Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File: WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier: EjTEEmD5z9ObbddmMYtuW3qbijhBW3KBHHW4osbNeZQ=
Subject key identifier: 12:88:81:19:6E:44:81:4A:4E:CE:7E:73:05:FC:64:60:45:13:1E:1D
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer: /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial: 0199FC8F654F52E161095CC45472AB9B0FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 13:01:20 +0000
Manifest this update: Sun 19 Oct 2025 13:01:20 +0000
Manifest next update: Mon 20 Oct 2025 13:01:20 +0000
Files and hashes: 1: SMQq7CRzdTMpOyBYbyD-3lmnAf8.roa (hash: NUvlu4bhU491Hj0WQxuB3vUQkEUZUeQ7tnSRNTWGTcQ=)
2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: JOlcd2Y3P0ifD9LuncUedr1qLgOjreeW2Dj5Rc9tvYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:65:4f:52:e1:61:09:5c:c4:54:72:ab:9b:0f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Validity
Not Before: Oct 19 13:01:20 2025 GMT
Not After : Oct 20 13:01:20 2025 GMT
Subject: CN=128881196e44814a4ece7e7305fc646045131e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:65:20:0d:88:f6:da:c1:3c:7b:a0:4f:af:
58:9d:59:08:27:d2:17:02:79:93:07:7f:76:82:e1:
db:d8:a2:f1:67:75:2d:8c:b5:bc:2b:1a:42:80:07:
16:fa:f1:f0:35:79:c1:53:62:48:d3:31:5e:cd:b9:
3b:4b:e9:74:3c:21:b5:8f:69:f3:da:26:4f:3d:c5:
cc:77:9b:69:c4:66:1c:cf:b0:ec:5f:f0:cd:f0:3d:
4f:56:47:b3:90:a2:3f:54:a9:ec:f3:c6:51:2d:1b:
26:6d:8f:32:99:97:fc:ee:1b:47:ba:36:f6:0c:d8:
cc:24:0c:01:5d:9c:9d:79:15:40:52:7d:7f:ed:67:
54:37:14:44:f5:92:c0:02:88:33:ca:46:f5:4d:8e:
7c:48:6f:ca:6f:1b:9c:45:43:6d:74:8c:60:c5:b7:
c3:e9:5e:e0:01:02:b6:19:d1:97:9e:eb:47:80:27:
f7:d5:23:90:3f:76:78:0b:eb:05:2c:31:33:9a:1b:
42:73:1a:a2:4a:8f:a3:59:66:b1:b5:da:de:4e:ae:
a8:b6:af:3b:33:03:d6:e4:04:b1:f6:74:5e:b4:87:
84:f1:ef:8c:ef:62:3a:92:d8:91:45:fe:69:21:70:
e6:4b:de:e5:a1:b3:12:d4:5a:0f:18:33:f4:3a:24:
87:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:88:81:19:6E:44:81:4A:4E:CE:7E:73:05:FC:64:60:45:13:1E:1D
X509v3 Authority Key Identifier:
keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:47:0e:b4:92:c4:ca:b7:93:f1:ce:31:68:cf:d1:62:15:66:
31:2d:8b:2f:97:a5:9e:da:6b:b4:2e:6b:69:86:99:a6:c3:cd:
a5:44:fb:8b:81:e7:f1:0b:a1:49:b0:77:0f:65:a9:54:8c:2a:
2b:a8:d3:52:8f:b3:9b:cc:b5:84:d0:13:c6:e5:45:37:4f:ba:
70:73:ae:a2:b6:54:72:f0:1b:a5:16:a9:21:fe:2a:2f:56:c0:
c4:37:1c:7b:60:1c:e4:a7:70:f4:9d:71:d8:03:48:5d:44:6b:
18:ec:a7:6e:14:c0:57:57:af:f9:c8:4a:06:f4:c9:eb:4d:9a:
77:3a:36:94:2f:3b:e7:65:28:2b:7a:29:75:8c:e5:12:79:59:
7d:ba:89:3b:7a:13:4c:5f:f1:e5:59:b2:18:20:3d:33:08:39:
38:11:69:a7:af:b4:4c:56:3d:b9:98:c9:3f:c5:be:01:a0:82:
0f:f4:81:86:a8:54:77:90:15:f0:8c:f8:11:41:ca:70:63:41:
3a:d5:0b:2b:fe:69:69:15:c9:50:63:30:b1:f6:f8:10:c4:a9:
89:f0:a7:3b:ae:fa:09:5f:27:4d:92:d1:7d:b8:95:a4:11:8e:
39:8a:f5:4d:c4:ab:5b:d5:d6:e5:07:ff:3f:55:7d:c9:3d:13:
3e:aa:ae:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:12 2025 by rpki-client