Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
File: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft (raw, json)
Hash identifier: ZrZlmo88ZrdngMlxTmDxpoB+p3RKI+3oUv9g3ofB+hw=
Subject key identifier: 0F:99:6A:8F:E8:7D:40:58:8B:2B:20:8F:79:D5:BC:B0:F0:BB:E2:16
Authority key identifier: 5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
Certificate issuer: /CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Certificate serial: 0197B7EA64090AB05A6A5E6D617B90F793B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
Manifest number: 11A9
Signing time: Sat 28 Jun 2025 19:01:20 +0000
Manifest this update: Sat 28 Jun 2025 19:01:20 +0000
Manifest next update: Sun 29 Jun 2025 19:01:20 +0000
Files and hashes: 1: 7_MeqSoypZvgs9ZAL0kEwYQ0u1c.roa (hash: 8NO2vJikvip/otF7vMKB7776/r0hurKGavAakZtmDS4=)
2: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl (hash: i6bWrW6JwI0s3iC6HuBdR57dchVH/IV69afmmDDf0EY=)
3: tzFD8X16hDfmCWt1Dl4XGdomYg8.roa (hash: njuYkI0SwGGHpocv80e/q9DE78xBX5bJk4xkczhpvI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:64:09:0a:b0:5a:6a:5e:6d:61:7b:90:f7:93:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Validity
Not Before: Jun 28 19:01:20 2025 GMT
Not After : Jun 29 19:01:20 2025 GMT
Subject: CN=0f996a8fe87d40588b2b208f79d5bcb0f0bbe216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:5c:e3:69:1b:15:27:07:01:63:33:4d:b8:
c8:03:c9:22:0d:8d:f5:a5:56:7c:20:d3:c8:2c:08:
13:e5:75:e6:91:41:42:26:34:c2:a1:a0:d8:c4:01:
2b:1e:2d:8b:41:ee:8f:6f:1f:5e:df:35:4e:22:77:
d1:09:14:f1:1c:70:03:10:00:00:5b:08:d1:90:dd:
1c:7d:5e:2d:d9:55:1f:30:7e:3c:1e:03:50:45:cf:
bf:65:13:5a:be:28:b3:5d:45:b1:e0:59:e0:b7:9d:
3b:42:35:ee:5d:ab:e3:5c:eb:4b:df:a7:ab:8d:50:
30:d2:07:c2:c6:13:c2:b7:38:a6:24:fe:db:da:85:
70:9c:54:63:33:4e:53:e0:84:25:dc:d7:ea:57:f7:
8d:9e:2b:40:2f:03:ab:95:66:99:26:d4:bd:b7:94:
91:fa:0a:cf:80:ec:f2:73:29:24:03:b5:cc:74:c6:
ba:4f:9d:0f:28:f1:b2:69:38:bf:83:23:1e:63:02:
83:d6:80:09:0e:bb:b0:9f:de:fa:89:0a:12:a6:52:
44:37:b9:83:53:20:4a:4d:77:4d:de:3e:53:88:bc:
28:a8:1d:d8:c1:ed:2a:fb:53:e4:69:91:61:30:e2:
b2:0b:57:9a:4d:b8:97:d0:d4:cf:f0:28:ee:4f:68:
5c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:99:6A:8F:E8:7D:40:58:8B:2B:20:8F:79:D5:BC:B0:F0:BB:E2:16
X509v3 Authority Key Identifier:
keyid:5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ae:dd:24:0e:4d:4d:ec:0c:f9:18:e5:f8:8d:c8:a2:f8:cb:
4b:80:fa:7a:33:45:7c:af:1c:de:5a:09:4e:a8:29:96:d5:4d:
44:f7:4d:66:d7:7a:e0:c6:fa:0e:2d:96:81:aa:97:3a:b3:7c:
d5:e1:6d:0c:a2:f6:fb:df:25:dc:0d:76:17:12:82:ac:c5:2f:
6a:83:63:dc:96:38:7b:82:9b:48:60:f2:ff:9b:f9:89:34:9f:
a4:e9:3c:d9:11:12:4e:80:fc:d2:1a:29:0c:1f:d5:db:ae:ca:
c7:87:f0:50:37:7c:ed:aa:d5:c5:9b:01:d5:63:43:7d:18:4d:
69:1b:e1:ed:f6:3c:9a:64:0e:c6:10:d3:eb:95:89:23:27:df:
5a:09:8e:51:02:af:20:3a:fa:36:34:0c:aa:80:50:e7:03:0d:
04:eb:00:14:df:bc:d8:64:89:a2:7b:18:f9:0d:ce:f0:76:45:
ad:47:78:01:55:17:80:e1:f8:f8:81:c1:37:43:df:06:fb:de:
d6:fc:42:bc:c9:48:84:09:86:ac:b6:b7:a8:40:ab:de:c6:a5:
6e:cd:d3:87:37:fc:09:27:6c:8d:31:c4:6f:ec:85:b6:23:c3:
fc:f5:37:41:8d:15:6d:b0:1c:e2:d3:5a:eb:71:b7:b4:57:a8:
af:e9:8b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:54 2025 by rpki-client