Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File: WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier: Ql3229H3LMNqIHRIPffpGo+RZeJNkREaPIYinwJQlNk=
Subject key identifier: 9A:3E:79:AB:E7:58:E6:94:8E:63:47:AB:79:BF:CE:09:9D:DE:31:D3
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer: /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial: 0197BB21DBAE7ECA60A9872487858F96DE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number: 15BA
Signing time: Sun 29 Jun 2025 10:00:47 +0000
Manifest this update: Sun 29 Jun 2025 10:00:47 +0000
Manifest next update: Mon 30 Jun 2025 10:00:47 +0000
Files and hashes: 1: SMQq7CRzdTMpOyBYbyD-3lmnAf8.roa (hash: NUvlu4bhU491Hj0WQxuB3vUQkEUZUeQ7tnSRNTWGTcQ=)
2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: phYPI4CujTfW51TT3XbiVDTp3lxaOy+Nt5XdtF9Yq8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:21:db:ae:7e:ca:60:a9:87:24:87:85:8f:96:de:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Validity
Not Before: Jun 29 10:00:47 2025 GMT
Not After : Jun 30 10:00:47 2025 GMT
Subject: CN=9a3e79abe758e6948e6347ab79bfce099dde31d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:2e:af:39:c4:38:6b:ce:cf:f7:69:ef:9e:
e5:66:cd:05:51:56:b5:ea:41:c9:df:af:ba:bc:20:
85:53:cb:0b:b4:28:ac:53:37:af:bb:f8:83:58:66:
e5:13:8d:4a:50:92:24:d2:c5:b0:0d:81:1f:b2:4a:
a3:c7:77:60:e3:3a:cb:6a:b2:16:9f:81:63:88:e2:
c3:c5:df:16:25:34:c8:39:4c:b1:07:56:68:83:42:
55:72:a8:68:56:66:7e:e2:98:95:37:27:35:9b:6a:
20:4e:3f:98:1e:ed:8f:03:0c:e5:a0:e1:43:20:a3:
5f:2a:06:5f:81:f0:1d:2a:10:09:6f:a1:a4:cd:6c:
63:92:f4:4e:a7:71:96:43:61:e1:7d:00:0e:ed:c3:
c4:c7:17:7d:77:b4:08:c5:1f:f6:f1:2a:ee:00:26:
81:77:7d:02:de:80:07:e3:a1:1b:1b:ff:63:38:a7:
f9:58:6e:89:c2:4f:68:18:51:8e:6c:28:07:55:9e:
3b:b9:38:b7:39:69:06:c2:dd:d9:8c:dd:3e:8b:3d:
b5:ff:4e:21:15:ab:b9:6a:e4:78:33:f1:2b:ba:8b:
ab:aa:de:c2:6c:eb:7c:33:28:55:0d:21:e2:03:cb:
3a:04:08:a7:f4:ae:de:a5:8b:10:06:64:9f:8a:4d:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3E:79:AB:E7:58:E6:94:8E:63:47:AB:79:BF:CE:09:9D:DE:31:D3
X509v3 Authority Key Identifier:
keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:68:5a:4f:c7:16:a7:f3:55:cd:49:06:85:5d:2e:ee:d2:ba:
95:63:aa:ea:4a:bd:0a:92:f0:78:4e:9d:ad:17:25:5f:82:b3:
bd:68:01:29:c7:23:2b:70:86:1b:b9:3e:8b:33:bd:9c:f4:87:
27:05:16:15:cc:7f:87:30:11:15:41:2d:98:cf:6a:ef:26:8f:
2c:5c:c9:b7:0d:78:c7:16:3c:08:fb:fe:17:62:65:44:7d:34:
aa:51:9a:3d:7b:d7:d9:d6:95:7b:d5:24:af:47:bd:01:75:93:
a6:bb:e3:33:f9:b7:ae:7f:fa:3f:7a:96:83:66:71:21:c0:f3:
64:91:42:ea:ea:f7:e2:83:15:da:4f:d4:54:e0:0b:56:71:4e:
7c:05:92:bd:84:8d:62:25:85:31:45:78:1c:4e:df:ba:65:97:
c2:3b:d4:f3:93:17:cf:c7:4c:ad:3a:79:77:99:f8:c8:42:38:
95:94:02:97:53:71:f6:79:78:23:88:64:db:e8:6f:b6:a4:f2:
36:10:e2:22:09:94:50:8a:ac:fc:a4:3c:eb:77:ee:ab:ec:e5:
5d:1a:d9:a2:72:f7:76:d9:72:0e:ec:34:ca:b6:bb:be:75:c5:
df:0a:7a:bb:4b:86:95:34:90:57:25:0c:7e:be:69:ac:23:67:
7d:f7:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:18:08 2025 by rpki-client