Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier: AObQeQfzbzw0GWXfktETfrsoOWUcjMDBOERfVbNT5No=
Subject key identifier: 12:5C:16:32:22:98:0F:8E:11:9C:38:16:83:4F:81:5A:AC:A2:D2:06
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 0198D4DFF4A6E4EB42BD0B361D6D56897F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 03:01:43 +0000
Manifest this update: Sat 23 Aug 2025 03:01:43 +0000
Manifest next update: Sun 24 Aug 2025 03:01:43 +0000
Files and hashes: 1: 9mv5BJvEaAqWoj8vH5r1xx_pFgo.roa (hash: IAS+DSX7WNtHYk4j+RDYn0qWAwRUWPxJ+A4Wt+jMAHQ=)
2: Jue_aw4zHx1sp-mJmowMMM2tGGA.roa (hash: 0Yitoumoz1xxoSRol/a1PWMjCmZIGDa9duJ/3vMhBiw=)
3: MpJGW61wsAY2na2GoCEJeo5HvXk.roa (hash: vRlmBz0iiqrk+J7PazbAwX0O6F7JU+iRJTTbiLqVjxU=)
4: PNxKt9EExJcdff8t4PlXHS3Zp8E.roa (hash: l/sm5m0RtWP1FamD6nvtIs4Wmty8En19TqcjOBknuMY=)
5: SNph92J-Xcf8IveNNNu0MkGJVWI.roa (hash: VJRwO2aW7uM1HccqCjhKGDaLckqIJFkhu3+W4SavOHw=)
6: U8yyp-JTHsc4PzNj0KNOVG9KECs.roa (hash: XL8cza6Y6dTsPDS6Eb2/zXU0zrVRVcGlEc/rkfzZaj0=)
7: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: Ug8inL73GAZp2B3UoaHUMohN9SQZYGoXCif9bDYUnxU=)
8: ve4iz1Nb8DcHS9BJwN65K0mM0-E.roa (hash: KrskrDJ9DRb/ge1dc1ifB8Oiho4jbO0ADnVg8CJqCCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f4:a6:e4:eb:42:bd:0b:36:1d:6d:56:89:7f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Aug 23 03:01:43 2025 GMT
Not After : Aug 24 03:01:43 2025 GMT
Subject: CN=125c163222980f8e119c3816834f815aaca2d206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:03:ef:6c:36:dc:d6:2c:c3:41:3c:35:83:
e7:a7:a8:b1:5c:b6:26:30:09:f4:ed:54:06:a8:a0:
e3:a1:59:18:a7:bb:7a:fa:cc:0e:37:2f:21:d8:59:
d3:12:97:d5:eb:f6:48:a7:aa:c7:fd:94:01:03:47:
03:59:9b:82:99:15:15:78:3a:6f:6e:41:90:92:b6:
f0:bf:2f:b1:15:28:a1:3b:6b:34:27:83:52:a6:c6:
47:1f:4d:0f:de:c6:e4:8e:0c:32:45:f9:c3:2a:5b:
fa:45:e5:95:d8:f3:69:3b:f1:ee:a0:8f:7a:bf:7a:
53:80:20:9e:f1:8e:f9:92:2a:82:62:94:f3:b4:99:
13:51:d1:85:40:f6:f1:bf:29:ed:1b:36:34:82:a7:
4b:80:b3:54:3e:c0:21:23:6d:f9:25:53:38:ad:a3:
37:42:e6:55:ee:d1:5a:bc:91:32:5f:b0:30:3c:cc:
db:1e:bf:11:e2:3c:cf:1a:b9:ec:54:c0:10:6a:90:
78:49:ef:8a:f5:e8:9c:90:39:38:55:b2:2c:cd:46:
b5:e7:ea:08:89:11:6b:24:b4:80:21:9c:e7:24:9a:
2d:ce:84:94:56:b2:df:65:62:a8:32:59:4e:4a:76:
04:13:b4:59:61:f2:df:d4:69:a5:7d:36:8d:86:65:
79:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5C:16:32:22:98:0F:8E:11:9C:38:16:83:4F:81:5A:AC:A2:D2:06
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:10:1a:d6:55:6c:03:51:92:d4:ef:7d:71:57:84:4d:fd:d1:
54:0a:59:ea:0d:54:6f:9f:1f:3d:b8:26:a8:74:86:11:6e:e8:
b8:ea:0d:fc:76:11:b6:e3:cd:8a:9e:e7:e9:ed:c5:bb:63:4c:
94:54:09:97:5b:fe:13:0e:a2:4f:b0:32:67:f5:83:f7:bc:54:
e7:61:bc:ac:74:9f:6c:7b:2f:74:16:b6:ae:a3:70:db:21:49:
d0:02:af:fe:d0:5f:d5:c2:f2:0c:58:53:72:76:28:b7:15:e5:
8c:8c:f8:c6:8e:9a:c9:e1:db:28:c6:86:01:16:a5:1e:3f:ba:
3f:42:ec:52:2a:26:79:64:c4:7a:70:23:61:ea:0e:2f:33:ae:
54:fa:59:42:31:98:1a:76:a4:57:36:53:b7:e0:bd:1e:1d:28:
2e:e7:f6:e3:a7:d6:7b:3d:51:91:c7:04:b4:f9:7d:50:02:3c:
21:62:a7:f8:e9:c3:49:24:dc:c5:20:07:0f:2d:4e:7a:2f:04:
e3:ad:93:f9:db:a8:01:75:36:37:27:0a:69:9e:a6:31:c2:01:
58:4f:2c:74:ca:62:74:b7:4c:38:7c:16:41:3c:da:8c:d5:86:
43:f0:0a:ab:f3:8b:d7:8e:2d:4b:05:40:23:10:6b:0d:98:af:
6e:55:f6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:07 2025 by rpki-client