Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
File: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft (raw, json)
Hash identifier: WXNAXndlOu/6o6i9J5Hst3v1xU3Rpr6CLyIZ5kkYNIc=
Subject key identifier: D5:82:42:11:AB:F2:59:05:55:F1:64:54:3D:E5:CF:FC:25:8F:0A:39
Authority key identifier: 5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
Certificate issuer: /CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Certificate serial: 01984AAEFF783ABC49788ABF8102A2374845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
Manifest number: 11F5
Signing time: Sun 27 Jul 2025 07:00:39 +0000
Manifest this update: Sun 27 Jul 2025 07:00:39 +0000
Manifest next update: Mon 28 Jul 2025 07:00:39 +0000
Files and hashes: 1: 7_MeqSoypZvgs9ZAL0kEwYQ0u1c.roa (hash: 8NO2vJikvip/otF7vMKB7776/r0hurKGavAakZtmDS4=)
2: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl (hash: rkw57wLz4lnFKUorrQu9/4GpX3Sj3NuCbCS0nVyEUos=)
3: tzFD8X16hDfmCWt1Dl4XGdomYg8.roa (hash: njuYkI0SwGGHpocv80e/q9DE78xBX5bJk4xkczhpvI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:ff:78:3a:bc:49:78:8a:bf:81:02:a2:37:48:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Validity
Not Before: Jul 27 07:00:39 2025 GMT
Not After : Jul 28 07:00:39 2025 GMT
Subject: CN=d5824211abf2590555f164543de5cffc258f0a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:be:c9:fd:be:09:36:e3:15:36:8b:78:41:d3:
1d:94:6a:fb:b1:9e:55:e3:5a:f5:83:0d:c9:ff:e4:
92:e3:2c:d4:82:e3:9a:b3:e0:09:b4:8d:d4:ef:44:
f0:b5:b3:0c:2e:7d:09:7e:73:cb:4f:5c:41:fd:49:
6f:94:e5:7a:e5:20:7e:2d:a4:d5:d6:5f:6d:7f:d2:
f3:f5:ac:83:ab:50:65:1f:1a:ee:54:98:3d:db:8c:
ad:48:d1:4a:3a:7a:a0:3a:27:28:f1:a8:82:b6:1c:
b2:13:a1:c7:05:6b:4f:c4:0c:02:5c:ee:e1:19:0d:
a0:45:4d:d6:8e:53:b7:4f:54:55:47:9f:29:69:6f:
91:9f:fe:f4:19:54:a1:32:4e:ee:d3:72:4d:5e:32:
41:1f:35:2b:3b:31:29:2f:b6:cf:34:0a:55:65:ac:
28:f1:8e:e1:68:bf:fb:68:f6:48:f9:e5:c4:93:d9:
93:53:58:cf:31:14:83:45:5c:77:7f:d3:d9:64:23:
8a:83:a8:21:0d:ae:bd:05:9b:6b:2a:15:f8:25:0c:
59:7b:64:4f:ed:cb:8c:e8:50:6e:a9:07:bc:97:bc:
20:17:a3:1b:9b:c7:b2:5f:47:ca:fa:de:44:3d:1c:
ea:09:20:43:4e:4c:00:b2:9f:78:85:68:90:45:68:
97:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:82:42:11:AB:F2:59:05:55:F1:64:54:3D:E5:CF:FC:25:8F:0A:39
X509v3 Authority Key Identifier:
keyid:5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:85:01:5c:5b:2e:e8:f2:db:f6:1f:1a:ce:1b:be:58:1a:94:
95:cf:03:df:7d:f4:03:73:56:11:4a:53:dc:15:ad:db:d9:5c:
8b:9c:c4:d0:1a:67:80:f5:14:20:82:7a:1f:24:ed:db:9a:f1:
3b:23:b7:52:31:7c:c0:e8:63:88:45:64:f5:2e:d7:d8:e5:4d:
93:47:72:9e:01:29:00:02:7d:36:91:c2:dd:8e:55:23:51:22:
3d:b2:72:e4:d3:3d:d2:dc:af:d7:ac:da:81:bd:58:98:a5:9f:
3e:61:b7:d6:fc:60:1d:df:e8:10:88:ec:4e:f2:cc:09:6d:94:
a6:80:6f:b3:f3:9d:49:b5:fd:cb:a1:46:c1:54:cc:b6:77:e9:
e2:9f:7a:66:76:2a:05:05:ac:f3:29:46:c4:8d:47:25:33:ee:
21:51:a5:f3:41:ae:c3:8c:49:37:ca:cc:86:c4:17:aa:b7:66:
01:95:17:07:2e:30:03:7f:ae:2d:96:e9:3c:42:f1:f8:e8:a0:
5f:32:9b:cd:cf:20:97:cd:1e:16:b1:47:e4:87:03:8e:d1:9b:
cf:8a:a4:0b:79:6b:07:09:d0:14:2e:9c:d5:79:4c:19:2f:f8:
b6:c7:9c:d0:ef:f8:d2:79:07:3c:7e:58:32:b0:73:14:2a:bf:
74:81:6b:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrv94OrxJeIq/gQKiN0hFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTgyOWFkNDY3YjRlNzNmZmU2OTFlYzE0NmI1NmIzNjkw
OWY1MWEwHhcNMjUwNzI3MDcwMDM5WhcNMjUwNzI4MDcwMDM5WjAzMTEwLwYDVQQD
EyhkNTgyNDIxMWFiZjI1OTA1NTVmMTY0NTQzZGU1Y2ZmYzI1OGYwYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL7J/b4JNuMVNot4QdMdlGr7sZ5V
41r1gw3J/+SS4yzUguOas+AJtI3U70TwtbMMLn0JfnPLT1xB/UlvlOV65SB+LaTV
1l9tf9Lz9ayDq1BlHxruVJg924ytSNFKOnqgOico8aiCthyyE6HHBWtPxAwCXO7h
GQ2gRU3WjlO3T1RVR58paW+Rn/70GVShMk7u03JNXjJBHzUrOzEpL7bPNApVZawo
8Y7haL/7aPZI+eXEk9mTU1jPMRSDRVx3f9PZZCOKg6ghDa69BZtrKhX4JQxZe2RP
7cuM6FBuqQe8l7wgF6Mbm8eyX0fK+t5EPRzqCSBDTkwAsp94hWiQRWiXHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWCQhGr8lkFVfFkVD3lz/wljwo5MB8GA1UdIwQY
MBaAFFoYKa1Ge05z/+aR7BRrVrNpCfUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hncHJVWjdUblBfNXBIc0ZHdFdzMmtKOVJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMmY0NTMtZjc5Ny00MDE5LWEwODYt
NzRiNmZhYTNjODc3LzEvV2hncHJVWjdUblBfNXBIc0ZHdFdzMmtKOVJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMmY0NTMtZjc5Ny00MDE5LWEwODYtNzRiNmZhYTNjODc3
LzEvV2hncHJVWjdUblBfNXBIc0ZHdFdzMmtKOVJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4UBXFsu
6PLb9h8azhu+WBqUlc8D3330A3NWEUpT3BWt29lci5zE0BpngPUUIIJ6HyTt25rx
OyO3UjF8wOhjiEVk9S7X2OVNk0dyngEpAAJ9NpHC3Y5VI1EiPbJy5NM90tyv16za
gb1YmKWfPmG31vxgHd/oEIjsTvLMCW2UpoBvs/OdSbX9y6FGwVTMtnfp4p96ZnYq
BQWs8ylGxI1HJTPuIVGl80Guw4xJN8rMhsQXqrdmAZUXBy4wA3+uLZbpPELx+Oig
XzKbzc8gl80eFrFH5IcDjtGbz4qkC3lrBwnQFC6c1XlMGS/4tsec0O/40nkHPH5Y
MrBzFCq/dIFr1A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:11:21 2025 by rpki-client