Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
File: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft (raw, json)
Hash identifier: WgjIHFmfly1F+ilI/4l+djAQB8r5r0WyzkOcq+Ftxi8=
Subject key identifier: D6:F4:92:2C:29:AE:CE:CD:6B:92:05:F7:81:A9:93:9F:E6:97:EE:41
Authority key identifier: 5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
Certificate issuer: /CN=5a1a31909780e81734af6607272d18525db7657d
Certificate serial: 01992255D4DB011828755FDA8F923F368524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
Manifest number: 0B44
Signing time: Sun 07 Sep 2025 04:01:14 +0000
Manifest this update: Sun 07 Sep 2025 04:01:14 +0000
Manifest next update: Mon 08 Sep 2025 04:01:14 +0000
Files and hashes: 1: 05We7KAwOd8ZrvHSdSmKgB3AkYs.roa (hash: /6T/kf5A77qhojsVT6JQ5gSyGwEMhPcCMY7KI031bSc=)
2: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl (hash: +xM2WUQ1CsHcMLZJtgvav3kAcUtZHze1RYCwT+mTmuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:d4:db:01:18:28:75:5f:da:8f:92:3f:36:85:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1a31909780e81734af6607272d18525db7657d
Validity
Not Before: Sep 7 04:01:14 2025 GMT
Not After : Sep 8 04:01:14 2025 GMT
Subject: CN=d6f4922c29aececd6b9205f781a9939fe697ee41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:c8:84:cf:34:ba:3d:78:24:f5:95:a4:0f:
64:93:b2:4b:c9:17:e2:23:4c:d4:2e:d5:76:6d:77:
c5:2b:1c:e1:f6:b1:e5:b2:d9:13:39:e7:a5:01:4d:
5e:c0:1e:c1:1e:09:1e:dc:50:b2:d8:85:13:61:ad:
6b:b5:41:97:18:2f:fd:11:60:5b:44:ac:87:33:cf:
e5:25:56:69:ba:96:fe:b0:57:e5:f9:c8:17:bb:b1:
92:6f:db:27:cc:76:49:b0:63:37:eb:03:de:20:f3:
4c:2f:2d:a1:65:64:63:c4:c4:53:a2:50:86:10:bd:
6f:0d:e8:57:04:b9:37:69:9c:8a:f3:74:95:fc:be:
0e:11:a9:5c:a7:8b:5b:67:0d:19:77:54:ce:74:0e:
f2:46:21:55:45:89:17:96:a1:56:83:19:71:d6:92:
f8:0a:c2:cb:76:9a:97:b0:91:48:1b:8d:55:1e:2f:
38:59:23:25:d7:d1:12:e1:eb:0d:7c:89:51:e7:21:
90:05:8a:ca:b0:a2:39:e3:ff:03:64:4d:0c:fc:ff:
e6:91:68:f7:fb:32:15:43:4b:97:13:07:58:e9:92:
08:8c:a6:15:fa:8f:10:cb:2b:87:a7:28:a7:a5:aa:
a5:3c:70:e1:dd:cb:07:5e:ba:64:54:c9:5d:a2:0e:
89:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F4:92:2C:29:AE:CE:CD:6B:92:05:F7:81:A9:93:9F:E6:97:EE:41
X509v3 Authority Key Identifier:
keyid:5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e0:e7:1b:65:d2:2a:33:72:83:5b:a7:6a:5a:c0:78:83:10:
03:d4:31:d8:e1:2e:5b:ca:cb:66:53:53:97:70:b2:4c:1e:6f:
15:19:41:58:1c:1b:a1:cc:f9:69:f9:6c:86:27:e1:fd:13:8e:
a7:e9:d9:11:a8:3e:27:de:9a:c4:57:f9:eb:3e:9d:d3:0a:0a:
8b:be:c5:67:06:a8:2a:68:9d:06:c4:45:87:ec:f3:c2:f2:48:
42:d7:63:b2:b3:77:4c:a8:93:4f:9d:f3:99:d8:e1:c8:8b:7d:
24:9e:54:8e:56:24:a5:95:06:6d:8a:40:40:2d:84:7a:70:b0:
3d:7a:9b:7c:bd:35:f0:6f:98:9b:db:8a:c2:a2:2a:60:48:98:
c9:6d:e2:5e:a5:32:4e:b1:9d:e6:72:b8:a3:e4:cd:bc:24:07:
0f:c8:b6:24:41:6e:76:4f:f5:00:d6:64:81:0c:f6:fa:cf:bf:
33:76:82:4b:41:f8:6f:a9:ba:0a:cd:df:3c:85:8f:c6:d7:66:
df:19:fd:61:0b:7e:80:4f:f1:62:b8:e0:46:5d:cf:33:8b:af:
70:4a:b4:e3:2a:01:75:88:77:da:7b:bf:8f:14:f1:a0:54:89:
ef:3d:03:2a:f4:29:61:58:0d:50:9e:11:7b:1b:ad:e8:b3:15:
0a:be:61:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:36 2025 by rpki-client