Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
File: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft (raw, json)
Hash identifier: r/jE2G0WS978CJdwRrzz4QVZrLPHqNoeXxg//gsvHhw=
Subject key identifier: A6:65:92:40:EE:FE:9E:9D:01:5E:80:E8:F8:2F:8E:A1:DC:87:A2:6D
Authority key identifier: 5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
Certificate issuer: /CN=5a1a31909780e81734af6607272d18525db7657d
Certificate serial: 0198820B82EEE2A4BD248BFAE62D574E9339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
Manifest number: 0AF1
Signing time: Thu 07 Aug 2025 01:00:49 +0000
Manifest this update: Thu 07 Aug 2025 01:00:49 +0000
Manifest next update: Fri 08 Aug 2025 01:00:49 +0000
Files and hashes: 1: 05We7KAwOd8ZrvHSdSmKgB3AkYs.roa (hash: /6T/kf5A77qhojsVT6JQ5gSyGwEMhPcCMY7KI031bSc=)
2: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl (hash: iQFmxnuMsBqgdWAlUWVyHaicHgcbmC7SsdnLEAjbJ4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:82:ee:e2:a4:bd:24:8b:fa:e6:2d:57:4e:93:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1a31909780e81734af6607272d18525db7657d
Validity
Not Before: Aug 7 01:00:49 2025 GMT
Not After : Aug 8 01:00:49 2025 GMT
Subject: CN=a6659240eefe9e9d015e80e8f82f8ea1dc87a26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:47:32:c9:12:48:46:84:a5:ac:0c:dd:2f:b2:
ed:b4:4a:75:06:a1:d3:35:b6:7c:0e:82:cc:96:4d:
ea:7d:d4:da:a0:85:c6:50:c6:3b:fc:4b:4b:3a:59:
ea:f2:8e:bc:68:e7:96:bd:ed:f5:40:19:c8:7c:67:
66:9b:41:7c:1e:fd:3e:4a:59:05:a2:8c:3a:83:b2:
eb:15:cc:4c:81:57:21:78:26:4b:9e:cd:ef:5f:55:
43:d3:88:c0:0e:c0:6e:e8:f1:1b:b0:22:62:98:e4:
6a:49:41:3b:1d:84:15:b9:e3:00:db:f0:a4:08:21:
81:bf:b0:28:5c:d4:cb:b6:33:46:06:45:6c:af:e3:
de:e1:fc:10:fc:d2:21:1c:cb:1a:a8:78:d0:30:84:
07:05:3c:d8:f2:d7:cf:7a:33:c2:1a:c6:d0:d9:fe:
df:98:5d:93:01:07:94:f2:3d:90:79:48:14:48:79:
4c:04:59:91:59:d1:90:b0:7f:5a:3e:e0:d9:3e:47:
d0:08:19:53:39:9f:a7:73:21:17:85:e7:d7:96:3e:
ca:a2:e4:16:58:48:e2:bf:09:20:d4:d5:88:5c:d6:
be:34:15:77:d1:c2:12:c5:e8:10:8d:19:b9:e7:f5:
c1:5d:6b:eb:44:d8:d0:f8:a0:e1:f2:0a:a8:b9:a9:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:65:92:40:EE:FE:9E:9D:01:5E:80:E8:F8:2F:8E:A1:DC:87:A2:6D
X509v3 Authority Key Identifier:
keyid:5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a0:97:49:ef:bc:6b:bf:d6:d1:15:34:60:fd:ac:f3:c0:64:
5f:28:88:eb:a3:8a:2d:36:7f:fb:84:d6:5d:10:b1:0d:ef:a9:
98:72:01:4d:d5:7c:e4:ae:74:5d:aa:63:7e:bb:5a:ba:6e:dd:
40:68:59:b6:5f:74:53:07:6a:5b:6e:86:21:9b:54:f2:e6:bd:
d0:17:df:61:fc:a0:46:a8:57:8d:a4:21:33:a7:e2:73:ae:d1:
5a:c4:86:a3:10:87:0d:e9:51:61:98:99:57:89:b3:6a:0d:8c:
7c:40:cc:6b:68:fc:90:35:85:c0:df:76:41:cb:bc:2d:f6:a9:
8c:0e:05:c3:4f:f9:b9:dd:73:52:15:fe:f1:8c:c9:87:ee:bb:
46:51:dd:fb:3c:b1:d2:4d:f6:f6:5d:50:0a:f7:94:d7:ac:82:
fb:0e:5e:f8:cd:79:2f:10:47:da:9f:21:e1:be:e0:5b:08:b5:
ea:67:04:97:bf:3b:8c:0e:4d:d5:bc:e6:98:0b:17:6f:72:bb:
e3:f2:c9:77:cc:f4:3f:93:a6:ba:31:00:8b:28:04:46:59:d2:
44:33:3f:cc:d2:8b:bf:cf:18:fa:31:e9:f8:83:aa:45:7b:18:
0e:48:48:1d:a9:22:e1:c0:9b:3f:3a:93:89:f2:ad:6b:43:68:
00:da:63:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:15:43 2025 by rpki-client