Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
File: WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json)
Hash identifier: hbZEO6neMiRopg4MXQP4h0D1NiRW9AgfeK+zA3duBX4=
Subject key identifier: 31:85:CD:A7:9F:CB:0A:D8:00:D6:09:CA:17:72:BC:EA:84:91:BF:5C
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Certificate issuer: /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial: 019A4EF51C187EE4DCE8DBDAF8B8986C40FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 13:01:17 +0000
Manifest this update: Tue 04 Nov 2025 13:01:17 +0000
Manifest next update: Wed 05 Nov 2025 13:01:17 +0000
Files and hashes: 1: StCabivgvIyHuO75rSeb1s6xEVs.roa (hash: RRQXRwYuo2mU1htEhpek7hE+ZEmIuqOlTMtqEPaKMPA=)
2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: dZd9dp5FjB6VtKl1Feg/9NrjuVgQER0VSZlzIhJrXOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:1c:18:7e:e4:dc:e8:db:da:f8:b8:98:6c:40:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Validity
Not Before: Nov 4 13:01:17 2025 GMT
Not After : Nov 5 13:01:17 2025 GMT
Subject: CN=3185cda79fcb0ad800d609ca1772bcea8491bf5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:22:a7:c3:f5:c6:0f:4a:19:53:d7:03:31:
3f:7a:fb:3d:d4:8e:b1:29:67:98:11:f2:32:a2:38:
35:b8:26:ae:29:14:68:b7:ee:ea:2e:8c:a9:fb:e3:
4b:28:2e:07:f8:be:97:ca:42:26:14:c4:ca:2b:75:
de:cb:57:a2:e1:f3:bb:7a:aa:0b:ef:cc:f9:4c:17:
a2:42:16:1d:fb:e0:ba:c7:9b:47:32:79:1f:f1:6b:
2f:60:cb:02:73:4e:46:8e:5b:3d:17:f8:75:dd:58:
d4:9a:96:9a:3c:ee:47:c5:25:19:3f:f0:d5:90:fb:
d4:4e:ec:ca:56:2f:69:80:3f:e0:26:f5:37:e8:27:
57:9d:7c:ae:a2:b9:e8:b7:d2:1b:b2:dc:4e:0f:5d:
b8:cc:87:0a:15:89:a1:0d:74:f1:b8:4c:a7:87:f5:
3e:ff:d2:36:00:4d:52:9b:6f:a9:ca:70:17:bb:a7:
29:d8:72:c9:a7:38:c6:13:da:ec:9e:88:1e:49:3e:
4a:e6:25:65:d0:6e:5e:3a:9a:fb:9c:90:3d:19:95:
10:3d:86:b8:fc:d0:cf:65:b2:ec:b2:be:05:0c:8d:
36:b2:a3:2a:70:46:88:16:94:fa:f4:b4:21:96:09:
c9:12:ad:62:0d:90:b4:96:a7:f9:02:2b:24:f4:9b:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:85:CD:A7:9F:CB:0A:D8:00:D6:09:CA:17:72:BC:EA:84:91:BF:5C
X509v3 Authority Key Identifier:
keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1e:38:97:ed:20:da:d9:8a:fe:87:c8:a1:3a:0f:d0:4a:30:
20:d3:2a:81:9f:ac:3e:11:88:b3:8a:28:c8:a7:aa:10:97:6a:
c6:9a:e8:64:ca:2a:86:c0:7a:d0:be:59:56:75:48:62:b6:92:
95:a6:a5:42:cd:3c:b5:7d:0a:a3:f5:50:34:e4:b4:89:78:28:
74:ec:67:88:ce:5d:64:e3:ef:b3:9e:e3:a2:48:57:94:8d:3b:
de:7d:a5:cc:6d:5d:93:2f:8a:ba:14:5e:ea:a9:b8:38:bf:9f:
52:9b:7c:11:36:dc:e6:52:8f:e8:07:a1:18:9a:0b:f1:48:4c:
4d:04:3a:5d:09:20:7f:a5:eb:fd:62:78:a2:1e:94:37:a2:50:
fc:9d:3e:52:33:fd:1f:b9:e6:4d:e2:ff:40:0c:58:2a:4a:66:
0f:6c:1e:b9:18:ba:1f:f0:a6:d7:fe:35:75:9d:a3:c2:58:e0:
f9:f8:cc:bb:47:0f:d2:8a:74:07:22:2e:7c:29:10:28:da:09:
f3:24:f5:43:83:34:fc:00:71:94:d0:98:78:38:4a:e4:07:b7:
18:f4:4b:75:8e:e3:e2:4d:cf:24:30:33:10:eb:03:cd:e2:de:
da:4c:c2:10:69:a4:7b:9b:3d:ae:84:a1:6c:71:22:b7:35:dd:
10:62:eb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:07 2025 by rpki-client