Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier: VGe/ij2W+5DWZYJipm5A5OcGERIQGR6RoTiY8ydx6mw=
Subject key identifier: 37:E0:3C:87:13:2E:D6:00:68:61:99:90:C5:06:64:5B:63:E2:15:8A
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 0199FC58C88218E1C3A3E3F904F974714B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 12:01:40 +0000
Manifest this update: Sun 19 Oct 2025 12:01:40 +0000
Manifest next update: Mon 20 Oct 2025 12:01:40 +0000
Files and hashes: 1: 9mv5BJvEaAqWoj8vH5r1xx_pFgo.roa (hash: IAS+DSX7WNtHYk4j+RDYn0qWAwRUWPxJ+A4Wt+jMAHQ=)
2: Jue_aw4zHx1sp-mJmowMMM2tGGA.roa (hash: 0Yitoumoz1xxoSRol/a1PWMjCmZIGDa9duJ/3vMhBiw=)
3: MpJGW61wsAY2na2GoCEJeo5HvXk.roa (hash: vRlmBz0iiqrk+J7PazbAwX0O6F7JU+iRJTTbiLqVjxU=)
4: PNxKt9EExJcdff8t4PlXHS3Zp8E.roa (hash: l/sm5m0RtWP1FamD6nvtIs4Wmty8En19TqcjOBknuMY=)
5: SNph92J-Xcf8IveNNNu0MkGJVWI.roa (hash: VJRwO2aW7uM1HccqCjhKGDaLckqIJFkhu3+W4SavOHw=)
6: U8yyp-JTHsc4PzNj0KNOVG9KECs.roa (hash: XL8cza6Y6dTsPDS6Eb2/zXU0zrVRVcGlEc/rkfzZaj0=)
7: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: MdNcTKYX5VETGAEPMf3Z4v/3vcrZt8yrBVHTbG6Sg9U=)
8: ve4iz1Nb8DcHS9BJwN65K0mM0-E.roa (hash: KrskrDJ9DRb/ge1dc1ifB8Oiho4jbO0ADnVg8CJqCCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c8:82:18:e1:c3:a3:e3:f9:04:f9:74:71:4b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Oct 19 12:01:40 2025 GMT
Not After : Oct 20 12:01:40 2025 GMT
Subject: CN=37e03c87132ed60068619990c506645b63e2158a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:37:46:71:4e:fc:15:95:d6:3c:fa:4e:96:
ee:aa:af:a1:90:87:7e:60:57:2c:47:fe:6a:42:75:
b4:f2:13:dc:50:1c:69:d5:bb:00:90:f6:36:a7:9a:
13:bf:ef:4d:71:97:01:37:bc:04:6c:db:25:5d:ee:
18:31:49:bb:ae:aa:be:c7:ea:07:82:23:71:67:36:
9d:9e:3c:ca:a5:f7:43:89:b1:20:32:98:86:76:6b:
04:ca:1f:14:61:25:0a:27:16:34:d4:6e:d1:d1:dc:
fd:1d:1c:f0:2a:4f:85:e8:f4:ec:df:29:42:03:53:
5c:7a:44:45:2d:40:04:7c:61:cc:98:04:23:06:bb:
01:f7:ba:e1:79:b6:19:ef:17:52:e1:ea:fb:a7:1c:
02:8d:35:0a:c4:5f:ec:ba:c7:05:5c:60:4a:ba:1c:
8c:6a:c8:0d:57:37:31:ad:4d:19:58:89:e4:78:43:
ed:ba:f7:e2:d8:11:65:4c:53:47:80:48:23:35:4b:
45:b0:00:fa:50:8a:02:45:43:f1:39:f9:3f:d0:73:
44:c8:99:3b:5a:45:9b:18:70:e6:8f:c7:87:56:fb:
0c:f4:00:0d:a7:60:d8:5c:79:19:55:f0:cb:23:b4:
47:10:12:19:b8:48:ab:1d:ef:db:3d:14:5c:00:ed:
16:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E0:3C:87:13:2E:D6:00:68:61:99:90:C5:06:64:5B:63:E2:15:8A
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:85:3d:fc:40:82:9b:e5:80:d5:7c:07:49:6d:d1:1f:2d:72:
f8:5e:36:50:91:8d:10:4f:51:5a:58:80:d0:83:de:84:0f:5f:
b3:38:2c:4d:74:36:2f:4b:a6:fa:75:36:00:27:8f:37:54:9a:
50:a2:18:9c:f8:6a:ec:61:12:c5:bf:47:67:00:7a:e0:5d:b2:
36:ec:89:88:ab:59:ab:3b:aa:56:aa:26:aa:14:8b:a8:0e:06:
eb:59:79:33:75:54:27:64:e3:3a:78:ed:1f:aa:63:55:f6:0f:
ec:4e:c8:1c:44:0c:aa:2b:f5:be:2c:91:2c:4f:61:a6:81:c1:
b8:13:2c:91:ea:77:00:c7:5a:3b:29:77:b2:4f:13:16:db:ed:
70:04:fe:b0:30:52:82:2a:94:0f:74:c7:64:c5:61:3e:18:89:
46:96:5b:27:54:bf:da:c6:1c:33:49:05:ff:d7:8d:81:e2:e9:
c8:7e:d1:b1:56:a7:57:0f:67:71:01:40:59:b1:ba:42:e5:2f:
3e:83:d0:15:6b:fc:ef:a4:da:f7:bb:d8:21:28:67:2e:4a:42:
0f:1e:45:bc:07:43:a7:ea:98:58:af:89:0f:a7:2b:f2:81:ed:
8b:b0:56:b1:53:3c:ce:d1:b5:93:b5:0c:62:39:eb:42:de:88:
14:84:64:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:29 2025 by rpki-client