Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
File: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft (raw, json)
Hash identifier: GNtJ4nJYQ5WEloYGO5wYah40XF4pW7OrVl8O3KE1mss=
Subject key identifier: CD:E3:AA:E5:75:B2:C1:A5:68:B1:EE:AB:91:A4:93:43:8D:74:D4:A0
Authority key identifier: 5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
Certificate issuer: /CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Certificate serial: 019A7301887C634CC5A1F99A996937B505C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
Manifest number: 1313
Signing time: Tue 11 Nov 2025 13:01:11 +0000
Manifest this update: Tue 11 Nov 2025 13:01:11 +0000
Manifest next update: Wed 12 Nov 2025 13:01:11 +0000
Files and hashes: 1: 7_MeqSoypZvgs9ZAL0kEwYQ0u1c.roa (hash: 8NO2vJikvip/otF7vMKB7776/r0hurKGavAakZtmDS4=)
2: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl (hash: 9fSts80kn/1bkCgDD1ZBagEARQkJbI3Odp92yDoyCTM=)
3: tzFD8X16hDfmCWt1Dl4XGdomYg8.roa (hash: njuYkI0SwGGHpocv80e/q9DE78xBX5bJk4xkczhpvI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:88:7c:63:4c:c5:a1:f9:9a:99:69:37:b5:05:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Validity
Not Before: Nov 11 13:01:11 2025 GMT
Not After : Nov 12 13:01:11 2025 GMT
Subject: CN=cde3aae575b2c1a568b1eeab91a493438d74d4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:6b:21:6a:37:ea:36:e5:bd:87:47:11:bf:
90:0f:65:4a:ac:7b:4f:c3:1d:19:42:72:56:82:ac:
73:d6:40:bf:a7:2f:e1:e0:0e:3e:da:b0:08:0c:b0:
3d:0a:e4:fd:5d:33:eb:88:09:3a:cf:40:a8:0b:b5:
47:be:59:e4:9d:e8:cf:79:2e:97:db:40:8d:bf:5f:
50:60:e8:a0:a5:1f:f7:9e:b9:7f:f6:18:b1:3d:29:
16:c6:10:7c:cf:03:df:8a:c7:90:40:39:59:65:e5:
10:23:ac:d0:7c:ac:70:4e:7d:96:3c:f6:fb:82:5f:
d9:13:69:66:c3:3f:ce:3e:6a:b7:b6:ff:54:35:ce:
7d:49:4a:23:0d:f0:ee:81:80:2d:d8:f9:33:10:9c:
9f:d4:76:8a:c8:20:50:da:51:a0:3e:54:7d:8b:b4:
4b:0e:12:27:a2:b8:ee:8b:9f:4e:3e:d0:09:55:17:
96:79:21:d0:39:ae:a8:cd:6f:92:6f:50:12:4f:44:
a6:a6:51:bc:82:51:70:3f:24:fa:aa:b4:d8:54:5c:
64:32:79:54:0b:42:63:52:a7:f5:66:3e:06:80:48:
da:a5:03:e8:e7:c7:3d:fa:33:87:f6:58:00:d9:88:
bb:aa:44:1e:34:8e:6f:ca:f6:3b:dd:1a:7e:95:84:
ef:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E3:AA:E5:75:B2:C1:A5:68:B1:EE:AB:91:A4:93:43:8D:74:D4:A0
X509v3 Authority Key Identifier:
keyid:5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:02:f3:f3:c0:42:eb:2e:55:6a:de:c4:6f:97:13:26:e6:12:
77:db:d6:6f:49:34:19:2b:6a:29:4f:f7:c5:f3:d4:84:36:50:
e7:de:a4:4a:2a:a1:c0:35:23:a5:08:2a:81:3d:3d:15:c2:7c:
03:de:f0:7a:f4:43:41:20:ca:17:81:54:c5:65:9b:8c:b2:e3:
1d:6d:5f:32:91:ec:1a:ca:ba:05:84:d7:41:79:df:e3:2f:7f:
8a:a6:69:9a:00:82:32:8b:aa:bb:ef:e4:e1:0c:52:6d:1d:01:
00:f2:56:69:f6:71:52:51:51:d3:9a:61:75:d3:20:0f:05:71:
2b:3c:48:50:d9:3e:a5:f9:8c:f0:9e:a4:0c:3d:94:74:bf:a3:
b0:4f:c4:cc:20:24:5f:8f:ca:13:6e:b7:f7:9e:fc:2e:9c:b9:
53:23:12:a5:8f:0b:b6:f3:db:c9:7d:eb:72:23:0a:79:c2:d9:
c3:80:47:e7:bb:42:91:bc:c5:98:8f:e2:43:34:dc:23:54:ab:
7c:f1:ed:61:53:d2:f6:ba:08:7c:e8:b5:3e:8f:75:1a:41:88:
77:99:e1:e8:40:6c:94:54:64:2a:b4:e8:4e:13:fe:92:cf:20:
8a:cb:2b:20:2a:bf:a7:02:2f:ce:2e:79:50:a0:53:a5:73:ed:
02:e6:fb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:00:33 2025 by rpki-client