Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
File: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft (raw, json)
Hash identifier: NZajyWHIpxDcfqDu6rcUJn/X5CxurZMvRc/H4mSZBSY=
Subject key identifier: 7E:09:30:4F:33:C0:15:3D:9D:9E:AC:D9:DA:6C:DD:BB:79:5A:18:F1
Authority key identifier: 5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
Certificate issuer: /CN=5a1a31909780e81734af6607272d18525db7657d
Certificate serial: 0198D705E89C761968221B68DFFE1DFC18BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
Manifest number: 0B1D
Signing time: Sat 23 Aug 2025 13:02:25 +0000
Manifest this update: Sat 23 Aug 2025 13:02:25 +0000
Manifest next update: Sun 24 Aug 2025 13:02:25 +0000
Files and hashes: 1: 05We7KAwOd8ZrvHSdSmKgB3AkYs.roa (hash: /6T/kf5A77qhojsVT6JQ5gSyGwEMhPcCMY7KI031bSc=)
2: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl (hash: /urBf/AdDCPghIU/4VVxmC6mUstr90ngy4fpSeuunAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:e8:9c:76:19:68:22:1b:68:df:fe:1d:fc:18:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1a31909780e81734af6607272d18525db7657d
Validity
Not Before: Aug 23 13:02:25 2025 GMT
Not After : Aug 24 13:02:25 2025 GMT
Subject: CN=7e09304f33c0153d9d9eacd9da6cddbb795a18f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:6c:ea:58:8d:4f:3c:73:4c:23:01:ac:51:
ef:64:86:df:45:af:aa:f0:5b:fa:5c:9d:f1:3b:9e:
81:ec:71:c2:d2:c1:57:3b:ee:66:e5:28:50:e2:27:
66:86:4b:da:d3:f4:47:70:0a:bf:9e:3d:76:79:17:
96:38:c2:16:cf:dd:83:48:e6:28:ec:9e:ab:68:36:
39:6b:15:2f:e5:d8:c0:78:15:cc:ce:fb:25:7c:22:
65:78:5a:8e:3f:f7:83:88:07:3f:64:31:6b:58:14:
de:54:21:e1:a5:57:0f:66:39:d5:be:63:7f:cc:9c:
09:a6:c0:5e:de:7c:5f:db:f4:dd:77:d2:b6:12:7c:
1b:b1:20:3d:c5:4e:23:3e:b7:62:b0:6c:e7:29:ea:
ee:66:55:77:28:54:a5:19:b7:eb:d8:ba:45:20:4d:
b3:96:3d:00:55:11:3a:a4:05:4d:5a:c8:2b:2e:19:
04:17:3d:40:74:85:8f:27:d0:fe:36:ab:ee:63:72:
c6:25:82:ca:c1:71:de:1f:c5:cd:3b:09:f0:0b:08:
1b:21:94:85:d8:e5:61:43:e6:af:77:fc:b7:7d:98:
fb:ac:34:ec:4f:be:1c:b7:93:5e:c3:ec:f3:26:b9:
d3:af:aa:51:5e:51:6b:f7:59:b5:e3:68:83:1a:4e:
b7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:09:30:4F:33:C0:15:3D:9D:9E:AC:D9:DA:6C:DD:BB:79:5A:18:F1
X509v3 Authority Key Identifier:
keyid:5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1f:2a:29:a6:d3:74:f4:fe:34:6c:ce:b9:85:31:38:89:ec:
b5:7a:d2:73:74:61:7e:a3:97:91:32:65:e6:91:81:49:7b:1c:
71:eb:47:f9:07:fe:75:b7:12:29:32:09:71:67:31:cf:c3:d5:
54:94:cf:cb:1e:21:d8:94:04:82:bd:6a:34:d7:e0:05:d0:7d:
6d:b8:e1:5c:0d:9d:72:73:81:d2:31:d8:58:4a:a9:0c:2d:39:
aa:53:5e:4b:51:f6:30:25:3e:e4:a7:14:0f:98:5c:41:2f:27:
41:81:a9:1d:b0:9d:8a:f3:20:46:76:21:fb:07:b9:c3:a7:f5:
46:45:b2:de:bd:f9:5c:d9:79:f9:bf:c5:36:b9:d1:9f:75:a6:
e5:e4:b2:57:a0:78:86:79:0a:7e:32:51:ec:28:19:7b:99:d0:
fa:b4:41:3c:86:40:fe:c6:e0:b4:25:00:b1:68:4d:45:fe:e4:
2d:a6:fc:c0:95:cf:28:54:ca:91:4a:c2:4a:1c:c4:3a:c6:1a:
a7:f2:81:c6:34:36:c1:32:0d:e0:d0:bc:d4:af:bf:15:7d:47:
35:10:f3:98:1f:e2:11:ea:7f:77:02:c8:dc:24:16:9d:bf:2a:
92:70:3f:6c:2c:38:f7:5b:49:f1:9a:be:55:ea:f5:86:34:fc:
a2:6f:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:33:53 2025 by rpki-client