Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
File: WH9UeNHpTyQHBXIsN4kHba9VN1c.mft (raw, json)
Hash identifier: RFeAU0c1NTcvIQ72d1tWkOLLZhegZ53FLOX22ELswTw=
Subject key identifier: B0:77:CF:5B:85:20:64:5B:D1:34:2D:C6:C6:00:A1:E7:1F:18:CE:22
Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
Certificate issuer: /CN=587f5478d1e94f240705722c3789076daf553757
Certificate serial: 019A006BEA459A4B12D6B8371AAF7B3FD565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
Manifest number: 021F
Signing time: Mon 20 Oct 2025 07:01:03 +0000
Manifest this update: Mon 20 Oct 2025 07:01:03 +0000
Manifest next update: Tue 21 Oct 2025 07:01:03 +0000
Files and hashes: 1: JYHlFaw4wOmIWR_77ywpgSBNK2k.roa (hash: OvZXgWODCQ+eoxv2l2YqNiIKjAuMYd6ZKeSQVCi/uJE=)
2: WH9UeNHpTyQHBXIsN4kHba9VN1c.crl (hash: TiI0jXD4sEckP88olu1U2KFV0WXm+OtCLX/AR5muA+I=)
3: d9EPdccRI9fe31r8YXiF11dbuAE.roa (hash: Mn6la1cNZ2lvlxnLvxs6dnBmU/hxdiSINwGaH327vug=)
4: g1OClMd_E4NQ7EkPx7bidts26wA.roa (hash: CeqCEmByjs4N40bd+Z4KEPz6ASh9HSswP/ltMk2hKeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:ea:45:9a:4b:12:d6:b8:37:1a:af:7b:3f:d5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587f5478d1e94f240705722c3789076daf553757
Validity
Not Before: Oct 20 07:01:03 2025 GMT
Not After : Oct 21 07:01:03 2025 GMT
Subject: CN=b077cf5b8520645bd1342dc6c600a1e71f18ce22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:de:66:60:3d:be:fa:e2:0b:c8:45:64:d9:
de:cd:3d:0b:f9:60:65:e5:85:a2:48:bf:27:88:b7:
7f:73:80:76:53:3a:2d:fc:cc:ce:4a:b2:2b:6f:39:
10:29:ac:f9:0b:52:e4:f6:87:1b:08:9c:66:64:84:
77:1e:b8:d2:14:cf:1a:39:6f:f0:f4:f9:a5:13:25:
fe:7f:ca:21:4e:7d:a4:5c:c7:a7:06:34:de:ac:a1:
36:d6:51:12:1c:8b:29:bb:31:36:3a:e8:6d:e7:46:
65:aa:bb:4e:a9:9a:b5:42:c3:71:b8:68:4f:b6:c4:
96:c9:40:fa:cf:36:22:9c:dd:24:8f:e6:6e:be:fd:
09:3e:33:8f:d3:2c:cf:0c:b0:17:f1:ed:52:7e:3f:
f3:6b:ea:ea:e7:a5:89:fa:7f:f1:d9:46:67:52:ec:
ae:93:bb:6b:25:6e:2b:11:92:1f:95:fb:9b:4a:96:
2c:d4:b4:26:05:b9:8e:f1:6a:91:35:bd:89:bd:3d:
45:dd:81:07:b8:09:61:aa:26:ed:e1:95:c7:85:03:
81:f2:d1:a8:4d:c9:e5:07:e1:93:41:c3:b9:56:72:
91:a9:f1:96:a2:96:20:34:65:92:8b:6c:aa:10:7b:
c4:9d:39:e2:66:89:2a:ca:ff:d4:dc:ef:24:2a:ba:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:77:CF:5B:85:20:64:5B:D1:34:2D:C6:C6:00:A1:E7:1F:18:CE:22
X509v3 Authority Key Identifier:
keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ad:a2:07:ad:6c:1b:fa:ba:91:6b:8a:80:49:50:e1:2e:e9:
f0:25:b6:43:33:b9:9b:e4:12:cf:ab:92:88:16:66:22:3e:a3:
84:aa:ca:42:fc:a4:7e:83:49:25:e7:7b:f2:54:51:71:11:7d:
ba:14:76:a1:50:63:76:76:03:50:57:ef:fb:6e:5c:e1:a3:04:
0e:d3:29:76:07:db:87:aa:49:c7:cb:80:5d:17:ec:c7:6f:06:
a6:3c:b8:d0:b3:7d:3b:fe:46:19:9a:0c:ce:ad:cc:76:f5:a9:
af:5b:c7:11:de:15:d5:9c:c7:cd:01:7c:3e:42:36:68:7c:96:
77:50:f5:7e:94:ff:9c:1f:00:43:e3:43:b7:ae:83:73:b3:8f:
0b:90:7e:f6:16:a2:f1:91:a4:70:27:59:60:eb:e0:ff:1b:72:
d2:bf:1f:84:5d:e6:5d:b6:6a:11:d3:14:e0:6a:40:c4:99:9c:
99:de:a4:ca:5d:33:2b:cc:c9:3f:29:09:dd:85:c5:af:d1:f6:
e4:0a:01:63:b4:6c:75:f9:74:30:cd:54:84:11:a2:93:9b:fe:
22:65:a4:7f:7f:c3:17:36:41:c2:a7:b4:89:de:79:2a:68:c1:
cc:1f:73:9f:93:39:9d:6a:b6:40:81:f7:4e:9b:34:21:75:68:
fd:c6:28:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:47 2025 by rpki-client