Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
File: WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft (raw, json)
Hash identifier: ASXLC+NoSqV4ySBX99BKy+M81ldJwgniwnpb/yiYeBw=
Subject key identifier: 06:49:E8:96:B4:E4:D9:0D:3A:C1:E1:05:8B:22:86:5C:D4:6E:47:17
Authority key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
Certificate issuer: /CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Certificate serial: 019A5074D15EED0E61F3A90F81E80352BFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
Manifest number: 08A5
Signing time: Tue 04 Nov 2025 20:00:24 +0000
Manifest this update: Tue 04 Nov 2025 20:00:24 +0000
Manifest next update: Wed 05 Nov 2025 20:00:24 +0000
Files and hashes: 1: WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl (hash: tqn6MtVMHlr7EqaacSNDlNYTT5Ru3U5egekCk3hCx7M=)
2: Z4U4s6npqkkGcLAYBUlzliN7I6c.roa (hash: jhktH3rMjXeFPaMYfnlQRVzXRWKx1pb7NI8qgNj/AcI=)
3: mzKfcsB_6SZ92dtoyTzdmZT_D5Q.roa (hash: W3oo5zZMXU2kzBLMgAMNFTy/16dWodtGflb0+ZEqPmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:d1:5e:ed:0e:61:f3:a9:0f:81:e8:03:52:bf:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Validity
Not Before: Nov 4 20:00:24 2025 GMT
Not After : Nov 5 20:00:24 2025 GMT
Subject: CN=0649e896b4e4d90d3ac1e1058b22865cd46e4717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:a0:30:fc:f1:08:af:e6:69:db:d3:f5:6a:
5f:6f:02:12:11:ad:5c:88:a7:d5:eb:93:2a:14:62:
ed:73:11:57:b1:31:b4:2b:41:4a:36:b7:c9:2b:8b:
a6:59:38:30:f3:83:15:ac:27:c4:b0:51:7a:cb:96:
da:8e:8b:82:e3:46:b7:6a:c7:4a:a7:06:27:f2:40:
0d:be:8e:8f:4c:e0:34:43:33:77:9a:32:b8:e1:69:
b7:45:07:ae:d0:22:d5:59:34:dd:3e:5e:04:8c:a0:
79:19:23:2d:6c:58:2c:59:12:3b:75:b0:8a:2c:5e:
fc:95:62:fc:5f:7e:18:ce:91:3c:cb:04:09:f1:f0:
0d:3a:f9:c8:63:e9:f6:e5:1a:f4:12:24:66:83:2d:
ea:e9:ba:d0:c9:66:37:b2:1b:33:32:24:d3:ee:a1:
2b:aa:c9:2d:dd:24:80:a1:36:9e:fb:74:de:5f:f9:
76:0c:51:53:71:e0:cd:95:b9:ec:f0:65:92:20:02:
53:71:8f:32:06:a9:42:da:58:36:aa:b1:28:dc:2c:
93:db:91:72:5e:5f:85:82:99:dd:dc:b8:58:74:e1:
20:a4:a7:24:46:f5:d6:7d:a6:39:ad:33:a2:4f:33:
ef:03:93:e6:9e:18:ca:09:07:40:fb:3c:41:0c:84:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:49:E8:96:B4:E4:D9:0D:3A:C1:E1:05:8B:22:86:5C:D4:6E:47:17
X509v3 Authority Key Identifier:
keyid:58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f9:9e:cd:a7:b2:48:1d:5b:15:6f:4c:99:f7:49:88:27:6a:
70:16:a7:be:d8:05:02:ce:fe:d6:94:49:14:a6:21:cc:73:31:
ed:2e:db:58:4b:79:e5:72:80:54:8a:72:da:b7:52:a6:f0:aa:
b5:2d:25:58:8b:27:e9:bc:a2:7c:f3:09:a4:55:b1:a1:c1:c9:
e9:da:47:a7:e6:5f:d6:ea:46:93:35:09:ac:ce:32:d9:9d:ea:
ba:c6:bf:98:ca:ea:1f:88:92:df:44:36:2b:f6:ce:67:a4:1b:
87:80:79:5e:9b:da:b2:8c:44:70:9d:43:1e:29:89:a7:b3:12:
bd:0d:50:c8:ed:ea:cf:d5:e8:15:c8:98:11:b6:7f:bc:cf:ba:
bb:91:ce:37:88:20:01:6b:51:b0:cb:9c:36:e4:80:92:aa:95:
a9:ea:3e:cb:e8:c9:20:b0:c2:47:c8:60:86:e5:2c:cf:92:0a:
68:b6:3f:56:43:e9:de:f0:65:9e:78:a5:39:d6:ec:d4:df:4c:
f3:ed:79:f1:d5:d4:e6:bc:02:d0:16:6e:62:27:9d:9e:de:be:
93:46:f5:9a:23:96:55:45:e1:1c:91:b2:16:b5:9b:ea:e0:b5:
f7:b4:20:5c:1d:af:ea:d0:84:24:00:10:8a:b4:df:d7:e5:14:
2f:94:00:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:14 2025 by rpki-client