Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
File: WH9UeNHpTyQHBXIsN4kHba9VN1c.mft (raw, json)
Hash identifier: z17MkeJxGjKyseCBd19JDK81zJ052rsx89VXGwOR8TM=
Subject key identifier: BC:13:2D:DD:B5:4E:CD:E5:F2:63:05:B1:5C:28:1E:FD:D3:32:CD:48
Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
Certificate issuer: /CN=587f5478d1e94f240705722c3789076daf553757
Certificate serial: 0197BB226485E2B5B7E3E6D0B13F8F85D934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
Manifest number: F2
Signing time: Sun 29 Jun 2025 10:01:22 +0000
Manifest this update: Sun 29 Jun 2025 10:01:22 +0000
Manifest next update: Mon 30 Jun 2025 10:01:22 +0000
Files and hashes: 1: JYHlFaw4wOmIWR_77ywpgSBNK2k.roa (hash: OvZXgWODCQ+eoxv2l2YqNiIKjAuMYd6ZKeSQVCi/uJE=)
2: WH9UeNHpTyQHBXIsN4kHba9VN1c.crl (hash: Js/eZqLjZ5/QDwNcXr/6fNoWq1J72FOcSamTTHAYtuc=)
3: d9EPdccRI9fe31r8YXiF11dbuAE.roa (hash: Mn6la1cNZ2lvlxnLvxs6dnBmU/hxdiSINwGaH327vug=)
4: g1OClMd_E4NQ7EkPx7bidts26wA.roa (hash: CeqCEmByjs4N40bd+Z4KEPz6ASh9HSswP/ltMk2hKeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:22:64:85:e2:b5:b7:e3:e6:d0:b1:3f:8f:85:d9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587f5478d1e94f240705722c3789076daf553757
Validity
Not Before: Jun 29 10:01:22 2025 GMT
Not After : Jun 30 10:01:22 2025 GMT
Subject: CN=bc132dddb54ecde5f26305b15c281efdd332cd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:14:e2:c6:a6:57:15:97:6e:08:79:13:45:
62:70:7c:ff:9c:9d:f1:fa:e6:4c:ea:50:b1:97:b7:
97:c2:ff:d7:d9:4d:61:e1:b9:11:b8:c9:2c:a6:15:
86:45:e5:87:27:15:bf:b4:12:39:91:8e:12:a9:49:
d9:66:82:84:4e:3e:38:14:b7:4b:27:2d:28:61:41:
79:a5:10:dd:73:f0:8e:7f:c3:b2:fe:a7:be:94:05:
49:26:fe:ec:23:a1:68:87:fc:68:8e:e9:8f:47:f8:
3f:e8:20:b3:7d:0f:8e:d6:a1:ba:cf:ac:85:eb:e0:
8c:1f:cf:15:e0:1c:6d:1b:57:8d:29:fb:63:ab:c5:
e5:73:51:65:b1:5d:44:6e:83:33:68:9d:3d:67:a6:
6e:3f:70:06:54:10:f1:26:66:50:46:5f:0e:e3:4d:
0a:78:8e:7e:0a:d5:d3:da:7f:d5:af:57:bd:16:48:
73:b9:14:a5:a9:61:b0:3a:da:55:48:ca:15:40:63:
60:22:f8:42:ad:7c:e5:17:56:c1:d2:f1:45:05:8f:
3e:30:63:a3:c2:18:17:e2:54:2a:2b:06:a9:ed:08:
b4:18:9a:54:f9:73:a2:86:a8:ec:b2:93:fd:61:37:
0e:d0:34:a8:2d:33:ac:2f:d9:9a:d0:6f:8f:50:1b:
0f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:13:2D:DD:B5:4E:CD:E5:F2:63:05:B1:5C:28:1E:FD:D3:32:CD:48
X509v3 Authority Key Identifier:
keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bc:a0:cb:f8:19:a6:ba:12:74:81:b0:c3:ab:07:a1:48:48:
49:15:17:d8:7c:5a:4e:ce:72:2f:29:41:31:da:8c:2f:b4:9b:
ff:21:35:32:c4:5a:77:08:fe:42:c6:16:31:7c:7a:de:51:86:
bd:d8:d7:a7:cb:ab:48:dc:bf:85:8f:cb:c3:f6:e4:95:46:fa:
ff:fe:a6:ea:7a:3d:26:3b:35:d6:50:bd:d0:4c:d7:a2:82:f8:
f2:b1:47:cc:7e:24:c8:b2:ec:70:cd:24:55:a5:12:24:18:72:
29:57:ae:37:70:80:07:fe:13:be:78:5a:01:30:a8:b8:49:3e:
a5:89:cd:6e:94:9b:91:1c:c9:a6:0a:c2:31:2f:b9:b0:a7:a0:
2b:e8:4a:b4:c0:99:b8:d5:2f:a2:f6:d4:cd:0f:18:44:55:79:
0a:74:82:07:d5:f3:c7:3c:9f:5b:d2:35:32:a4:2e:a4:00:17:
88:86:fa:6c:0b:d0:5b:8a:8d:b3:93:dd:9e:8b:4c:17:52:ab:
dc:1c:5b:24:b3:e8:f4:75:c1:6a:1a:b6:48:8b:3f:45:5d:c9:
4b:ba:55:ad:0c:ee:e1:ab:7b:5c:98:18:37:9a:86:3b:84:93:
1c:ff:84:70:11:97:d2:c4:f7:32:5b:d1:ac:e6:0b:30:64:5f:
e8:1c:df:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:55:40 2025 by rpki-client