Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
File: WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft (raw, json)
Hash identifier: 5nJka9HuIzoNHMf+ZNRYb6P1/nb0gdU9YRq2sfph+nw=
Subject key identifier: 38:B7:74:38:E9:A9:68:73:B2:C7:28:F7:D3:B6:5F:E7:18:E2:CD:C0
Authority key identifier: 5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
Certificate issuer: /CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Certificate serial: 019921E7EF9276E748367D935CDC03DD5E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
Manifest number: 12CE
Signing time: Sun 07 Sep 2025 02:01:12 +0000
Manifest this update: Sun 07 Sep 2025 02:01:12 +0000
Manifest next update: Mon 08 Sep 2025 02:01:12 +0000
Files and hashes: 1: Oh-cQnXBc3lf8_SsKrCv90dr1do.roa (hash: /clQdBNjFo+DPpzGiAtMduHa7oP5zjEdGJ0IRP2uvgo=)
2: WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl (hash: 9L3Au5v30HG/3PivjgfuF7XHkKAj3HWbHUpZM1hs+hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:ef:92:76:e7:48:36:7d:93:5c:dc:03:dd:5e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Validity
Not Before: Sep 7 02:01:12 2025 GMT
Not After : Sep 8 02:01:12 2025 GMT
Subject: CN=38b77438e9a96873b2c728f7d3b65fe718e2cdc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:7c:3f:4a:a2:f1:38:71:da:83:ff:e8:18:
69:6e:7c:58:45:ff:25:84:34:c6:5f:94:81:4c:ff:
61:bc:4a:22:05:d9:97:6a:6d:0c:72:59:4f:17:1b:
ff:43:0d:ca:41:91:37:e5:df:f7:f9:05:b9:3a:1e:
18:53:c4:92:01:98:a0:45:c1:0a:f2:a4:bc:4d:d9:
e3:21:3c:04:36:74:df:ba:2a:6f:01:8f:6e:67:1e:
aa:a9:0f:98:17:14:b5:8d:95:de:63:e9:a4:d4:ae:
7e:cb:ef:0b:4c:fa:26:7a:d3:4c:28:9d:37:3d:50:
b8:62:67:74:c5:31:ee:60:88:2e:f7:da:38:c0:24:
d1:fb:ca:64:96:7f:4d:30:cb:8b:cf:56:a0:9b:40:
a7:42:78:5a:8d:e3:67:75:1a:d3:1e:73:44:35:f8:
19:e9:35:30:0e:b0:4e:fd:f1:eb:80:a8:f2:a0:79:
a7:4e:1e:b6:e0:3e:bd:a6:69:c5:d1:aa:df:19:6e:
3d:9f:68:7e:c7:5a:2d:f2:f0:39:9c:f6:03:90:13:
cd:2f:7c:0a:4b:50:6e:3a:0f:e2:09:54:0d:c0:cc:
a6:f0:b1:76:a8:14:e3:41:d9:a4:56:e6:df:c0:32:
82:55:0d:44:4e:85:86:59:48:2a:6e:ea:30:4f:46:
af:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B7:74:38:E9:A9:68:73:B2:C7:28:F7:D3:B6:5F:E7:18:E2:CD:C0
X509v3 Authority Key Identifier:
keyid:5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:81:b6:fd:9d:99:2b:4e:4a:fd:e0:f8:7c:a4:57:02:95:f6:
d1:e4:4a:7b:58:0b:b4:2e:7b:e4:c8:27:e2:56:ae:0b:c4:4b:
bf:7d:e2:1e:69:96:7e:01:9f:81:34:d5:bb:18:76:f4:bb:b4:
c0:a7:61:0f:fd:b1:d9:6f:58:a9:e5:15:49:45:9e:ea:a2:d6:
de:61:4b:6e:34:22:8c:60:24:fe:8b:ca:09:55:67:af:9c:ce:
17:5e:ed:6c:71:aa:b6:83:27:63:a2:37:bc:3a:1b:69:57:dd:
36:ab:81:bf:66:48:5a:1e:f5:8a:86:5f:f9:b5:5d:93:fd:b9:
47:50:cc:24:3c:96:cf:87:4e:5a:1d:09:53:43:d9:4c:19:01:
40:b2:0d:ed:eb:b5:01:34:e4:f2:e8:ef:20:92:82:5d:d4:b5:
76:4d:74:cb:6f:1a:c1:c4:fa:40:95:7d:ad:fd:dd:54:4a:d6:
53:92:a0:21:7f:82:6a:87:2f:cf:5d:b8:f7:7a:f0:a3:2e:e7:
83:23:d5:38:6c:c4:f3:65:c1:c3:1c:1c:c2:64:9d:7b:bb:84:
6f:41:3a:ad:a7:fa:3d:ae:94:ab:47:78:df:40:12:07:39:5f:
f0:49:ca:3e:68:98:0e:e8:02:ee:e8:92:e1:cd:36:6f:e0:2c:
6d:0f:99:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:27 2025 by rpki-client