Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
File: WH7X6fmKHxl17p-8sJXDrfoorsA.mft (raw, json)
Hash identifier: DtWimmmaFs12ktW7wNTx92KiMnXOGywcjFeAyd2GOmE=
Subject key identifier: BB:66:42:A4:2F:0D:7A:F9:D3:16:F4:AC:11:E6:C2:65:C4:18:4B:3B
Authority key identifier: 58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
Certificate issuer: /CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Certificate serial: 0199FCC6C5C2057EF61BA7A19DF186230388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
Manifest number: 16C6
Signing time: Sun 19 Oct 2025 14:01:49 +0000
Manifest this update: Sun 19 Oct 2025 14:01:49 +0000
Manifest next update: Mon 20 Oct 2025 14:01:49 +0000
Files and hashes: 1: WH7X6fmKHxl17p-8sJXDrfoorsA.crl (hash: BVFlUfUNQUWywQmgnl7p5fXeRIgtfLY4DEUMfhn8F1w=)
2: WLV6MusTz1W6r9PO4KY0pt2WG_8.roa (hash: GXS15SPnZMGUmLcaPYwPqIJSpiNVeZhXjSfrdLI9pCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c5:c2:05:7e:f6:1b:a7:a1:9d:f1:86:23:03:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Validity
Not Before: Oct 19 14:01:49 2025 GMT
Not After : Oct 20 14:01:49 2025 GMT
Subject: CN=bb6642a42f0d7af9d316f4ac11e6c265c4184b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:27:ae:27:22:4c:1f:66:f8:10:07:13:40:
75:99:85:ad:b9:d6:e9:be:d5:76:49:7f:8e:49:6c:
53:dc:89:90:57:47:2b:25:6a:f9:08:c2:0d:65:a1:
d3:8c:97:14:27:d2:82:d8:b1:cd:a2:94:c4:d0:c1:
56:f3:56:31:a5:0d:0d:3d:e1:5d:23:51:39:96:d2:
89:74:d2:0b:df:30:d0:28:07:62:0a:2b:f9:37:a5:
e8:8e:a2:5f:82:56:c8:14:e0:fd:64:68:87:2d:5a:
3c:4e:a6:80:49:63:ba:f7:46:2e:34:80:a5:89:58:
01:e0:4d:5a:c8:6a:c5:30:75:45:66:9b:dc:a0:09:
a2:06:ce:b5:52:57:6a:cc:f6:98:b7:6d:09:ff:bf:
08:d3:f8:e5:cd:1c:0f:f9:ce:7c:97:d0:b1:18:3c:
5e:a8:5e:a2:d8:19:8a:a8:bd:70:fb:86:bc:66:13:
0d:fb:ee:5a:37:00:e0:14:e9:58:ba:f8:9a:c4:e0:
87:e3:4b:f3:7a:e9:0f:62:e3:ae:3e:21:e4:95:b7:
85:fe:f9:aa:54:36:f4:50:42:fb:b4:3f:8d:04:18:
f7:00:7e:93:0f:f5:5b:bc:5c:8c:1a:65:a2:7e:a0:
ee:c9:c1:c3:c1:fb:25:2d:c4:60:b2:40:bb:9a:37:
c9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:66:42:A4:2F:0D:7A:F9:D3:16:F4:AC:11:E6:C2:65:C4:18:4B:3B
X509v3 Authority Key Identifier:
keyid:58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:00:77:3d:9f:7e:07:fc:f2:4a:d1:02:38:28:4e:f9:5b:c1:
5f:77:40:4f:60:91:f3:ab:4b:af:0a:ba:b8:44:10:49:1a:56:
9c:29:e0:43:9e:63:d3:84:cf:f2:d0:a4:90:f3:ff:67:1b:7b:
45:ba:b8:1d:4d:09:89:a6:9e:00:44:6c:51:85:10:eb:4b:15:
86:36:91:fe:1c:84:b0:e3:c3:fc:97:c8:d6:09:b9:74:d6:d8:
ed:82:1a:04:72:16:29:9b:99:4d:f5:84:9c:bc:0d:d9:23:08:
63:52:9f:1f:aa:2e:38:ed:dd:c7:8e:21:5f:22:4b:b0:4a:79:
56:e9:4b:ad:e8:38:c0:18:c1:6a:99:76:66:b3:1e:28:d7:9c:
1b:c7:76:5b:b8:d7:38:6d:8d:ad:1e:16:df:db:e2:0a:bd:e9:
0f:6a:1d:61:d3:a2:5a:19:33:8d:08:b6:f2:44:b9:01:eb:58:
ba:9d:2f:a5:62:8a:2b:3d:0d:e5:15:69:7e:0f:64:fe:a5:8e:
6a:d4:89:c6:0a:db:04:71:ce:53:bc:ff:5a:a3:45:d3:a4:45:
d2:0f:1e:80:f5:ff:3c:14:8b:a7:05:4f:96:07:31:74:95:2f:
fe:3f:13:2e:e7:12:e2:1d:6f:a3:30:52:4b:95:7e:ce:46:bc:
74:84:db:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:58 2025 by rpki-client