Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
File: WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft (raw, json)
Hash identifier: 7mFbYtJtlN4vWbcqe/5HcU8qZ3pgAxcnr/ZbjSusX8k=
Subject key identifier: 16:F4:94:E8:91:B8:43:55:1B:6A:B8:DB:EB:C8:1F:EB:90:97:92:97
Authority key identifier: 5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
Certificate issuer: /CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Certificate serial: 0198D69868130F973E8392FE093A62AEBDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
Manifest number: 12A7
Signing time: Sat 23 Aug 2025 11:02:49 +0000
Manifest this update: Sat 23 Aug 2025 11:02:49 +0000
Manifest next update: Sun 24 Aug 2025 11:02:49 +0000
Files and hashes: 1: Oh-cQnXBc3lf8_SsKrCv90dr1do.roa (hash: /clQdBNjFo+DPpzGiAtMduHa7oP5zjEdGJ0IRP2uvgo=)
2: WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl (hash: 3vEkPO0cs+cpAP1Qjd+MVumeXEvt5J2xAzDt9/1t8d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:68:13:0f:97:3e:83:92:fe:09:3a:62:ae:bd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Validity
Not Before: Aug 23 11:02:49 2025 GMT
Not After : Aug 24 11:02:49 2025 GMT
Subject: CN=16f494e891b843551b6ab8dbebc81feb90979297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:49:7a:48:e7:58:31:7a:92:78:5a:b5:ce:
dc:8f:aa:94:87:3b:5e:c8:f4:02:d9:ec:d7:21:8f:
97:9e:1e:d0:40:96:f6:ae:7f:b3:42:b1:24:ee:cd:
ed:89:c4:2d:ff:cf:6d:36:df:16:5c:be:7d:6f:f9:
1b:b3:a4:5e:f9:bd:3c:7a:5d:03:db:ed:93:cc:6c:
f1:62:d0:5f:c5:1d:36:45:93:b2:a0:f6:9a:a5:e9:
05:39:df:b6:4e:df:1e:2a:8f:cd:52:f1:39:7d:9c:
88:8c:0b:9d:aa:16:21:01:bc:94:e6:d8:79:c5:fb:
61:33:68:f2:e3:c0:b0:0b:65:32:1c:b4:e2:dd:25:
79:a2:c4:2a:11:f7:01:df:1b:ed:c9:16:f3:cf:69:
de:5e:c8:12:25:cf:cd:61:5c:57:44:e1:49:8c:40:
f3:1b:17:92:44:d5:b2:2c:c7:d6:38:ec:91:42:bb:
e5:36:89:8c:84:42:39:1d:8c:5e:71:d8:ee:8c:1f:
76:1e:4c:ed:df:61:0e:27:ef:1f:a1:cf:ff:46:fa:
e8:74:5d:97:18:64:a8:2d:6e:e7:20:a8:ba:00:d0:
67:9d:7c:61:75:db:e3:8c:4c:2b:87:65:89:a5:1c:
32:62:ea:a8:f4:12:c9:e0:ed:76:13:79:94:7d:4d:
02:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:94:E8:91:B8:43:55:1B:6A:B8:DB:EB:C8:1F:EB:90:97:92:97
X509v3 Authority Key Identifier:
keyid:5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:01:81:2c:14:e9:f2:e5:c5:7a:ec:23:1b:65:e6:45:4a:bc:
85:3f:bf:d8:a1:b5:74:49:eb:6a:d6:6a:6d:db:32:eb:df:a5:
ca:31:99:9c:e2:c3:fa:e9:83:fc:51:4d:52:9d:ec:7d:7b:73:
f8:cb:d9:28:90:d6:27:6a:f6:93:9e:31:8a:0d:a2:85:21:a0:
aa:22:6d:96:b4:1d:58:a8:7b:24:5c:5c:77:eb:6c:01:3e:2d:
10:86:7e:b0:a8:85:7d:2e:57:8f:f2:6c:d2:0d:17:08:be:bf:
29:7d:c1:07:82:e3:43:5c:81:bd:74:a6:12:22:0c:c5:50:9d:
64:ce:e4:13:24:2e:08:9d:97:8d:bf:10:6d:a1:02:fa:47:83:
bd:4c:8a:48:49:68:41:3e:c3:28:e5:3a:d7:0d:fe:c7:e4:b3:
53:8b:71:fc:84:d9:c4:c4:24:27:66:22:71:3b:d3:03:a8:41:
94:f6:7b:15:1e:c5:7e:d2:9f:25:88:63:4f:6e:a8:6a:36:7f:
c1:68:c9:5b:1a:fe:3f:5a:d7:c2:41:0a:59:1d:dc:d2:28:4d:
6b:21:c0:1d:cd:cd:da:1a:d2:a5:5a:27:f4:d4:5d:59:e0:1c:
1d:bb:4d:78:39:e7:a0:96:a7:89:9f:8f:6b:79:72:39:00:25:
bb:52:5e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:41:55 2025 by rpki-client