Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
File: WHiPOEJuA2KzTdVnND_oRhpYur4.mft (raw, json)
Hash identifier: yIb7vaQ380OzGV2WorGFoJT01Q8Si/Q3/NSbYySnrxc=
Subject key identifier: 89:D5:C5:E9:0B:3C:8D:1F:EB:32:55:10:28:16:5D:48:0B:58:72:3E
Authority key identifier: 58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
Certificate issuer: /CN=58788f38426e0362b34dd567343fe8461a58babe
Certificate serial: 019A4F61E97A033A9BD9F8983FD1FD6D716C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
Manifest number: 1452
Signing time: Tue 04 Nov 2025 15:00:07 +0000
Manifest this update: Tue 04 Nov 2025 15:00:07 +0000
Manifest next update: Wed 05 Nov 2025 15:00:07 +0000
Files and hashes: 1: WHiPOEJuA2KzTdVnND_oRhpYur4.crl (hash: 8AryFAShopCQVvEypyoCfs7gZhwmEifLQXg3j88Zu6Y=)
2: za5pr_RdRVQCTgLd3W2Y-u8ZZIo.roa (hash: HsG6G2W0gO0SbTM6V5Eodd4DUw2y9g6vatwqlX3nzOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:e9:7a:03:3a:9b:d9:f8:98:3f:d1:fd:6d:71:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58788f38426e0362b34dd567343fe8461a58babe
Validity
Not Before: Nov 4 15:00:07 2025 GMT
Not After : Nov 5 15:00:07 2025 GMT
Subject: CN=89d5c5e90b3c8d1feb32551028165d480b58723e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:c6:7c:1a:17:df:e9:17:bd:b6:27:df:f0:
93:5a:2f:f1:1c:9d:c3:7b:54:03:38:bb:a8:31:56:
ed:52:21:cd:2f:0c:46:9d:1a:ee:39:21:8c:a1:41:
43:4b:15:ff:56:f8:a1:2a:8b:59:ee:2f:6a:1d:6d:
0d:03:d7:ea:e1:8b:ef:49:4f:32:15:26:71:4c:0a:
7f:28:33:9a:e3:69:fe:08:b2:0c:00:5e:31:49:d8:
a1:4f:39:a6:4a:41:25:ba:e0:ec:87:0d:2b:d6:58:
db:97:4c:d0:a5:e1:48:82:29:48:04:d6:88:e5:07:
aa:a0:88:b2:29:c4:dd:9a:f5:0c:57:52:cb:de:01:
e4:88:f5:d5:d1:3c:e2:a6:e0:9c:ff:21:52:a1:f2:
e6:b6:4e:fd:a4:bc:1f:85:93:d5:fd:e0:1e:08:5e:
09:e4:d8:47:87:1e:e0:1d:6c:ff:4f:ef:5c:d9:aa:
0a:88:e6:31:d2:ab:2d:be:6d:10:7c:10:05:45:34:
cb:06:e5:27:34:fe:ec:7b:da:e4:d2:d1:1c:4d:8c:
49:43:bc:d8:19:78:42:f8:cb:5d:cd:d5:97:84:46:
64:17:ba:4b:ff:b4:9a:0e:24:a9:84:03:da:39:73:
b1:69:20:ca:0b:ea:98:53:d6:b8:35:d7:c8:ef:51:
0c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D5:C5:E9:0B:3C:8D:1F:EB:32:55:10:28:16:5D:48:0B:58:72:3E
X509v3 Authority Key Identifier:
keyid:58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:44:b2:0b:bb:94:cb:27:c2:96:f4:6e:7a:ff:6e:b7:a2:72:
ac:bd:64:a8:27:87:88:76:21:0d:27:43:f8:8c:65:e1:c8:5e:
5d:99:98:f2:79:39:c3:3d:8b:18:a7:37:4a:fe:0a:be:a8:69:
6d:2c:72:e5:4f:f8:3d:ce:0d:34:52:5f:3b:2a:5b:66:60:a4:
03:44:e2:8d:b8:e8:14:a5:e7:7f:b5:1d:de:a4:02:73:d7:74:
1f:5f:e7:57:81:27:ec:22:bf:af:5a:8a:a8:c5:66:60:70:c2:
2d:04:50:4a:02:57:ea:10:69:cd:72:8a:5a:7f:d8:68:b1:6d:
62:f0:d0:ba:90:b1:d0:89:6b:1d:1b:c6:11:92:ae:2a:4b:96:
6b:91:41:38:85:cb:37:f2:40:08:fe:9d:65:09:3c:ca:66:64:
e3:cd:5c:a5:db:84:fd:13:66:fb:4c:e4:ad:15:18:94:b7:19:
72:86:fb:44:39:5e:83:2e:07:f2:2d:34:02:a3:47:78:e2:f4:
50:b7:bf:19:ee:ac:f4:2e:cd:4c:73:91:75:b1:e6:57:99:5e:
48:60:0f:f0:49:7a:a7:43:a8:39:b9:8a:18:18:c3:55:a4:f0:
73:ce:72:1e:47:e7:87:24:3e:c5:ff:ff:17:75:21:d6:b8:d6:
65:d0:a3:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYel6Azqb2fiYP9H9bXFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4Nzg4ZjM4NDI2ZTAzNjJiMzRkZDU2NzM0M2ZlODQ2MWE1
OGJhYmUwHhcNMjUxMTA0MTUwMDA3WhcNMjUxMTA1MTUwMDA3WjAzMTEwLwYDVQQD
Eyg4OWQ1YzVlOTBiM2M4ZDFmZWIzMjU1MTAyODE2NWQ0ODBiNTg3MjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWrGfBoX3+kXvbYn3/CTWi/xHJ3D
e1QDOLuoMVbtUiHNLwxGnRruOSGMoUFDSxX/VvihKotZ7i9qHW0NA9fq4YvvSU8y
FSZxTAp/KDOa42n+CLIMAF4xSdihTzmmSkEluuDshw0r1ljbl0zQpeFIgilIBNaI
5QeqoIiyKcTdmvUMV1LL3gHkiPXV0TzipuCc/yFSofLmtk79pLwfhZPV/eAeCF4J
5NhHhx7gHWz/T+9c2aoKiOYx0qstvm0QfBAFRTTLBuUnNP7se9rk0tEcTYxJQ7zY
GXhC+MtdzdWXhEZkF7pL/7SaDiSphAPaOXOxaSDKC+qYU9a4NdfI71EMvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInVxekLPI0f6zJVECgWXUgLWHI+MB8GA1UdIwQY
MBaAFFh4jzhCbgNis03VZzQ/6EYaWLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0hpUE9FSnVBMkt6VGRWbk5EX29SaHBZdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zZDNiMjctZjc4Ni00MWUwLWFjNTQt
YmZjMGZmOTdhMTkwLzEvV0hpUE9FSnVBMkt6VGRWbk5EX29SaHBZdXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8zZDNiMjctZjc4Ni00MWUwLWFjNTQtYmZjMGZmOTdhMTkw
LzEvV0hpUE9FSnVBMkt6VGRWbk5EX29SaHBZdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkSyC7uU
yyfClvRuev9ut6JyrL1kqCeHiHYhDSdD+Ixl4cheXZmY8nk5wz2LGKc3Sv4Kvqhp
bSxy5U/4Pc4NNFJfOypbZmCkA0TijbjoFKXnf7Ud3qQCc9d0H1/nV4En7CK/r1qK
qMVmYHDCLQRQSgJX6hBpzXKKWn/YaLFtYvDQupCx0IlrHRvGEZKuKkuWa5FBOIXL
N/JACP6dZQk8ymZk481cpduE/RNm+0zkrRUYlLcZcob7RDlegy4H8i00AqNHeOL0
ULe/Ge6s9C7NTHORdbHmV5leSGAP8El6p0OoObmKGBjDVaTwc85yHkfnhyQ+xf//
F3Uh1rjWZdCj4Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:35 2025 by rpki-client