Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
File: WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft (raw, json)
Hash identifier: hhmJofKROuQtVBRhZhPCm//JWDZDZK82OqiQKkhsCPg=
Subject key identifier: A9:9E:04:59:06:EC:78:A6:28:37:31:7D:6E:72:47:79:1E:A4:47:F4
Authority key identifier: 5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
Certificate issuer: /CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Certificate serial: 0199FFFE3AD6CC055183D0433CB20AE20182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
Manifest number: 1341
Signing time: Mon 20 Oct 2025 05:01:15 +0000
Manifest this update: Mon 20 Oct 2025 05:01:15 +0000
Manifest next update: Tue 21 Oct 2025 05:01:15 +0000
Files and hashes: 1: Oh-cQnXBc3lf8_SsKrCv90dr1do.roa (hash: /clQdBNjFo+DPpzGiAtMduHa7oP5zjEdGJ0IRP2uvgo=)
2: WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl (hash: //Gu0LavKbyPCme+n48hEM/681MFSClvitAyBWuVxhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:3a:d6:cc:05:51:83:d0:43:3c:b2:0a:e2:01:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Validity
Not Before: Oct 20 05:01:15 2025 GMT
Not After : Oct 21 05:01:15 2025 GMT
Subject: CN=a99e045906ec78a62837317d6e7247791ea447f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:a0:f7:ea:6d:63:8f:10:17:80:1b:86:a5:
cf:8b:54:e7:bf:12:fc:6e:76:41:20:aa:af:7b:4b:
f3:37:26:38:0b:7d:67:bc:88:5c:b5:84:43:80:70:
29:9d:72:d1:a7:d9:82:ce:13:1d:19:ed:a7:6e:6f:
96:e1:28:fe:6c:be:26:22:ec:ea:b9:5b:a7:46:2f:
9c:c0:4d:15:6b:9b:31:ff:ca:ce:33:44:83:9d:b3:
48:c5:6c:18:fb:f0:6c:ad:28:c8:f2:25:f9:df:8b:
6d:12:b7:34:18:f1:f2:69:6f:49:c7:20:b5:ec:07:
9f:3b:d2:a2:61:d3:f0:69:33:5e:3b:b4:0c:2e:ee:
8d:a0:a4:fa:af:15:6d:34:f8:08:fd:71:a8:4e:07:
ae:12:6c:03:cb:c4:7c:75:f2:de:d0:06:49:ba:0f:
d9:81:5e:8e:06:91:44:45:b2:69:72:8e:07:0b:c7:
0d:a1:32:20:18:43:dd:74:df:2d:95:7c:14:03:9b:
9e:8d:c7:75:3f:e5:a7:c0:2f:94:01:52:64:6c:6d:
87:78:47:2d:20:b7:5a:4b:c6:df:46:fa:b9:27:85:
55:f1:63:16:92:09:97:2f:d1:ad:b2:6e:40:27:d4:
dc:c1:50:91:4f:ba:bb:f4:19:7d:78:ce:24:85:93:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9E:04:59:06:EC:78:A6:28:37:31:7D:6E:72:47:79:1E:A4:47:F4
X509v3 Authority Key Identifier:
keyid:5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:85:78:e6:97:c2:91:73:60:4d:a0:74:6b:b6:2a:d9:65:40:
fb:d5:03:3a:bd:cb:10:53:01:85:fc:98:e2:3d:49:a2:5e:8d:
26:70:df:e3:d2:4d:e7:c2:93:3b:20:f8:a5:66:6e:49:87:82:
43:b4:70:d1:c3:20:4f:c2:a5:47:8f:b2:8d:fa:69:a2:b0:4e:
6e:2e:b0:5f:a5:7d:36:1a:5a:ea:d7:f8:dd:eb:2f:6d:b8:6b:
81:69:e4:18:bb:97:a2:91:b0:1b:cf:be:a6:06:0c:9f:be:f8:
86:a0:9c:48:cd:12:94:8d:f9:ea:24:cf:d5:0a:d0:93:73:da:
2c:58:67:03:cd:60:3e:fa:d6:0d:50:df:6d:9a:c9:48:f9:06:
26:be:7b:8d:59:59:64:2a:2c:7b:58:55:ed:8e:77:c7:68:f2:
60:70:17:09:15:07:48:cc:a6:fb:6e:24:0b:0b:ed:06:02:89:
c7:d8:08:10:25:95:f7:dc:60:c6:22:08:a9:7f:ff:e8:8c:2f:
05:97:63:c6:84:90:b4:11:e8:78:b1:b9:db:c2:37:0d:e1:c6:
29:5d:45:92:34:6f:a7:20:d3:8d:f0:ef:8e:a8:7b:dc:37:2f:
0a:56:2c:3f:c5:34:33:a5:9c:e6:e1:22:d3:80:5a:56:4d:34:
64:62:ac:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:00 2025 by rpki-client