Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
File: WH9UeNHpTyQHBXIsN4kHba9VN1c.mft (raw, json)
Hash identifier: AiRiLFF+5OfQop8KsssVJKy//Q4uI2+edg78TeWFoZY=
Subject key identifier: 4A:50:CF:2B:B7:2D:EC:AF:76:92:BB:9A:A7:ED:92:A4:93:36:58:F7
Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
Certificate issuer: /CN=587f5478d1e94f240705722c3789076daf553757
Certificate serial: 0199C29FF5CFB4B12780E3FC9216F2721DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
Manifest number: 01FF
Signing time: Wed 08 Oct 2025 07:01:26 +0000
Manifest this update: Wed 08 Oct 2025 07:01:26 +0000
Manifest next update: Thu 09 Oct 2025 07:01:26 +0000
Files and hashes: 1: JYHlFaw4wOmIWR_77ywpgSBNK2k.roa (hash: OvZXgWODCQ+eoxv2l2YqNiIKjAuMYd6ZKeSQVCi/uJE=)
2: WH9UeNHpTyQHBXIsN4kHba9VN1c.crl (hash: HazpbdOe0Ul47ePi+1Ea/QhmonZUGK+0B6nzWo3aT34=)
3: d9EPdccRI9fe31r8YXiF11dbuAE.roa (hash: Mn6la1cNZ2lvlxnLvxs6dnBmU/hxdiSINwGaH327vug=)
4: g1OClMd_E4NQ7EkPx7bidts26wA.roa (hash: CeqCEmByjs4N40bd+Z4KEPz6ASh9HSswP/ltMk2hKeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:9f:f5:cf:b4:b1:27:80:e3:fc:92:16:f2:72:1d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587f5478d1e94f240705722c3789076daf553757
Validity
Not Before: Oct 8 07:01:26 2025 GMT
Not After : Oct 9 07:01:26 2025 GMT
Subject: CN=4a50cf2bb72decaf7692bb9aa7ed92a4933658f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:da:09:dd:4e:47:ac:eb:4a:20:fd:ef:59:
c1:f1:20:f0:8a:68:aa:0c:41:78:f8:8b:c3:1f:22:
a2:2f:0f:eb:25:09:0f:2d:c8:cd:c5:8b:3f:81:a7:
b4:5f:87:de:cd:2e:0e:fb:41:ae:e6:fd:e4:37:ed:
e8:9d:c0:fe:55:7e:04:a3:44:f2:cc:fb:51:ed:48:
2e:e9:8e:fb:c9:47:e9:c7:d1:0e:ef:2e:a9:23:c0:
d8:cb:d1:a5:c1:ff:a3:48:1f:9b:c8:7d:ea:da:79:
da:99:6e:b1:0c:59:48:df:20:5c:cf:2b:04:f4:ca:
d5:bb:6d:f5:2d:6d:2a:76:c4:10:2c:a4:e5:a0:69:
6c:3c:7d:b4:90:71:27:31:28:bc:7e:f5:39:3d:fe:
51:5a:0f:5e:57:13:ca:95:36:bb:67:c8:4f:29:ec:
f3:8f:84:b8:e6:9f:d9:f0:bf:bb:ae:50:97:c9:19:
25:53:3d:8f:4b:14:ad:78:79:5b:a7:8c:a2:1e:e9:
ff:cf:c9:11:6f:4d:b1:f5:57:7e:13:18:e4:e2:bc:
a0:72:fe:c1:b8:7e:60:26:06:18:de:4b:b0:a1:1f:
5b:49:53:bb:2e:60:74:ad:3f:b3:ef:89:98:8a:44:
5d:3f:94:5b:d0:2c:03:4a:ab:79:10:1a:77:98:cc:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:50:CF:2B:B7:2D:EC:AF:76:92:BB:9A:A7:ED:92:A4:93:36:58:F7
X509v3 Authority Key Identifier:
keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:73:fd:ff:be:27:e8:03:42:b7:4d:bf:03:63:a6:28:02:de:
d5:7e:c9:1b:8d:2c:0c:90:e2:75:39:94:a8:ca:fb:ed:fd:2e:
58:82:a1:d0:5f:41:70:48:3a:fa:14:65:ef:27:92:0d:f6:ff:
05:51:9d:ff:33:b9:71:1d:4b:ee:12:fa:4f:d1:67:98:ff:c0:
8d:d4:60:f1:3e:f2:63:69:be:e4:0f:28:ec:0b:ec:1c:ce:1b:
3b:83:ea:9b:fd:aa:f6:c3:06:f2:a1:fc:f8:c1:0f:fe:b1:cd:
b6:a4:a6:d3:35:22:2a:9e:7c:c3:8d:66:4a:4e:0c:31:26:00:
c5:ae:b5:43:c9:9c:53:2c:d8:f9:ae:df:42:7e:b4:6f:1f:2d:
4d:f3:0c:05:17:ac:a0:75:bc:6c:f8:82:28:12:5a:e5:67:a0:
c5:5d:9d:08:d7:e9:f9:6c:87:18:f5:eb:2d:99:f9:e3:fe:54:
17:ee:28:30:7d:5d:29:91:20:94:59:88:5c:6d:e0:5a:1b:d6:
f8:7c:9c:a4:4c:64:bd:52:6a:b1:d6:b3:32:b8:7e:7b:72:a3:
17:75:26:d9:61:99:22:92:9e:0b:b7:61:f3:3a:d4:6d:74:55:
7f:bc:82:58:a4:20:5c:ba:3d:01:bc:75:09:0a:aa:19:50:e0:
5e:09:e6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:48:27 2025 by rpki-client