Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
File: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft (raw, json)
Hash identifier: qJSZFvnp1QnENKInXPZes1OB+qNuW/26041vM1XbUQc=
Subject key identifier: 93:9C:89:47:A1:4D:79:F4:12:E9:31:C6:C5:73:72:C1:D6:74:EA:21
Authority key identifier: 5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
Certificate issuer: /CN=5a1a31909780e81734af6607272d18525db7657d
Certificate serial: 0197B7458DA0066723E71210B0A066A3FD5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
Manifest number: 0A88
Signing time: Sat 28 Jun 2025 16:01:18 +0000
Manifest this update: Sat 28 Jun 2025 16:01:18 +0000
Manifest next update: Sun 29 Jun 2025 16:01:18 +0000
Files and hashes: 1: 05We7KAwOd8ZrvHSdSmKgB3AkYs.roa (hash: /6T/kf5A77qhojsVT6JQ5gSyGwEMhPcCMY7KI031bSc=)
2: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl (hash: EtmtW+/lKrOZok/3fV4XzifX+IjNmrBliQTqh52IIzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:8d:a0:06:67:23:e7:12:10:b0:a0:66:a3:fd:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1a31909780e81734af6607272d18525db7657d
Validity
Not Before: Jun 28 16:01:18 2025 GMT
Not After : Jun 29 16:01:18 2025 GMT
Subject: CN=939c8947a14d79f412e931c6c57372c1d674ea21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:3e:14:e8:78:7b:3d:a4:6a:d6:2b:91:0c:
a0:ca:45:b1:ab:8b:5c:fe:e2:85:ac:ec:eb:02:a2:
21:0f:09:92:99:14:f3:1e:b1:9e:c4:0b:a1:44:47:
82:a3:69:dc:95:9e:96:e8:b3:99:c1:47:74:42:bb:
07:2c:28:cf:97:0d:ae:fa:98:b0:60:d5:2d:41:62:
44:84:45:83:82:e6:4e:51:de:2b:b5:22:e8:b3:aa:
85:2b:49:8c:aa:fe:3a:98:52:1a:2c:95:a8:58:44:
e1:46:34:9e:14:3d:17:c0:b6:1a:68:f3:ca:13:21:
56:0f:a3:d5:a2:7e:78:2b:9a:06:4d:ab:46:3d:08:
0d:9c:41:43:29:11:8b:ca:ce:3b:0e:6d:3f:83:c9:
37:f5:36:18:6c:1d:3d:05:e2:72:e0:5d:09:0f:59:
17:2d:73:dd:b2:9b:23:cc:b0:e0:53:e0:a7:3f:6a:
bb:39:bf:73:d6:32:ed:05:33:a6:5a:e0:0b:02:1f:
9a:29:9c:23:de:5e:0a:84:9a:9e:94:e2:94:2a:26:
27:95:a5:70:af:ca:ce:51:ff:f9:fe:62:a6:ae:ca:
3c:c8:6b:22:61:ee:0b:38:43:11:ec:d8:a2:99:cf:
26:e3:bd:85:0e:18:d6:b5:b3:61:f8:8e:d8:d3:42:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9C:89:47:A1:4D:79:F4:12:E9:31:C6:C5:73:72:C1:D6:74:EA:21
X509v3 Authority Key Identifier:
keyid:5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ba:44:66:33:bd:c1:c2:7b:96:c3:2e:c8:11:a9:61:54:46:
57:cd:d1:12:31:d7:60:8b:d7:61:57:7f:72:51:33:dc:5d:b3:
06:e6:23:15:24:08:86:b2:29:3a:d9:41:af:b3:82:8c:1b:1e:
df:7d:22:c2:65:e6:3a:d0:aa:25:5e:d4:46:f8:bb:37:86:6e:
33:5f:d7:3b:67:1b:24:70:00:8c:5c:57:b2:33:6b:2f:c3:02:
6b:7f:e3:85:e7:6e:40:b0:a8:99:e6:28:96:17:e4:f1:d9:ef:
02:a4:a5:0c:76:f8:7e:46:95:35:9b:55:56:ff:a4:03:e3:24:
ce:c7:1a:75:3e:30:75:26:69:50:24:17:43:40:34:e7:5f:0c:
30:66:1b:9b:9b:2b:80:fe:6c:62:04:49:18:5c:e0:7a:a8:d8:
9c:9c:94:8f:c1:31:8a:fd:35:62:6a:b3:07:43:91:5b:70:54:
4b:57:2f:ce:07:dd:01:07:b6:9d:09:6b:0f:45:01:d5:7d:1b:
22:d6:01:bf:a7:0f:b6:a3:6e:11:9a:9c:aa:11:9a:33:c2:95:
93:1b:fd:b3:6a:98:b4:7f:ca:eb:7e:6f:50:00:01:0b:d3:9e:
04:c0:5b:b4:73:59:2d:ab:a8:4b:a5:87:37:00:4d:ae:0e:e8:
8c:4b:99:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:51 2025 by rpki-client