Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
File: wh-rdnRH02kRl0z5ux0a6RMfyEU.mft (raw, json)
Hash identifier: c+HeWeIR0P5KLCWsQIltxBHLAp2XywDqm4qgAaDZPr4=
Subject key identifier: 8D:C8:97:64:B5:33:3F:17:13:9B:BB:3C:B5:19:91:1F:A1:65:1A:32
Authority key identifier: C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
Certificate issuer: /CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Certificate serial: 019A1D2CCB108882DF41F5D25995B24691F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
Manifest number: 1480
Signing time: Sat 25 Oct 2025 21:01:06 +0000
Manifest this update: Sat 25 Oct 2025 21:01:06 +0000
Manifest next update: Sun 26 Oct 2025 21:01:06 +0000
Files and hashes: 1: prGV5vanh8ZP5p3KxsDzpumMYgk.roa (hash: hK6jdh1nUN3ur+bES2D8ND74m74aDMb2GNKxeALcVf8=)
2: wh-rdnRH02kRl0z5ux0a6RMfyEU.crl (hash: HfQnSC87iizoMLqeVnvo+D5P2sbZEfhiBO08RGx7eFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:cb:10:88:82:df:41:f5:d2:59:95:b2:46:91:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Validity
Not Before: Oct 25 21:01:06 2025 GMT
Not After : Oct 26 21:01:06 2025 GMT
Subject: CN=8dc89764b5333f17139bbb3cb519911fa1651a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:46:d3:ab:2a:ff:21:6f:74:de:50:15:dd:
be:9c:0e:a4:cc:d8:3c:f4:cd:48:bc:0b:dc:1d:7b:
41:d4:a2:2b:08:64:29:5f:d1:35:9c:18:c4:5a:18:
d1:fd:4e:72:05:5e:cf:92:01:9e:a5:76:e6:e4:66:
b7:5f:dd:18:0a:5e:45:5d:ba:f3:50:4f:09:b2:d0:
36:f1:f4:47:f0:0d:aa:a5:93:27:e1:76:f9:03:b7:
6b:9d:bf:e5:04:87:be:9a:ef:d4:e9:61:69:7c:39:
0c:85:30:ae:aa:20:c8:27:b8:44:22:a8:81:1c:34:
25:8b:44:bb:71:e8:31:b2:d1:d4:c7:e3:08:65:12:
67:2b:d9:ea:93:f8:02:5f:b7:22:17:6a:ab:48:8e:
42:2a:37:d0:42:8d:d8:5e:9d:f6:f0:af:c4:a9:7e:
7f:d8:71:8c:75:83:77:c4:0b:22:bc:49:ab:79:f8:
26:58:5f:e8:21:0e:6e:e6:95:20:32:13:60:0b:4b:
2e:b3:9b:9a:be:75:bb:ab:e8:05:1f:5b:9d:c5:78:
00:a4:48:14:3c:ad:bf:5d:94:c8:ee:7f:ee:ed:1e:
28:33:43:8d:68:a4:82:c0:45:8d:1d:e2:76:c6:77:
3f:f7:c9:de:30:01:17:e2:71:aa:f3:c8:56:a4:46:
26:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C8:97:64:B5:33:3F:17:13:9B:BB:3C:B5:19:91:1F:A1:65:1A:32
X509v3 Authority Key Identifier:
keyid:C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:4b:2d:d2:41:92:0f:b7:11:2f:08:9e:7c:4c:e9:88:f6:06:
3e:85:3f:3b:1f:ab:07:73:0c:13:71:ab:50:a4:dc:ac:c0:39:
7a:b6:d9:2a:93:59:b0:6c:30:04:1a:16:ac:27:8c:ef:60:22:
60:2b:d3:3b:1e:cf:71:7a:54:31:6b:cf:57:6b:36:0c:78:ef:
47:07:cd:a3:42:16:ca:ca:94:24:3c:9c:fb:7d:39:f9:f5:15:
43:d4:18:2e:47:ee:5d:dd:45:7a:d7:e7:15:86:be:45:ea:3d:
e2:7e:87:09:bd:e8:5e:a4:a0:97:4d:c6:05:b3:16:4b:b7:ca:
8f:95:a9:1c:41:88:9a:56:cf:35:57:0c:7e:ba:fa:1a:1c:ff:
6f:7d:9c:38:16:03:6c:42:6c:b8:aa:56:a3:f7:be:5f:39:8e:
b1:7a:2b:45:66:ad:db:bb:7a:51:33:48:f6:b1:62:0d:a3:e6:
c9:e1:a7:9e:0a:84:d9:ea:27:76:53:3c:e6:e0:4f:18:d0:80:
52:71:90:fc:fc:2e:b1:ef:a3:05:2c:70:e6:4f:13:12:e5:eb:
b3:d8:2d:7e:4a:3c:17:4c:59:02:ce:08:a1:d4:9b:5f:38:f0:
73:e1:8a:fb:b3:74:f2:f9:17:bb:10:e2:50:c6:28:70:06:e6:
d0:7e:63:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:05:25 2025 by rpki-client