Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File: WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier: bq5G1d85hORCBclZaq46LHbjL25DoRcPHDCnPImXEAY=
Subject key identifier: 32:38:EA:3C:02:83:CF:37:E4:F0:AC:A6:E6:6D:E9:40:79:6E:02:BC
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer: /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial: 0198D7058627F2D7DDCEDD7ACCDD1ABC64F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 13:01:59 +0000
Manifest this update: Sat 23 Aug 2025 13:01:59 +0000
Manifest next update: Sun 24 Aug 2025 13:01:59 +0000
Files and hashes: 1: SMQq7CRzdTMpOyBYbyD-3lmnAf8.roa (hash: NUvlu4bhU491Hj0WQxuB3vUQkEUZUeQ7tnSRNTWGTcQ=)
2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: dRge61YRTri2JgC3AXa9y3jSMLGwj+XXcXpUJQYiIOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:86:27:f2:d7:dd:ce:dd:7a:cc:dd:1a:bc:64:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Validity
Not Before: Aug 23 13:01:59 2025 GMT
Not After : Aug 24 13:01:59 2025 GMT
Subject: CN=3238ea3c0283cf37e4f0aca6e66de940796e02bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:1a:11:cd:28:fc:5d:d8:5b:88:1b:e8:7c:
f0:03:6d:3d:ad:ca:d4:7f:d4:5c:8e:d3:25:4f:a9:
d6:51:1a:a5:93:51:70:8d:04:08:77:c5:dc:4f:27:
0b:80:61:37:85:e7:6c:3e:9b:13:f5:c3:96:b8:bc:
77:8e:f1:cf:0f:ac:84:1c:41:e9:26:dc:5e:38:be:
9c:00:8a:ca:23:21:7f:5e:80:e1:de:2e:e5:30:8a:
8e:c1:c4:50:27:41:d1:5c:a6:f9:df:6f:50:bb:7b:
a0:8d:32:ec:50:85:e0:e3:39:b4:0b:f5:d9:e8:e5:
66:af:22:22:ed:7d:06:64:6c:8a:c3:e8:db:f4:91:
bc:54:80:da:10:4c:84:d8:4c:e8:86:8a:80:61:f5:
cf:fc:ec:8c:57:8a:95:83:4e:72:90:99:9a:26:8c:
d1:37:73:24:7e:d7:31:80:3d:cf:c8:2f:1f:08:da:
ee:3e:64:57:03:a7:e5:42:0c:06:03:64:77:25:cb:
d2:5d:c5:e1:19:b8:53:87:67:4e:37:49:74:c4:72:
8a:4d:a2:fa:ff:7b:11:ef:94:7c:15:0c:38:bc:85:
5f:90:4f:8b:ce:c3:1f:af:c1:ef:dc:e8:9e:23:8a:
73:2b:f3:c7:42:0c:9b:7b:57:14:e8:fa:36:46:eb:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:38:EA:3C:02:83:CF:37:E4:F0:AC:A6:E6:6D:E9:40:79:6E:02:BC
X509v3 Authority Key Identifier:
keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:30:1e:3f:04:52:47:65:3e:6c:7f:8c:ea:46:ac:f3:78:0e:
6a:db:d0:56:e4:8d:5d:1a:f8:87:29:80:72:fa:3b:ce:a6:c2:
29:69:d7:57:1d:c8:b3:37:7e:4a:9b:6f:bc:4f:d3:30:cd:39:
bd:08:d4:e4:7a:9f:8d:2e:e3:e0:3b:8a:0e:2c:7d:1b:9c:3c:
03:ba:a3:2e:6c:e5:de:61:5a:64:9d:1b:2a:84:bc:48:12:ed:
18:63:48:35:bb:03:75:a7:10:bf:47:c4:6a:74:e4:bc:74:60:
53:96:8c:ad:92:df:01:44:27:8f:e1:97:ed:61:81:12:6e:8d:
83:ff:4e:8d:c2:25:7e:97:5d:7a:02:f6:77:be:32:d9:37:1c:
11:10:b7:20:8d:e5:31:4d:c0:b3:14:98:eb:a3:27:f4:82:07:
08:6f:a7:2e:76:0d:55:c1:43:e5:0b:3f:c0:ad:dd:e3:f6:3e:
28:94:d9:45:c1:ab:76:96:3d:07:19:e1:d2:e1:32:c6:d4:09:
d7:bf:c6:cb:a6:e9:58:8f:c7:39:a1:47:70:b8:2a:e4:19:9e:
ec:5f:5f:49:dd:97:f8:be:d7:28:e3:b5:32:23:8f:07:6f:c8:
71:e8:18:ef:eb:78:0c:30:68:a6:74:1c:0b:d0:fd:0e:cb:ae:
df:76:93:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:10:17 2025 by rpki-client