Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
File: Wh1F7dft3pqLhipzmtqOeLfcgrk.mft (raw, json)
Hash identifier: xgwBp8qlbL57MQM1y8waRr8fOHmU8MNcIA+m5lHoUYc=
Subject key identifier: BE:B1:9D:72:AB:C5:EA:28:B2:0A:EA:CD:42:19:70:C8:FA:CE:0C:94
Authority key identifier: 5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
Certificate issuer: /CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Certificate serial: 0198733D1C523D7E1786F3C0BC24C8875148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
Manifest number: 0676
Signing time: Mon 04 Aug 2025 04:00:41 +0000
Manifest this update: Mon 04 Aug 2025 04:00:41 +0000
Manifest next update: Tue 05 Aug 2025 04:00:41 +0000
Files and hashes: 1: Wh1F7dft3pqLhipzmtqOeLfcgrk.crl (hash: WumrAnNIL/KT6iRMh77xdXGd+/YHHknTD/VjahnIaaI=)
2: zfiw5E-qnyxqvOsxLYX9MrFyy84.roa (hash: 1/skm9ZEWKwE055qHT9FApOuyUCgE73YdLdPkqaA0Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:1c:52:3d:7e:17:86:f3:c0:bc:24:c8:87:51:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Validity
Not Before: Aug 4 04:00:41 2025 GMT
Not After : Aug 5 04:00:41 2025 GMT
Subject: CN=beb19d72abc5ea28b20aeacd421970c8face0c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:4a:95:dc:d6:7d:1e:fb:88:76:b1:ef:a0:
76:8d:18:24:fb:49:38:6e:87:66:ec:ff:6c:ac:54:
49:00:10:cd:29:d7:75:71:6c:0c:d7:af:b9:40:3c:
fd:e8:b0:a5:81:c4:df:45:b8:26:23:c4:f6:a8:10:
8c:8c:c3:2b:fc:60:3f:04:de:9b:f9:0a:ea:22:82:
17:31:c3:a1:8b:e8:83:01:10:7c:65:7b:ca:b2:32:
d5:02:b3:ce:92:fd:2c:8a:c5:32:56:a9:16:78:42:
0f:99:af:7f:ea:d5:8a:30:38:33:89:b1:85:aa:7e:
03:ae:15:60:b1:cc:15:68:97:c7:c8:dd:c5:2c:3d:
db:3c:4a:b8:82:5e:d2:67:b7:45:63:07:61:7b:d7:
99:74:f7:40:42:00:e0:03:f1:0e:6b:5b:28:04:32:
85:1a:20:81:63:07:aa:8c:2b:37:b7:81:2c:79:a2:
4e:87:8f:d0:90:09:c5:5f:b8:38:c7:a9:f2:75:85:
0f:8d:ca:71:b0:ba:53:d6:ba:db:8a:ae:a5:76:eb:
93:bc:ca:15:96:e6:67:3c:3f:68:42:c3:2f:c9:6a:
53:51:4d:a6:5f:ff:26:10:c6:e8:7d:4d:d6:81:b1:
81:87:f8:59:ae:6a:f7:e3:2f:6e:e6:65:a6:b2:e7:
1d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B1:9D:72:AB:C5:EA:28:B2:0A:EA:CD:42:19:70:C8:FA:CE:0C:94
X509v3 Authority Key Identifier:
keyid:5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:40:cf:53:22:e0:05:a1:82:0b:78:b5:97:19:fd:c6:3e:0c:
8d:f7:cb:5a:97:52:f4:08:04:a2:d7:f7:0b:e2:0f:8f:5e:58:
41:64:29:fb:94:21:11:3c:a5:85:80:12:2c:45:85:57:bc:35:
b1:64:32:e8:64:f1:c8:44:b6:27:db:67:12:f7:d1:f9:7d:37:
64:74:10:15:e5:39:6c:85:26:58:32:be:ef:61:28:13:d5:1d:
8a:68:47:2f:3d:25:b6:2a:a6:cc:65:df:7f:72:4e:f4:e0:ac:
45:b1:44:86:65:92:25:fd:56:42:ca:e9:c9:53:34:96:84:26:
cb:11:82:f2:e9:b5:54:2e:ae:9d:12:76:d2:a0:f0:a0:55:7f:
61:02:10:28:d2:ce:c3:0e:fc:d7:de:c3:23:be:e4:ad:94:5e:
64:c4:26:2b:aa:0f:16:66:3e:4b:3e:51:91:bd:5f:58:a7:d3:
47:eb:08:c1:ff:63:2d:70:21:bb:d0:af:e1:b3:35:8b:50:55:
08:31:b5:2f:5b:8f:6b:a4:0c:d9:db:95:66:f7:9f:63:a7:45:
39:63:8f:cb:a4:16:a1:f6:6f:47:72:84:75:58:5f:ee:40:0e:
c7:88:24:41:7b:bb:c1:7f:cd:08:90:9e:d4:e1:64:47:58:98:
19:e2:a8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:11 2025 by rpki-client