Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
File: WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft (raw, json)
Hash identifier: OV/cDme/4DiZxOJGLtmy9ijnZp7rh+hyhe+EDFW971w=
Subject key identifier: 44:E5:13:67:05:30:93:09:66:CD:FA:ED:58:C3:87:AD:11:95:E6:21
Authority key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
Certificate issuer: /CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Certificate serial: 0199FB7C88F235E3BDD392FD30BE28CB31DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
Manifest number: 0879
Signing time: Sun 19 Oct 2025 08:01:06 +0000
Manifest this update: Sun 19 Oct 2025 08:01:06 +0000
Manifest next update: Mon 20 Oct 2025 08:01:06 +0000
Files and hashes: 1: WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl (hash: zszlOzIDpOdVFUWZwRJBqWazDnUW6a+iJ77rJisbb8s=)
2: Z4U4s6npqkkGcLAYBUlzliN7I6c.roa (hash: jhktH3rMjXeFPaMYfnlQRVzXRWKx1pb7NI8qgNj/AcI=)
3: mzKfcsB_6SZ92dtoyTzdmZT_D5Q.roa (hash: W3oo5zZMXU2kzBLMgAMNFTy/16dWodtGflb0+ZEqPmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:88:f2:35:e3:bd:d3:92:fd:30:be:28:cb:31:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Validity
Not Before: Oct 19 08:01:06 2025 GMT
Not After : Oct 20 08:01:06 2025 GMT
Subject: CN=44e513670530930966cdfaed58c387ad1195e621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:9b:14:dc:67:d1:f9:a6:9a:be:bc:ec:a9:
8d:c3:da:fb:d2:7f:87:ab:db:53:6a:49:4f:78:c6:
f9:c6:a6:3d:b2:bd:b7:9c:03:28:99:07:c6:3a:07:
f5:37:e6:43:14:c6:b1:c0:b3:0d:84:a3:03:c0:ec:
15:89:76:c9:3c:b2:99:06:c9:bd:88:8b:53:32:54:
10:5c:5a:08:f9:7d:a7:7f:65:9f:99:64:49:b1:e6:
43:0c:30:8b:7e:78:06:77:1d:63:65:87:0a:e7:51:
23:91:7b:59:2d:6d:12:1d:21:bf:63:a3:f4:29:5c:
5a:c2:ac:0b:2c:01:57:9b:a0:7d:24:f3:7a:6a:d4:
74:f7:01:a4:2e:b9:28:9c:d6:70:a6:68:87:a1:5f:
81:8f:17:78:d5:cb:3b:86:24:60:6a:c7:19:b5:20:
dc:7f:67:20:42:8c:59:eb:4d:bf:f7:1c:4b:b3:2b:
eb:2c:52:97:50:08:6e:f5:f5:6b:48:c5:ae:c8:5e:
ce:94:8b:94:52:7f:60:45:67:68:50:94:d4:c7:45:
71:c1:97:14:57:f1:1a:00:05:e3:44:cd:b6:86:98:
53:7c:21:ef:89:e8:cc:1e:e0:ce:90:0d:07:87:91:
1b:0b:ad:86:e5:2f:93:6a:fc:ac:e4:85:ea:57:76:
5c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E5:13:67:05:30:93:09:66:CD:FA:ED:58:C3:87:AD:11:95:E6:21
X509v3 Authority Key Identifier:
keyid:58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:99:4e:d6:2f:76:ec:de:ef:75:00:b5:14:e3:f3:20:36:d0:
a0:cf:5d:de:e4:70:eb:02:09:22:e1:24:62:9a:fa:b2:77:7f:
67:6a:7e:77:52:69:3e:ac:2a:d1:13:19:b9:98:03:08:64:fb:
40:2a:76:68:45:b6:61:5c:13:15:87:86:d1:ce:ef:70:5e:d3:
d1:31:97:06:5e:d5:33:c0:fb:4f:86:88:bf:1b:dc:11:7a:62:
28:87:6a:5c:3e:78:16:be:bb:b1:49:1d:25:53:fd:18:b6:0c:
04:6b:19:00:82:bf:8e:d6:c2:c6:93:5f:a1:02:28:8f:79:0a:
6a:66:e4:d4:c0:35:9d:63:41:96:0d:f4:a2:d3:d9:98:c9:a6:
2b:aa:bc:4a:13:d5:2f:ef:bd:96:c9:d0:0c:d5:b9:4b:18:3a:
04:a3:cb:6a:1f:99:bf:0d:3b:47:08:f7:32:b3:d9:02:ed:5c:
16:98:7d:05:df:cb:4f:30:7e:2d:59:0a:9f:e9:b0:d3:39:4c:
29:02:3d:af:e6:40:ca:fb:b2:60:e0:9f:0a:9d:5a:10:e6:17:
3f:60:72:f4:be:be:90:e5:df:57:e9:46:9a:fe:c6:47:5a:5c:
38:da:12:94:23:ff:e4:8a:b8:b9:85:3e:71:b6:28:6d:15:12:
ef:c2:8b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:49 2025 by rpki-client