
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
File: WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft (raw, json)
Hash identifier: /11z4pS0SBp4cNDtOEljyTNDjkxZKMpJeAO13YFwvAM=
Subject key identifier: E1:1A:54:1F:93:A7:5A:0E:D7:8F:6B:F3:ED:1D:4B:FB:36:C3:4C:8B
Authority key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
Certificate issuer: /CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Certificate serial: 01987373DDE1C11D975E2A4B67AA787DEA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
Manifest number: 07AE
Signing time: Mon 04 Aug 2025 05:00:29 +0000
Manifest this update: Mon 04 Aug 2025 05:00:29 +0000
Manifest next update: Tue 05 Aug 2025 05:00:29 +0000
Files and hashes: 1: WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl (hash: zG4xiXxB8BD/fHNDPf88CEPK66vBkkWrVAM9j+FQ2bA=)
2: Z4U4s6npqkkGcLAYBUlzliN7I6c.roa (hash: jhktH3rMjXeFPaMYfnlQRVzXRWKx1pb7NI8qgNj/AcI=)
3: mzKfcsB_6SZ92dtoyTzdmZT_D5Q.roa (hash: W3oo5zZMXU2kzBLMgAMNFTy/16dWodtGflb0+ZEqPmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:dd:e1:c1:1d:97:5e:2a:4b:67:aa:78:7d:ea:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Validity
Not Before: Aug 4 05:00:29 2025 GMT
Not After : Aug 5 05:00:29 2025 GMT
Subject: CN=e11a541f93a75a0ed78f6bf3ed1d4bfb36c34c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:00:29:7e:a5:0d:91:2f:d4:ab:6f:ab:09:
2e:bf:36:85:f6:d7:5d:46:ab:28:61:b1:f3:6d:92:
47:f6:57:c1:5d:7e:39:03:f3:ec:56:19:4e:4e:96:
77:0c:a8:c2:a0:40:33:19:d2:08:99:d5:10:d5:3c:
17:9d:a1:27:ae:d0:1b:45:3e:74:de:f6:9a:2d:3b:
0f:0d:f7:a3:23:2a:3f:0d:18:83:44:41:36:23:20:
34:64:1b:8d:43:7c:15:9b:a5:95:d5:e0:15:c9:c2:
8e:55:e9:60:eb:81:da:3d:55:99:1e:32:dc:76:ff:
fd:94:60:0d:bf:ae:a3:8e:4e:fe:5e:5b:00:7a:f5:
65:a5:db:fa:3f:ee:f8:4d:cf:be:a5:90:3c:c3:58:
cd:47:c8:6f:5a:9e:8b:11:58:fb:b5:93:fa:cc:50:
4c:43:4d:43:c1:11:71:d4:f4:47:21:66:30:91:df:
a8:c7:e6:6a:37:44:d9:bd:4a:09:2d:0d:62:5f:23:
82:1b:93:9b:fb:72:34:96:ed:da:b6:8b:f0:05:36:
27:da:b4:fa:24:34:ba:84:24:01:98:d6:08:ad:23:
19:5f:b8:0f:1b:5f:6c:9e:62:ae:bd:51:c3:a5:cc:
b3:aa:e8:a8:20:e9:f1:99:67:15:df:22:ed:10:88:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1A:54:1F:93:A7:5A:0E:D7:8F:6B:F3:ED:1D:4B:FB:36:C3:4C:8B
X509v3 Authority Key Identifier:
keyid:58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:1e:03:14:8f:20:6f:61:6f:d8:4d:4f:d8:11:5b:09:53:2e:
0a:36:2e:6b:bc:42:8b:04:60:3b:82:b1:32:04:f3:40:2d:15:
6e:36:f0:2d:b0:af:f0:b6:be:77:68:bb:3f:3c:0a:2e:92:7c:
6d:7d:58:7c:f1:f0:7f:96:26:ed:35:e4:1f:7a:7f:ef:25:f2:
2e:4a:da:fe:86:7f:4d:d2:a2:d2:d5:65:e8:0d:38:f2:cc:8f:
cc:f0:63:d9:7c:13:28:9e:34:0e:5c:58:25:d2:e9:fa:c1:9f:
b3:8b:75:a6:f7:75:23:84:73:8b:8c:e1:6e:56:6d:74:9f:f8:
a8:6d:ff:bb:ca:33:ea:2d:39:d7:2d:bf:b6:e0:9d:ea:85:3b:
a6:84:36:35:fe:7b:38:58:2b:3a:d4:90:09:d3:3f:3e:94:51:
57:e1:dd:66:6c:34:6e:99:2b:80:21:d1:e7:bf:aa:b6:49:e4:
c4:15:ae:99:c0:5c:77:b9:d6:0c:95:6c:85:9c:6d:15:c1:af:
7b:36:aa:5a:99:a9:84:da:02:ba:7b:4f:73:3c:72:c9:fa:65:
bf:19:5a:16:57:fc:63:db:04:5f:d5:4d:c8:75:13:6a:ea:8b:
b3:30:20:4f:da:41:3f:0a:16:79:f2:5f:e0:fd:c0:6d:05:52:
da:68:55:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:33 2025 by rpki-client