Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
File: WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json)
Hash identifier: zRd/AwGW2dzrHGaPzo31JWEhIPYY9cQ6XG2sKDemegg=
Subject key identifier: 70:09:F0:65:BE:25:93:E9:EA:8C:8A:A0:6C:35:81:EE:F9:B8:15:6B
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Certificate issuer: /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial: 01993500CD58787FB63E2D517B406AA6981F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
Manifest number: 160D
Signing time: Wed 10 Sep 2025 19:01:08 +0000
Manifest this update: Wed 10 Sep 2025 19:01:08 +0000
Manifest next update: Thu 11 Sep 2025 19:01:08 +0000
Files and hashes: 1: StCabivgvIyHuO75rSeb1s6xEVs.roa (hash: RRQXRwYuo2mU1htEhpek7hE+ZEmIuqOlTMtqEPaKMPA=)
2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: W+5sjplDWMHlg2CQI3t/JqHSZcPMJmXN40FkoezLveg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:cd:58:78:7f:b6:3e:2d:51:7b:40:6a:a6:98:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Validity
Not Before: Sep 10 19:01:08 2025 GMT
Not After : Sep 11 19:01:08 2025 GMT
Subject: CN=7009f065be2593e9ea8c8aa06c3581eef9b8156b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7f:30:87:f2:52:3a:dc:31:19:e3:c4:f8:7e:
06:ca:50:40:3d:5c:e6:70:13:30:e0:ef:c3:1f:1e:
ff:be:56:55:cf:c3:33:19:85:bf:fd:ff:86:33:76:
9f:5f:5e:ba:be:71:57:24:76:bb:ae:95:aa:33:40:
7f:6e:03:94:1a:3c:46:18:36:01:29:48:2f:4d:63:
54:24:36:87:6e:78:11:b0:ba:ec:42:b1:88:d5:f8:
e6:14:87:4f:70:3d:3f:f4:32:3d:2d:40:ee:db:b4:
24:ee:b0:50:6a:7e:3f:83:52:39:9c:dc:88:1e:b9:
7d:84:4d:a8:9e:43:57:40:6b:0c:32:e8:bf:82:2d:
06:a7:9a:80:9c:0c:b8:7e:8b:b1:f2:b1:3a:67:f0:
df:6e:70:e7:3a:b1:6d:55:9c:9c:fc:1b:6a:20:5f:
c1:f6:52:4c:6e:64:cc:7b:c4:53:10:b4:21:4b:fe:
f2:69:fd:3b:e6:98:80:50:08:20:44:6d:80:24:0a:
71:93:79:5a:9c:05:11:66:37:cc:b7:67:80:05:75:
e1:53:b5:36:0a:80:9e:60:b1:64:07:22:cf:ed:95:
c8:9b:f7:b2:7f:6b:38:46:da:67:9b:02:14:f6:82:
a9:ad:fb:33:ba:2f:e5:1d:12:1b:4e:ff:d6:1d:2c:
ed:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:09:F0:65:BE:25:93:E9:EA:8C:8A:A0:6C:35:81:EE:F9:B8:15:6B
X509v3 Authority Key Identifier:
keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:42:1a:6e:6a:5a:ec:13:4c:9a:5f:8d:59:f6:a0:22:21:3b:
2d:7b:2b:48:07:5d:ee:57:4a:ff:cf:28:cd:35:73:a3:c4:bf:
02:b5:d1:78:49:26:31:77:c0:9f:8d:68:ca:6e:75:34:83:83:
51:e1:c0:e2:f3:d1:29:13:6e:25:bf:ec:5f:54:12:8e:6e:13:
cc:28:10:08:3e:c7:64:ce:71:62:7e:e3:0c:eb:49:34:7a:e9:
13:dd:59:ae:52:cd:d1:fa:d4:a7:a0:73:8d:6f:40:4f:e7:a8:
f8:27:e3:08:ef:82:85:91:ee:25:08:e4:f8:e0:cc:bb:f2:93:
4c:58:5e:df:43:9f:6a:84:1a:d5:94:d5:e5:75:76:d2:5a:d2:
9f:b6:20:ae:4d:95:8f:2a:a8:8f:ba:39:db:32:92:95:c6:7b:
3c:c2:6a:70:ff:37:20:c0:c9:d9:db:f3:f4:ef:56:62:be:d7:
fe:80:6d:81:b9:38:8e:12:6d:83:0b:f0:79:b6:b5:fd:0e:fc:
6a:02:11:1e:18:6f:68:b0:35:a9:28:e8:9c:72:06:9b:9e:0b:
41:59:1c:07:53:7b:3c:65:d1:0f:3d:97:2d:70:a7:02:7d:83:
44:31:28:96:9d:f4:af:54:59:14:04:d7:00:97:77:a4:78:16:
36:9b:f8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:28:09 2025 by rpki-client