Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
File: WH9UeNHpTyQHBXIsN4kHba9VN1c.mft (raw, json)
Hash identifier: OMwjBNklDJE8QyhSIiptqJC8H+Era/T4L+AUu4GBNII=
Subject key identifier: 33:18:EC:FF:57:61:A0:5B:27:88:6C:28:AB:C9:4B:EB:B3:74:9D:62
Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
Certificate issuer: /CN=587f5478d1e94f240705722c3789076daf553757
Certificate serial: 01987486841062344EA9514A0CCD55BAF820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
Manifest number: 0152
Signing time: Mon 04 Aug 2025 10:00:29 +0000
Manifest this update: Mon 04 Aug 2025 10:00:29 +0000
Manifest next update: Tue 05 Aug 2025 10:00:29 +0000
Files and hashes: 1: JYHlFaw4wOmIWR_77ywpgSBNK2k.roa (hash: OvZXgWODCQ+eoxv2l2YqNiIKjAuMYd6ZKeSQVCi/uJE=)
2: WH9UeNHpTyQHBXIsN4kHba9VN1c.crl (hash: SGy3OcC7AoYSR8uvp+aJWaJ1ypPnLSXtlVM4c94IpkE=)
3: d9EPdccRI9fe31r8YXiF11dbuAE.roa (hash: Mn6la1cNZ2lvlxnLvxs6dnBmU/hxdiSINwGaH327vug=)
4: g1OClMd_E4NQ7EkPx7bidts26wA.roa (hash: CeqCEmByjs4N40bd+Z4KEPz6ASh9HSswP/ltMk2hKeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:84:10:62:34:4e:a9:51:4a:0c:cd:55:ba:f8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587f5478d1e94f240705722c3789076daf553757
Validity
Not Before: Aug 4 10:00:29 2025 GMT
Not After : Aug 5 10:00:29 2025 GMT
Subject: CN=3318ecff5761a05b27886c28abc94bebb3749d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:53:b7:04:c0:54:12:35:4b:fc:e4:0e:3b:36:
c4:a7:a0:74:66:48:c6:f4:d5:05:84:92:ae:dd:4e:
18:48:86:11:34:6c:24:c7:af:ad:6a:da:b2:ee:4e:
51:2e:9a:ae:f8:0d:af:e0:a8:8c:71:dc:ab:bf:3a:
27:3b:5d:f8:f7:52:c5:b0:ca:df:f3:fc:a1:21:b5:
3c:e2:0d:47:d3:14:c9:90:e0:3b:60:53:d1:0c:68:
a2:00:d8:87:ba:62:43:f0:49:25:54:ef:99:6e:dd:
d3:d9:e0:ad:07:8c:be:92:f8:9f:3c:4d:47:6d:7a:
24:fb:6a:f8:ee:50:30:c3:e3:64:7f:e1:e6:6d:0c:
d6:e2:9a:2f:e6:b7:ea:16:16:e7:e7:f7:18:14:6f:
eb:dd:31:54:9c:6b:f9:1e:c7:39:12:40:e6:ca:d8:
3a:37:50:83:2a:9d:9a:1e:59:64:cc:0f:59:a5:96:
a1:ae:38:7f:64:63:df:41:3e:f0:6b:86:2b:5b:61:
d4:b0:6c:5d:41:c1:81:cc:e6:de:df:be:31:d6:46:
ca:f9:f7:44:d4:d5:cd:8f:46:83:d2:f0:0d:9c:5d:
68:81:9a:11:9c:69:15:98:fa:54:36:1b:11:f7:2a:
ed:b1:24:ed:bf:4a:ff:d4:56:c2:11:bf:58:87:1a:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:18:EC:FF:57:61:A0:5B:27:88:6C:28:AB:C9:4B:EB:B3:74:9D:62
X509v3 Authority Key Identifier:
keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:93:ee:cd:55:97:c2:98:52:a1:cb:19:4f:14:e0:7d:6c:45:
f5:06:9e:16:bd:92:77:0d:7d:ea:6e:e3:b2:ed:53:46:d7:cc:
26:5d:c5:25:6f:a2:54:10:29:db:31:bc:d7:dd:89:a1:03:f1:
3f:2c:d4:1f:d7:93:af:24:6f:f2:1b:f4:50:6e:8d:ae:5f:0b:
fe:4a:5d:08:b8:0d:9b:e2:1f:d9:58:8e:0b:40:f6:6f:ac:4c:
d9:78:c0:bc:46:52:29:ab:9e:ba:42:ce:10:cc:f9:20:2d:f2:
0f:bd:45:5e:b0:36:e4:89:b5:53:6d:73:77:1e:d7:94:d1:14:
7d:9a:74:2e:2d:ab:89:85:ea:49:76:7e:e3:3d:70:ae:b1:5f:
69:57:77:3f:09:8d:f3:3d:5e:4f:9e:e9:7d:d6:ac:bc:39:d7:
55:72:be:b4:ee:9a:6c:a4:61:be:ba:08:c3:6d:db:0f:e6:46:
c1:e2:01:5d:9a:06:8f:82:1e:61:b9:f8:e1:4d:fe:aa:90:db:
df:45:a9:fb:bd:53:b2:ce:56:ce:e8:8a:88:26:83:f0:9e:95:
4a:50:fc:a6:90:6a:06:04:99:f9:da:2f:81:c8:06:52:b8:3f:
e4:42:2d:94:ac:43:ce:86:9d:3b:22:17:29:44:6d:3b:ad:8b:
cb:af:f4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:03:03 2025 by rpki-client