Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
File: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft (raw, json)
Hash identifier: 3ZzrGtfCrciTwZj5xNU+i4w6v+ZNbiy1/KV7++T1TbE=
Subject key identifier: 01:BD:D4:41:E0:22:66:24:EE:A3:A9:4D:07:91:C2:7E:F4:F6:2A:2E
Authority key identifier: 5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
Certificate issuer: /CN=5a1a31909780e81734af6607272d18525db7657d
Certificate serial: 0199FC8FA7FC891DC5CCD4ADC4996181C33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
Manifest number: 0BB5
Signing time: Sun 19 Oct 2025 13:01:36 +0000
Manifest this update: Sun 19 Oct 2025 13:01:36 +0000
Manifest next update: Mon 20 Oct 2025 13:01:36 +0000
Files and hashes: 1: 05We7KAwOd8ZrvHSdSmKgB3AkYs.roa (hash: /6T/kf5A77qhojsVT6JQ5gSyGwEMhPcCMY7KI031bSc=)
2: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl (hash: tmLVwNnuLLGqQY4/JzzvH/EyfPLIXH16iFJFuhEHObA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a7:fc:89:1d:c5:cc:d4:ad:c4:99:61:81:c3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1a31909780e81734af6607272d18525db7657d
Validity
Not Before: Oct 19 13:01:36 2025 GMT
Not After : Oct 20 13:01:36 2025 GMT
Subject: CN=01bdd441e0226624eea3a94d0791c27ef4f62a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:9d:b3:e0:9b:8d:22:d8:9b:8d:a7:13:e4:
06:cc:2b:73:82:cc:cc:be:2f:61:e1:16:82:82:dd:
4b:c4:09:01:f4:7c:91:e4:2a:88:af:f5:e5:e4:2a:
de:5f:86:52:5f:8c:9e:35:90:ee:24:13:08:6c:90:
8f:3a:65:57:5a:63:9a:f4:2c:26:08:cd:7f:33:b9:
28:35:5e:10:78:04:d0:ad:35:3e:4d:fc:1f:ff:e1:
f4:4f:34:1c:a6:68:c5:a8:96:6a:ea:a0:d7:6a:56:
e5:8c:3d:b1:ad:e5:75:c7:58:07:22:64:e7:2d:8f:
80:f5:e5:c8:4f:0a:12:d9:d7:3a:11:79:da:4e:73:
e8:38:9b:85:cc:70:ef:ba:08:94:da:56:94:0b:5f:
90:c6:60:a3:d8:56:4f:e1:c7:7d:23:ba:80:64:9b:
f5:62:77:32:c3:c8:32:f1:6c:21:4d:27:0a:d4:32:
aa:fe:ed:6a:b1:1c:32:d7:75:2e:1d:f7:00:74:35:
38:77:d5:45:0b:92:9f:d5:91:21:ef:11:44:8c:7a:
00:68:e0:b3:4e:5d:26:3c:7d:be:60:b3:7f:80:bb:
63:19:30:44:b8:bf:60:cd:50:6c:34:41:16:e4:77:
1b:5c:cd:42:12:8a:ba:cb:8b:fd:84:c4:bc:bb:34:
5e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BD:D4:41:E0:22:66:24:EE:A3:A9:4D:07:91:C2:7E:F4:F6:2A:2E
X509v3 Authority Key Identifier:
keyid:5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:94:55:0a:5c:76:e4:c0:85:60:f8:52:12:42:82:94:a2:16:
d0:32:93:b4:7e:76:0e:24:f0:24:79:f2:90:e7:00:80:7f:f0:
0a:f1:ba:d4:a7:4c:b1:82:4f:dd:53:43:2a:74:b6:b7:ae:5a:
b4:39:6f:86:f6:b8:61:0f:29:56:03:d8:d0:a9:5d:a7:5e:df:
53:7b:65:6c:8e:a8:00:a7:74:c1:1a:47:6e:15:21:a7:e3:a7:
9a:c3:71:b7:96:9d:f7:4c:d5:d2:a1:a8:8b:02:b9:e9:b7:eb:
67:ce:5f:aa:87:9f:1a:e3:32:31:35:04:73:0e:7f:55:4f:06:
3e:f9:3a:13:54:d3:6f:68:fd:30:4b:7e:88:d7:e7:1e:60:60:
14:b8:4c:db:d6:53:0a:1c:85:d4:af:75:45:b1:40:11:86:67:
1c:0a:81:9d:63:24:8d:8e:71:5c:91:e2:cb:ed:79:55:45:a4:
1b:eb:6f:b3:74:43:58:45:b7:0f:7e:4f:a9:a8:4f:a6:d0:0c:
dd:8f:df:b2:e9:33:69:9e:09:63:92:f9:ee:9f:84:cb:b4:b1:
e8:b7:99:5d:35:fd:c4:7f:88:d4:2f:35:82:d8:40:c7:69:2a:
9e:cb:f0:ec:50:e6:f1:29:92:6d:e9:09:ce:c0:48:b5:8d:14:
e9:a0:4c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:13 2025 by rpki-client