Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File: WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier: rQ3tFJhTP/5kFBA0CmqIq2H6JH2zAS7FjUgqrF3wuOw=
Subject key identifier: 93:8F:FD:EF:B6:95:6F:28:AA:46:2B:BB:9A:2E:0B:0A:FD:C5:7C:99
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer: /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial: 019A725CEDEE10F0B4C11A1F94691CBF52DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 10:01:24 +0000
Manifest this update: Tue 11 Nov 2025 10:01:24 +0000
Manifest next update: Wed 12 Nov 2025 10:01:24 +0000
Files and hashes: 1: SMQq7CRzdTMpOyBYbyD-3lmnAf8.roa (hash: NUvlu4bhU491Hj0WQxuB3vUQkEUZUeQ7tnSRNTWGTcQ=)
2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: NRqFi2dvNTL12HbmWTGIDxfejwucAt61uXduk/AkXQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ed:ee:10:f0:b4:c1:1a:1f:94:69:1c:bf:52:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Validity
Not Before: Nov 11 10:01:24 2025 GMT
Not After : Nov 12 10:01:24 2025 GMT
Subject: CN=938ffdefb6956f28aa462bbb9a2e0b0afdc57c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:01:ce:58:81:76:09:b4:87:fd:b1:12:3c:
7c:51:05:07:34:a5:05:80:d2:10:c9:14:e1:45:dc:
da:42:d4:db:f6:c4:a7:03:bb:45:77:85:c7:81:0f:
a7:c8:98:0e:4a:d7:9a:0e:dc:25:b6:a1:21:d5:f3:
87:ce:0d:37:d9:86:a9:e4:3d:f6:4b:8c:54:b9:33:
36:64:43:a0:fd:26:b6:cc:92:e3:9f:8e:ea:1a:78:
53:35:c3:0b:26:e9:07:97:8e:9b:e9:b4:8e:38:1f:
01:d4:6a:1a:2c:6d:39:2d:ac:f7:1d:b2:2c:85:71:
6a:ae:74:b3:f2:6f:f4:21:d9:39:ab:f4:66:11:1f:
59:4e:df:34:e9:39:dc:c0:d0:d8:3c:26:cc:d9:82:
9f:22:1c:fe:c8:90:c8:d6:eb:bc:92:48:a4:8e:2e:
05:1b:02:5a:72:e4:dc:2b:ac:32:ee:54:be:8e:7a:
bd:51:11:6b:66:71:5a:a6:2c:d8:a6:4c:67:54:62:
7f:9d:32:f0:e8:5f:6d:3b:66:46:1c:67:79:5b:fe:
d5:63:58:c6:e3:83:eb:58:d2:3b:82:ad:c2:65:3e:
80:41:fb:38:5c:aa:39:c1:ce:33:8b:73:ab:ff:9e:
00:a1:7b:58:0d:3e:19:2a:df:da:b9:ea:1f:39:3a:
71:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8F:FD:EF:B6:95:6F:28:AA:46:2B:BB:9A:2E:0B:0A:FD:C5:7C:99
X509v3 Authority Key Identifier:
keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2e:ac:46:a7:47:52:9f:31:4f:81:44:e6:68:d4:7f:90:bd:
95:f6:a0:5d:cc:69:12:09:f7:86:f2:9d:aa:f5:d7:60:59:a4:
a1:51:5d:c0:9e:17:97:48:db:55:4b:d5:29:96:93:89:d3:57:
6b:22:35:76:2f:be:c6:cd:4b:55:f6:08:63:0e:29:c3:cb:94:
e1:6e:07:07:fa:3a:1a:8f:28:75:0c:59:55:1d:67:f6:02:45:
a9:b8:a3:21:84:ac:7d:3b:79:1e:fa:2d:a3:94:46:a5:d1:ae:
63:49:43:75:f5:db:ad:2f:12:3a:6a:4f:c9:b2:27:47:1d:8f:
dc:4b:21:d0:1c:84:08:99:7e:b9:86:3a:f6:a4:8e:38:cb:42:
1c:a9:cc:09:39:8f:c7:3c:24:10:84:0f:08:57:6f:d6:1f:fc:
26:9d:84:5e:63:b2:28:f5:4e:b2:76:0d:17:6c:82:80:93:72:
63:eb:9a:b6:36:34:47:b8:e4:6c:74:87:52:a3:af:98:d3:f3:
1d:3b:45:8c:25:65:9d:65:1d:e6:e9:1b:d2:b7:7d:92:1a:49:
80:47:8b:4a:6c:7d:10:2e:24:64:7b:6c:fc:79:87:a8:b4:f2:
eb:f4:ad:9a:07:cb:a8:1c:a0:3a:8c:12:38:37:fc:50:5c:29:
c1:42:77:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXO3uEPC0wRoflGkcv1LfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NzNiNTk4NTUwZGY1YmZkYmM5OWE3YTFlMzk2YzM0OTVi
ZGE4M2IwHhcNMjUxMTExMTAwMTI0WhcNMjUxMTEyMTAwMTI0WjAzMTEwLwYDVQQD
Eyg5MzhmZmRlZmI2OTU2ZjI4YWE0NjJiYmI5YTJlMGIwYWZkYzU3Yzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMIBzliBdgm0h/2xEjx8UQUHNKUF
gNIQyRThRdzaQtTb9sSnA7tFd4XHgQ+nyJgOSteaDtwltqEh1fOHzg032Yap5D32
S4xUuTM2ZEOg/Sa2zJLjn47qGnhTNcMLJukHl46b6bSOOB8B1GoaLG05Laz3HbIs
hXFqrnSz8m/0Idk5q/RmER9ZTt806TncwNDYPCbM2YKfIhz+yJDI1uu8kkikji4F
GwJacuTcK6wy7lS+jnq9URFrZnFapizYpkxnVGJ/nTLw6F9tO2ZGHGd5W/7VY1jG
44PrWNI7gq3CZT6AQfs4XKo5wc4zi3Or/54AoXtYDT4ZKt/aueofOTpxswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOP/e+2lW8oqkYru5ouCwr9xXyZMB8GA1UdIwQY
MBaAFFhztZhVDfW/28maeh45bDSVvag7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xNDIzOGQtODU5MS00NzFmLTg5NWIt
MTc2OWQxOTk0ZGY2LzEvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xNDIzOGQtODU5MS00NzFmLTg5NWItMTc2OWQxOTk0ZGY2
LzEvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbC6sRqdH
Up8xT4FE5mjUf5C9lfagXcxpEgn3hvKdqvXXYFmkoVFdwJ4Xl0jbVUvVKZaTidNX
ayI1di++xs1LVfYIYw4pw8uU4W4HB/o6Go8odQxZVR1n9gJFqbijIYSsfTt5Hvot
o5RGpdGuY0lDdfXbrS8SOmpPybInRx2P3Esh0ByECJl+uYY69qSOOMtCHKnMCTmP
xzwkEIQPCFdv1h/8Jp2EXmOyKPVOsnYNF2yCgJNyY+uatjY0R7jkbHSHUqOvmNPz
HTtFjCVlnWUd5ukb0rd9khpJgEeLSmx9EC4kZHts/HmHqLTy6/StmgfLqBygOowS
ODf8UFwpwUJ36Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:30 2025 by rpki-client