Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
File: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft (raw, json)
Hash identifier: VOBnuGh4FlVe189h3ztVmVk4jGWQUXf4Jp6yzDZ8hzQ=
Subject key identifier: 80:49:BB:CF:C4:4B:7C:99:2C:37:81:D3:8C:5D:07:D8:78:C4:21:66
Authority key identifier: 5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
Certificate issuer: /CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Certificate serial: 019A4C6118BDF8493C9E976A2C65CC4B718E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
Manifest number: 12FF
Signing time: Tue 04 Nov 2025 01:00:22 +0000
Manifest this update: Tue 04 Nov 2025 01:00:22 +0000
Manifest next update: Wed 05 Nov 2025 01:00:22 +0000
Files and hashes: 1: 7_MeqSoypZvgs9ZAL0kEwYQ0u1c.roa (hash: 8NO2vJikvip/otF7vMKB7776/r0hurKGavAakZtmDS4=)
2: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl (hash: nSj0+NSF91kOjE+R4iZX6sq3V5U4xYMhZN0Wo16NzjY=)
3: tzFD8X16hDfmCWt1Dl4XGdomYg8.roa (hash: njuYkI0SwGGHpocv80e/q9DE78xBX5bJk4xkczhpvI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:18:bd:f8:49:3c:9e:97:6a:2c:65:cc:4b:71:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Validity
Not Before: Nov 4 01:00:22 2025 GMT
Not After : Nov 5 01:00:22 2025 GMT
Subject: CN=8049bbcfc44b7c992c3781d38c5d07d878c42166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b0:16:be:29:c5:df:e4:e3:2f:a9:99:5c:a8:
f2:f8:8f:9b:bf:26:1b:af:e5:45:e8:63:f0:05:02:
a1:1b:eb:e8:48:69:8a:29:37:b8:3b:d1:5a:eb:b3:
a7:e6:18:4b:2c:aa:97:b7:91:f2:96:b0:30:ff:13:
2b:ff:a2:c0:76:d8:ad:b2:e1:e8:76:6d:68:cd:a8:
98:f4:73:ec:4b:de:21:62:98:25:44:b5:4d:c1:70:
a4:fd:09:ac:9d:2c:ee:be:35:e5:5e:0e:e6:a5:55:
55:6f:fc:b2:24:5b:af:c0:4d:f9:73:78:4c:4b:75:
4f:30:e9:11:76:c1:01:9e:55:31:2b:14:e5:6b:7a:
1b:ef:a5:13:d6:a3:46:c1:01:26:4e:3d:da:7d:1c:
ad:f5:94:b4:4a:b2:fe:a5:5e:bb:63:ea:7c:26:c7:
19:72:18:1e:37:f6:e2:16:bf:70:aa:11:cc:8a:14:
15:e6:fc:49:ad:e5:c5:6f:ac:d6:30:6b:f9:90:04:
34:0a:8a:d8:88:2a:38:d5:89:c6:ed:b4:a4:c1:5d:
45:b8:d5:19:82:48:73:9b:f3:6e:04:e6:3c:6e:1e:
dd:1c:78:1c:79:f6:b6:49:1a:b6:cf:4f:1b:24:a2:
59:fc:d0:c3:42:12:2b:6a:80:ed:7f:7c:ee:ed:25:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:49:BB:CF:C4:4B:7C:99:2C:37:81:D3:8C:5D:07:D8:78:C4:21:66
X509v3 Authority Key Identifier:
keyid:5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d6:ba:95:69:6c:d8:35:a0:aa:3b:b6:f0:ce:eb:83:82:99:
ac:f8:b5:35:ae:02:ca:a8:09:3f:e1:c0:e1:9e:9c:cc:9d:d2:
a1:1d:4c:6d:9c:de:cb:36:ed:b8:1e:83:83:e3:df:64:75:be:
ae:59:86:79:d6:a4:88:21:4e:d3:5c:fb:de:cd:de:cf:33:de:
2c:83:c4:5c:4a:83:76:af:70:51:8e:27:e5:f8:e2:9c:bd:52:
6a:db:37:ef:54:ac:3b:96:b1:10:37:7b:22:b3:92:84:fc:89:
f1:f7:2a:39:30:74:46:f4:4a:2d:a9:11:ff:d0:9d:93:f6:a9:
26:13:5b:b6:a2:56:58:03:f9:7b:ec:1f:b2:4c:11:af:eb:b0:
70:83:23:d2:54:35:a7:07:92:d8:95:09:44:16:f3:d7:43:3d:
3b:33:d9:ab:73:9e:09:09:01:aa:5e:cf:d5:e9:96:34:e4:b5:
2a:a3:2f:d3:b5:ab:50:8e:1e:ce:b4:f4:8e:48:86:ba:af:9a:
38:4c:39:d5:9a:06:69:5f:df:69:e8:c5:04:78:f7:03:d8:b6:
2c:32:f7:0f:1c:91:07:1e:9c:0a:5a:ef:aa:91:89:71:3a:42:
34:43:0f:6c:aa:19:64:31:76:4c:b7:85:37:8e:c8:e4:25:5c:
a2:91:e0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:49:50 2025 by rpki-client