5ikHQbANzXGejMpOUCexn8DdyMP/UmI=)
2: SOJJoBTyyJua9tdu4tZ2B31g56k.roa (hash: YMViz3GkzFQZUT08/Yf5mLb5Z5Bzg+msMTH8wr8BZ0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:15:e2:b6:b5:89:30:00:c6:5b:e7:10:fd:08:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff587e4e07acdfb389e259161da186b386b4f63
Validity
Not Before: Aug 23 10:00:12 2025 GMT
Not After : Aug 24 10:00:12 2025 GMT
Subject: CN=e7d9ae93aae118606e83323862989d22afcae8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:46:ea:3b:2a:8d:b6:42:ec:63:f8:49:3f:91:
d2:3e:b3:42:07:a8:25:37:d0:61:1d:aa:0e:e4:b9:
48:53:b0:f8:0b:10:d6:a7:0f:e4:a3:f0:73:2b:54:
46:1b:72:24:7c:04:1f:b6:92:18:8d:b4:b8:db:0b:
aa:a6:b4:ba:59:69:d0:24:c8:69:da:ff:5f:cc:ec:
e4:0a:47:0c:18:36:52:74:a8:75:1e:a7:af:7f:84:
24:e5:21:1d:19:e1:94:23:3e:69:00:6b:3c:4f:79:
04:62:e4:60:f4:8f:3d:f3:76:0c:0d:a8:52:d1:73:
84:88:fd:38:fc:1d:4a:6b:0e:2f:f7:51:ed:d7:5d:
14:0b:74:62:97:ed:be:d3:30:e0:ca:1e:19:8c:29:
5c:75:48:60:0b:d8:8a:c5:44:28:42:2a:ca:a3:7c:
8a:41:1a:10:31:23:b7:93:82:34:03:58:b8:8d:06:
d6:78:68:be:55:a5:13:e0:74:f1:37:b8:4f:6a:e1:
14:4d:70:dc:5e:75:c3:87:f2:f5:c5:c9:eb:5e:66:
3d:2d:28:6e:10:4d:70:50:f5:49:77:70:4d:70:d9:
14:b0:4d:f0:05:6e:4a:d1:9b:d5:89:17:20:27:81:
1f:3f:53:a4:9d:a7:d3:89:fa:ba:69:76:7c:ec:8f:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D9:AE:93:AA:E1:18:60:6E:83:32:38:62:98:9D:22:AF:CA:E8:A7
X509v3 Authority Key Identifier:
keyid:3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:99:98:87:a8:08:81:2d:12:6f:67:30:42:43:4d:2b:b2:6b:
43:87:32:12:02:d3:a1:02:11:8e:68:52:c8:f2:a3:95:2d:c9:
ec:76:ac:ec:8d:42:31:61:f3:23:c2:96:f8:35:cc:c1:57:9c:
9b:4a:78:60:42:fe:33:0f:60:56:a4:3d:93:16:29:00:a5:98:
2a:da:92:b1:16:07:90:00:75:c5:ea:05:68:85:62:89:e9:9b:
b2:58:76:6f:a2:b7:eb:6a:27:23:ad:81:4e:ab:96:77:e1:b5:
07:43:bc:86:49:c2:05:74:99:b1:d6:34:e1:fd:6e:91:a6:ea:
73:3b:f7:05:ff:c1:a3:48:88:98:a2:17:2b:f5:0a:cb:2f:00:
9c:f6:2b:20:0a:39:93:00:83:83:b0:e4:00:cf:42:35:ad:b0:
9c:30:5e:36:54:ff:f0:25:4e:25:32:b3:0b:cd:ac:ca:e6:be:
26:5e:81:da:91:8c:2f:03:bd:98:b6:79:23:12:87:22:a2:0c:
58:be:a5:31:6e:54:00:f7:90:2d:18:b8:ea:5b:1a:ac:9d:1e:
e7:2e:01:47:8e:0b:57:40:c1:e6:87:30:44:0e:2b:0a:0d:e4:
d6:c5:70:3b:ab:0e:c6:23:62:57:c6:3f:e2:59:9a:f1:48:6f:
54:db:93:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:31:50 2025 by rpki-client