Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
File: WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft (raw, json)
Hash identifier: E2KH3Mo+dccEo5Vc6SNR3+8FyCiRgUzJ1Ee8ig8huuo=
Subject key identifier: 22:A8:62:2E:1A:BE:0D:0F:0B:6E:16:8D:C7:28:63:60:40:60:6A:B9
Authority key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
Certificate issuer: /CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Certificate serial: 019A25F898D79112008E48F4EECEB3096C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
Manifest number: 088F
Signing time: Mon 27 Oct 2025 14:00:40 +0000
Manifest this update: Mon 27 Oct 2025 14:00:40 +0000
Manifest next update: Tue 28 Oct 2025 14:00:40 +0000
Files and hashes: 1: WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl (hash: EjvqLOQ6KnjfXiQLHWQvptjc9raIQjihdQZjemrRZZ8=)
2: Z4U4s6npqkkGcLAYBUlzliN7I6c.roa (hash: jhktH3rMjXeFPaMYfnlQRVzXRWKx1pb7NI8qgNj/AcI=)
3: mzKfcsB_6SZ92dtoyTzdmZT_D5Q.roa (hash: W3oo5zZMXU2kzBLMgAMNFTy/16dWodtGflb0+ZEqPmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:98:d7:91:12:00:8e:48:f4:ee:ce:b3:09:6c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Validity
Not Before: Oct 27 14:00:40 2025 GMT
Not After : Oct 28 14:00:40 2025 GMT
Subject: CN=22a8622e1abe0d0f0b6e168dc728636040606ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:51:d1:09:70:9b:c1:2b:c1:43:b7:f1:1f:
b2:7b:5c:74:c2:ea:b7:4f:50:06:77:0b:77:c9:99:
4f:ba:57:53:bf:ad:b5:fe:54:f3:ef:51:3d:76:73:
08:e0:14:97:04:da:5e:6f:43:52:15:81:c6:5e:f3:
df:db:9c:5c:1b:4a:d6:93:b9:d4:3f:eb:1a:72:6b:
f2:20:8e:d3:a8:da:8d:9c:0d:5e:79:c2:88:d3:0e:
f4:fe:55:8f:bd:a4:68:8f:4c:6e:45:7f:8d:8a:dc:
eb:52:be:f3:25:61:56:bd:40:7a:e5:d7:f6:e7:05:
ad:83:03:c6:98:fc:b3:ae:6b:d8:56:7b:73:4a:f9:
31:af:0c:8b:cb:81:55:17:df:4d:26:b0:a4:d6:9f:
94:45:bf:91:12:dd:aa:bd:cb:60:76:10:2e:fa:8e:
e7:8c:9d:e5:49:18:c6:46:2e:2d:83:55:9b:11:63:
60:10:6c:b2:ac:2b:56:0f:0f:9c:2c:c4:74:44:7b:
f9:cb:ea:8f:85:6c:3d:dc:d0:65:c3:c2:d2:7c:c1:
36:97:76:26:a4:41:c7:e2:fa:ff:bc:15:12:7c:8c:
03:c6:0a:4d:40:5c:38:7b:3f:7a:ab:e7:66:22:2d:
c8:2d:39:06:62:c9:4a:d2:2a:0a:68:51:15:51:91:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A8:62:2E:1A:BE:0D:0F:0B:6E:16:8D:C7:28:63:60:40:60:6A:B9
X509v3 Authority Key Identifier:
keyid:58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:79:3a:c6:08:12:37:a9:69:60:75:2f:8f:a1:78:a1:2c:c2:
c4:33:d1:28:3e:53:8d:7a:9e:95:56:51:5d:1e:c8:6f:e0:8e:
06:48:85:eb:41:51:19:85:a3:da:8f:77:28:3a:58:e3:0f:3f:
5c:e1:e7:e3:7d:98:c7:f7:c0:43:a8:52:80:fe:16:af:fc:37:
42:6d:7c:d3:5d:e0:c1:98:57:07:6d:9d:98:0e:dc:9e:34:82:
5e:ca:49:b2:a4:5f:ab:fd:fc:85:1a:6a:53:85:13:34:46:17:
79:98:07:c3:76:e6:75:78:6a:57:63:3c:d3:12:b4:a0:0e:39:
1d:64:e4:ed:a3:37:7a:5a:1c:3c:26:de:b8:fc:ba:d8:71:dc:
e7:18:03:a2:1e:4e:a2:64:4a:7d:9d:97:d6:96:91:b9:dc:b5:
1e:94:fa:6e:dd:8c:46:ac:05:64:9d:5f:b8:86:b2:bf:a0:4b:
0a:29:a4:bc:a8:b5:2a:e8:50:8d:59:ea:72:79:db:88:ac:8a:
e2:eb:5a:14:8a:ba:31:4d:22:18:e4:be:6a:e4:f9:84:32:11:
42:e6:b9:b3:df:33:1f:21:c7:8a:99:92:e2:39:de:3f:cf:04:
5c:90:e7:e8:c2:3e:38:16:5a:7c:b4:0b:17:4d:27:b6:86:98:
23:fa:30:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:45:15 2025 by rpki-client