Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier: O8B5Dv+Gt8JQ2AQNuAU6j4Db7W7Degc4OkQkwmj6M6w=
Subject key identifier: DC:43:AA:FF:DE:D4:C9:82:B4:00:E7:B4:98:DE:7C:6D:47:F8:E0:54
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 019950782433999EBCC679A843B78C740F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number: 1692
Signing time: Tue 16 Sep 2025 03:01:14 +0000
Manifest this update: Tue 16 Sep 2025 03:01:14 +0000
Manifest next update: Wed 17 Sep 2025 03:01:14 +0000
Files and hashes: 1: 9mv5BJvEaAqWoj8vH5r1xx_pFgo.roa (hash: IAS+DSX7WNtHYk4j+RDYn0qWAwRUWPxJ+A4Wt+jMAHQ=)
2: Jue_aw4zHx1sp-mJmowMMM2tGGA.roa (hash: 0Yitoumoz1xxoSRol/a1PWMjCmZIGDa9duJ/3vMhBiw=)
3: MpJGW61wsAY2na2GoCEJeo5HvXk.roa (hash: vRlmBz0iiqrk+J7PazbAwX0O6F7JU+iRJTTbiLqVjxU=)
4: PNxKt9EExJcdff8t4PlXHS3Zp8E.roa (hash: l/sm5m0RtWP1FamD6nvtIs4Wmty8En19TqcjOBknuMY=)
5: SNph92J-Xcf8IveNNNu0MkGJVWI.roa (hash: VJRwO2aW7uM1HccqCjhKGDaLckqIJFkhu3+W4SavOHw=)
6: U8yyp-JTHsc4PzNj0KNOVG9KECs.roa (hash: XL8cza6Y6dTsPDS6Eb2/zXU0zrVRVcGlEc/rkfzZaj0=)
7: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: CoEazjHwcpOHNx6T78CCjfdn3krgj7mW6GO9AqVMYL4=)
8: ve4iz1Nb8DcHS9BJwN65K0mM0-E.roa (hash: KrskrDJ9DRb/ge1dc1ifB8Oiho4jbO0ADnVg8CJqCCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:78:24:33:99:9e:bc:c6:79:a8:43:b7:8c:74:0f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Sep 16 03:01:14 2025 GMT
Not After : Sep 17 03:01:14 2025 GMT
Subject: CN=dc43aaffded4c982b400e7b498de7c6d47f8e054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:9a:22:69:a4:a8:89:04:d1:33:46:59:02:
d5:ed:5e:91:cd:9e:d7:a2:b0:99:c8:eb:92:38:95:
df:c4:59:1e:28:5b:dd:e7:a3:c6:bc:48:80:25:7d:
2a:5f:25:7f:51:a3:fb:f6:8f:e5:31:ed:7b:93:2e:
1e:e8:42:17:2a:c9:67:aa:1f:82:9c:55:16:22:f8:
51:5e:c0:34:21:4b:bf:d5:2a:22:7f:c8:96:cc:bf:
f7:b5:ce:f3:27:2a:77:77:7e:44:8e:c8:01:3d:ca:
96:a1:d6:81:aa:d4:1a:22:a3:db:68:46:b9:9d:bd:
29:8f:48:f7:03:9a:3e:18:fe:2f:fa:be:89:b7:18:
d1:c6:9a:6d:23:d9:da:a2:2b:dc:8e:3a:7b:c7:f4:
91:de:40:75:85:27:f0:0b:5d:4d:3f:ad:a2:2d:64:
1a:0a:be:c4:f1:8f:b6:2f:d4:8b:21:54:85:ed:f2:
1e:75:07:a4:db:70:d6:43:2b:ea:8b:da:57:a0:2e:
ab:76:bc:31:4d:6f:d5:bb:37:36:03:0d:23:83:a1:
ad:45:89:82:f4:44:de:d7:79:d2:07:be:16:e4:6d:
69:48:26:23:eb:6f:ec:63:40:f9:92:93:0b:f7:db:
92:e9:0f:a8:2b:0c:48:40:81:d4:d0:40:e0:6c:e9:
1b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:43:AA:FF:DE:D4:C9:82:B4:00:E7:B4:98:DE:7C:6D:47:F8:E0:54
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6b:ca:cd:12:99:01:b2:47:ca:76:c9:0c:77:13:a1:ee:20:
4b:9a:c5:5f:6f:d2:1b:be:87:6e:8d:01:e5:7f:50:7d:08:ed:
f4:80:1f:35:72:c0:88:04:d4:2b:e0:a2:f7:88:3c:24:fa:c3:
03:7d:91:fe:7c:ed:a3:5b:3d:08:a9:cc:2c:10:5f:ec:1a:0b:
cf:a0:05:0b:1c:06:d2:eb:04:6d:81:c5:ca:b7:ab:0c:bd:ad:
4b:6e:2f:dd:70:6f:65:da:10:32:15:d1:cc:1c:f1:55:96:5c:
56:db:96:1b:a1:07:a6:f1:3e:de:2e:d9:64:e7:4b:fa:c7:9a:
ad:5a:91:73:7b:24:26:85:bb:92:e9:76:39:d6:e5:88:96:b8:
2a:80:3c:52:5d:af:b9:d0:f5:82:b7:c7:b4:73:0b:ce:e4:4f:
33:5e:06:71:2c:aa:9a:8d:3b:c0:43:7b:4e:31:2d:d3:c1:dd:
e3:66:ed:32:5e:95:c8:f1:5d:fc:da:5d:38:55:a0:89:50:64:
f3:8f:ae:bf:f0:77:51:07:5b:28:bd:2d:dc:30:9c:33:8b:31:
39:99:2d:51:2e:0a:0f:4f:15:ae:ef:50:1f:38:de:95:c4:dd:
73:78:1e:4c:1b:d5:2f:8e:29:97:a1:d6:1d:79:a5:bd:6f:d0:
c0:bf:2d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 07:27:38 2025 by rpki-client