Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
File: WH9UeNHpTyQHBXIsN4kHba9VN1c.mft (raw, json)
Hash identifier: SEEM6nFampF9Pm22vxwmab0Kkw3XnZR1o6a9DHU8MW0=
Subject key identifier: EF:12:B3:32:AF:70:82:BE:BF:58:97:E7:81:8F:FB:EF:A7:FD:2D:28
Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
Certificate issuer: /CN=587f5478d1e94f240705722c3789076daf553757
Certificate serial: 01984250959310CA1B971AF7450FA4E4974A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
Manifest number: 0138
Signing time: Fri 25 Jul 2025 16:00:34 +0000
Manifest this update: Fri 25 Jul 2025 16:00:34 +0000
Manifest next update: Sat 26 Jul 2025 16:00:34 +0000
Files and hashes: 1: JYHlFaw4wOmIWR_77ywpgSBNK2k.roa (hash: OvZXgWODCQ+eoxv2l2YqNiIKjAuMYd6ZKeSQVCi/uJE=)
2: WH9UeNHpTyQHBXIsN4kHba9VN1c.crl (hash: bLRs92Gb3x6tAd7JWGQDEsDTg5ugFhO2/BSqMKsFWcg=)
3: d9EPdccRI9fe31r8YXiF11dbuAE.roa (hash: Mn6la1cNZ2lvlxnLvxs6dnBmU/hxdiSINwGaH327vug=)
4: g1OClMd_E4NQ7EkPx7bidts26wA.roa (hash: CeqCEmByjs4N40bd+Z4KEPz6ASh9HSswP/ltMk2hKeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:50:95:93:10:ca:1b:97:1a:f7:45:0f:a4:e4:97:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587f5478d1e94f240705722c3789076daf553757
Validity
Not Before: Jul 25 16:00:34 2025 GMT
Not After : Jul 26 16:00:34 2025 GMT
Subject: CN=ef12b332af7082bebf5897e7818ffbefa7fd2d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:97:18:aa:a1:b2:83:6a:ec:5e:76:61:e2:
3b:0d:cb:a2:6c:b2:58:ee:40:ae:d3:52:b5:eb:34:
7f:d0:56:15:01:30:78:d4:bb:fe:bb:8e:f4:04:e3:
a1:2f:f7:f2:fd:ef:21:5b:4e:51:49:2e:85:aa:f5:
38:e6:4d:cf:55:ad:eb:bf:53:b8:77:a2:82:87:5c:
76:83:c6:48:3e:ae:53:47:73:c5:0a:f9:80:2e:2e:
45:a7:58:9c:f1:ef:ae:5c:de:0a:1b:42:34:72:92:
dc:8b:79:84:3d:84:14:c6:08:c2:02:6e:3e:96:50:
bf:91:8a:3e:02:fd:2e:f8:20:98:3b:31:65:05:0a:
65:69:4b:ca:f3:8a:22:d3:44:0d:81:a2:1a:67:10:
96:6c:b3:6a:03:eb:d1:2f:3a:c9:9a:85:8c:42:74:
b9:4e:1c:0e:cf:45:d5:9a:e6:a8:8f:95:a8:04:aa:
63:a8:42:cf:10:06:1a:0f:df:91:28:2d:aa:35:2c:
07:5c:36:53:c3:7b:b7:34:23:0a:d9:2e:a2:8f:fa:
7f:1b:d5:5f:5c:93:79:6e:e8:f8:22:a4:19:77:53:
9e:42:83:a4:e3:fd:f9:0a:f3:52:e7:5c:cd:71:d8:
a0:2d:07:92:6e:c0:89:e2:71:2f:98:a7:99:7c:a8:
c5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:12:B3:32:AF:70:82:BE:BF:58:97:E7:81:8F:FB:EF:A7:FD:2D:28
X509v3 Authority Key Identifier:
keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7f:be:14:fe:a9:f3:26:f5:8e:04:27:3e:37:bb:2e:4d:fe:
f7:c6:58:80:6b:7d:dd:61:f9:06:cd:13:ff:a1:f3:68:98:24:
e6:f1:77:4e:57:7a:c2:41:9c:85:3b:89:73:b0:dc:0f:94:8c:
d9:7f:a4:2c:c0:15:94:97:d2:72:7d:09:17:e3:ac:ff:18:f8:
22:ba:7f:30:09:71:89:0f:7f:b0:90:7d:28:89:72:60:e5:7e:
f4:0a:e1:e0:f3:93:2c:9f:9b:e5:2c:ae:02:5f:90:c9:14:fc:
83:c7:7e:0a:eb:12:d1:7f:c5:e1:fd:5f:93:3b:68:5f:7c:b8:
65:d2:1c:e1:a7:96:57:f6:7e:cc:30:81:22:de:61:2e:1c:d4:
0d:02:66:77:58:d9:a2:98:e2:85:e4:5b:25:c4:32:da:6d:24:
cb:9e:3d:41:86:e4:3d:ac:e7:9e:e2:77:e5:9d:c9:ef:7e:d7:
90:ad:e8:61:af:22:7e:25:41:25:68:74:75:c6:ca:5a:27:49:
3e:c7:40:15:cf:a9:bb:e7:88:00:e7:e2:42:3a:75:72:41:98:
f5:9b:4c:09:d9:6c:59:3d:b1:4f:44:26:30:da:98:5a:47:c7:
8e:6c:e9:c2:2c:54:0a:47:04:f8:a2:d8:1f:bb:76:a6:08:8c:
24:85:1a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:07:59 2025 by rpki-client