Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier: glgTHVgZEotLN/VnDPo+xS9JjjentvIDGxAVLUsVr9Y=
Subject key identifier: 29:A9:52:FC:27:AF:ED:12:36:75:DE:C7:F3:9F:E3:7E:A5:91:5D:AF
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 019A7225D412B885967FC1395CC11D71527D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number: 1728
Signing time: Tue 11 Nov 2025 09:01:12 +0000
Manifest this update: Tue 11 Nov 2025 09:01:12 +0000
Manifest next update: Wed 12 Nov 2025 09:01:12 +0000
Files and hashes: 1: 9mv5BJvEaAqWoj8vH5r1xx_pFgo.roa (hash: IAS+DSX7WNtHYk4j+RDYn0qWAwRUWPxJ+A4Wt+jMAHQ=)
2: Jue_aw4zHx1sp-mJmowMMM2tGGA.roa (hash: 0Yitoumoz1xxoSRol/a1PWMjCmZIGDa9duJ/3vMhBiw=)
3: MpJGW61wsAY2na2GoCEJeo5HvXk.roa (hash: vRlmBz0iiqrk+J7PazbAwX0O6F7JU+iRJTTbiLqVjxU=)
4: PNxKt9EExJcdff8t4PlXHS3Zp8E.roa (hash: l/sm5m0RtWP1FamD6nvtIs4Wmty8En19TqcjOBknuMY=)
5: SNph92J-Xcf8IveNNNu0MkGJVWI.roa (hash: VJRwO2aW7uM1HccqCjhKGDaLckqIJFkhu3+W4SavOHw=)
6: U8yyp-JTHsc4PzNj0KNOVG9KECs.roa (hash: XL8cza6Y6dTsPDS6Eb2/zXU0zrVRVcGlEc/rkfzZaj0=)
7: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: CEMvVeQT3q62U5hlmxCKwyEHJudRMu4oIS0hCk6Hb8I=)
8: ve4iz1Nb8DcHS9BJwN65K0mM0-E.roa (hash: KrskrDJ9DRb/ge1dc1ifB8Oiho4jbO0ADnVg8CJqCCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d4:12:b8:85:96:7f:c1:39:5c:c1:1d:71:52:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Nov 11 09:01:12 2025 GMT
Not After : Nov 12 09:01:12 2025 GMT
Subject: CN=29a952fc27afed123675dec7f39fe37ea5915daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4e:b4:a2:e0:8c:0e:7f:66:cf:29:5d:f3:3c:
81:e2:23:f2:fb:a9:db:6a:0f:f4:7b:f6:97:4d:ec:
82:cb:be:89:eb:45:9f:7c:3c:82:63:58:e4:ea:34:
4c:6e:2c:90:67:e0:3e:fd:4c:06:25:39:f3:ac:d2:
8f:33:87:0a:43:b4:78:44:7d:41:19:be:ca:51:b7:
94:f3:6b:02:bd:3f:fc:8a:86:e2:5e:4b:0a:66:8b:
e5:17:17:43:74:2c:ab:15:89:23:d1:1e:a0:fe:a8:
5f:8e:8b:58:4c:16:94:50:62:61:2c:c2:dc:18:19:
11:e3:c8:47:44:8f:41:4a:c1:68:8d:0e:a6:63:eb:
82:fb:da:d7:ef:40:c8:f7:a7:a5:48:80:a4:6c:4d:
f2:b2:c5:80:61:89:59:18:1c:a6:63:de:e0:13:7f:
90:77:5c:04:89:ff:37:73:12:f3:ff:87:eb:b1:19:
f1:9d:e3:a2:75:cc:5b:ac:b5:c2:2f:93:a7:25:10:
5a:4b:4d:1a:40:ec:d8:82:78:04:6d:29:a5:3e:b1:
2f:1d:c8:ee:f2:d9:a2:41:7c:3a:d5:40:ad:4b:5f:
06:39:65:10:f7:08:64:e1:d9:6c:45:df:dc:08:c9:
f5:76:3b:79:29:73:f5:34:e1:09:c0:e7:73:23:8a:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A9:52:FC:27:AF:ED:12:36:75:DE:C7:F3:9F:E3:7E:A5:91:5D:AF
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:60:84:62:95:c9:ec:d4:46:68:32:3e:3b:6f:88:68:fd:0b:
52:43:fc:8f:46:55:b4:99:90:be:0f:ee:03:98:e8:e0:48:48:
d2:a0:91:14:2d:5c:ad:05:9c:65:35:3a:27:0d:b7:66:79:1c:
a7:d0:a9:d1:09:15:95:3d:02:58:3d:37:5b:02:aa:92:fb:41:
32:cd:51:c9:3f:b2:d8:9f:d0:ec:9a:ca:c4:97:d2:6e:be:1c:
43:64:cc:31:87:a7:89:fe:01:c8:39:10:d3:ec:cc:d7:aa:9d:
b1:81:66:a2:c8:9c:68:b3:a4:ed:88:ab:88:46:84:7b:ff:f6:
ee:3a:1a:3d:08:f3:30:67:35:03:2e:d8:e8:62:d8:39:a5:f5:
ca:3c:3c:4e:1d:2c:97:57:89:ac:1f:1c:d5:6c:ff:69:76:a7:
ae:b2:40:f4:96:85:c6:8b:96:69:dd:2a:e7:ef:20:ce:2e:5a:
d1:7b:64:81:55:ae:73:f8:39:ef:ec:05:a3:6c:9a:be:83:a1:
5c:89:c3:31:5e:e9:e3:b5:39:c7:68:a5:91:ca:ae:de:ac:2a:
19:04:f9:37:5f:43:59:e2:0f:9a:32:95:37:e9:95:46:b5:3c:
5a:06:aa:16:6f:37:a3:52:e5:f2:04:6a:d4:3d:5f:8e:bd:c0:
ff:94:13:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:12 2025 by rpki-client