Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
File: WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft (raw, json)
Hash identifier: XvKIzdAuACkEc6GAjZB5wmTNJWE0Pu/sogwc/hFN/TU=
Subject key identifier: 54:2D:7C:29:20:B0:51:80:5F:FB:DA:E6:CF:61:8D:12:2D:BA:EF:4E
Authority key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
Certificate issuer: /CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Certificate serial: 0198D5F1232EA7C1F078F366CCB976A96AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
Manifest number: 07E1
Signing time: Sat 23 Aug 2025 08:00:06 +0000
Manifest this update: Sat 23 Aug 2025 08:00:06 +0000
Manifest next update: Sun 24 Aug 2025 08:00:06 +0000
Files and hashes: 1: WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl (hash: 5eLujzSuksUjWvXs56t26isoVudOVU0oTdI+aoWBlvI=)
2: Z4U4s6npqkkGcLAYBUlzliN7I6c.roa (hash: jhktH3rMjXeFPaMYfnlQRVzXRWKx1pb7NI8qgNj/AcI=)
3: mzKfcsB_6SZ92dtoyTzdmZT_D5Q.roa (hash: W3oo5zZMXU2kzBLMgAMNFTy/16dWodtGflb0+ZEqPmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:23:2e:a7:c1:f0:78:f3:66:cc:b9:76:a9:6a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Validity
Not Before: Aug 23 08:00:06 2025 GMT
Not After : Aug 24 08:00:06 2025 GMT
Subject: CN=542d7c2920b051805ffbdae6cf618d122dbaef4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:75:9f:0f:45:59:af:08:fe:ba:66:a4:e7:
c8:ef:d5:1a:44:40:29:05:6f:f2:20:d7:58:bc:ca:
23:7e:53:21:d8:5c:f5:39:6f:41:08:b4:a6:21:16:
7a:95:bd:44:ff:d7:17:b6:91:bb:0f:20:d7:14:97:
82:97:45:4a:2b:c1:8a:f7:c3:6a:c2:c9:c8:1b:0d:
aa:ab:5a:8c:ba:47:f5:21:93:e8:84:55:ac:97:5e:
27:a8:6d:6f:a3:f9:51:c1:79:d4:c1:2d:6b:ae:b9:
62:10:fc:ba:cb:7c:d8:8c:d4:43:97:bc:c9:37:3f:
f5:49:07:3c:b6:03:e5:a1:27:a3:0a:32:df:de:59:
39:8c:53:10:19:c5:e6:5b:02:25:1b:20:98:74:07:
fd:88:04:25:38:26:d8:b7:b0:bd:46:0d:2a:98:c2:
4b:15:46:c6:e8:aa:ad:74:9d:91:62:38:6a:f6:64:
ca:a9:43:60:a9:9a:61:50:26:f9:1d:f4:41:52:74:
75:45:e9:52:3c:22:2d:48:3c:d4:0e:27:e2:19:a2:
de:08:1f:45:29:e9:5b:c7:7b:b4:f4:8a:8c:40:21:
ab:ff:63:77:9e:d7:c5:93:97:9d:56:3a:36:45:49:
1b:fd:97:d3:85:1e:ff:5e:09:97:ae:ab:9f:4b:69:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2D:7C:29:20:B0:51:80:5F:FB:DA:E6:CF:61:8D:12:2D:BA:EF:4E
X509v3 Authority Key Identifier:
keyid:58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:eb:8f:26:1f:e8:a3:5e:86:a0:d8:04:41:30:a8:0d:08:7d:
92:ae:9b:4e:0b:a9:6a:d2:e9:f3:5d:41:ce:50:49:1e:c9:8c:
48:91:cf:e0:e1:bf:34:41:35:9b:32:a0:a2:48:4f:3a:74:1c:
91:0c:be:29:a3:8c:80:2f:2a:98:de:82:23:b7:f4:fa:7a:e1:
8e:4b:d3:d5:d8:98:8c:b7:dd:d2:98:34:1c:d5:2c:1b:59:3d:
44:27:33:45:56:18:e6:fa:7b:7e:32:7d:24:a3:f1:61:83:c1:
0d:08:e0:35:c8:f6:8d:41:70:0c:f6:2c:c0:f1:58:d5:5a:af:
e8:b4:ee:9a:75:ff:a9:39:f4:46:9f:40:29:4c:96:e0:8f:ae:
f6:06:2b:e5:a2:c9:07:77:c2:d0:b6:bf:6f:59:bc:34:c4:ab:
f2:90:13:b2:0b:54:5b:c7:cd:56:e7:c4:4a:4d:c3:34:64:33:
c4:a6:66:99:7a:52:17:eb:a5:03:69:9f:af:5c:e5:db:be:55:
10:ab:42:c1:85:41:50:02:19:57:38:65:59:30:fe:39:fc:69:
82:9e:ef:3d:c5:24:21:72:54:94:27:66:75:ae:af:e3:e2:12:
04:0d:08:36:8f:57:0a:98:21:fc:33:e7:a8:bf:34:a8:ca:93:
16:b6:79:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:58 2025 by rpki-client