Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File: WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier: UqmKoCD0/EIUIeZ2v7/QJuestsxtLtmZKtjee+ylwKI=
Subject key identifier: F3:F9:2D:49:D3:65:C6:AB:90:E8:D2:D6:E0:11:E8:50:E5:3A:EE:59
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer: /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial: 01976BF3F75A13BAE9128D379ECC4AF7860E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 01:00:39 +0000
Manifest this update: Sat 14 Jun 2025 01:00:39 +0000
Manifest next update: Sun 15 Jun 2025 01:00:39 +0000
Files and hashes: 1: SMQq7CRzdTMpOyBYbyD-3lmnAf8.roa (hash: NUvlu4bhU491Hj0WQxuB3vUQkEUZUeQ7tnSRNTWGTcQ=)
2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: dLXDcSSqGZqtdrOfdm6A8d/XnpoE5ygsihQVrKFTz6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:f7:5a:13:ba:e9:12:8d:37:9e:cc:4a:f7:86:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Validity
Not Before: Jun 14 01:00:39 2025 GMT
Not After : Jun 15 01:00:39 2025 GMT
Subject: CN=f3f92d49d365c6ab90e8d2d6e011e850e53aee59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:29:09:a6:62:5a:54:89:07:35:51:10:53:f9:
68:a4:b7:17:ce:c6:ef:78:26:1d:63:ad:4b:e8:59:
7d:35:57:f4:22:66:d5:2b:e2:e7:c2:24:35:97:15:
a4:c9:5b:23:dd:ef:a2:5c:b6:80:37:9b:dd:3d:53:
47:e5:58:8a:9b:5b:72:86:f3:f6:29:99:a3:af:0d:
9c:a0:a4:d6:59:da:2b:36:51:4b:3b:e2:5e:be:5b:
1e:3a:9f:2e:66:f7:8d:e8:28:37:ee:f8:67:5e:12:
4a:dd:ea:b9:a0:f1:c4:6b:40:3d:66:82:44:f8:4d:
d1:a6:a5:38:40:4f:e8:45:ec:2a:90:23:68:82:2f:
f6:83:f2:02:81:97:e8:21:6d:53:34:56:cc:33:eb:
91:de:ad:ad:d9:4a:ba:b3:32:0a:43:99:8c:95:4b:
c2:7f:1b:25:ed:d2:ac:f5:f7:84:7c:3d:f7:8e:2b:
0f:84:76:76:25:d0:1b:02:dd:65:db:92:51:63:cf:
4d:fe:7a:41:e1:c7:64:08:5d:b9:d4:f3:df:4f:f9:
d4:1a:43:20:38:62:83:b0:02:15:a2:90:76:7c:10:
78:c9:f5:15:ed:b3:c3:c6:c3:b1:4d:85:bd:f6:f5:
bd:7e:9d:d6:95:79:52:b8:e5:c1:31:b8:fa:ab:62:
6f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F9:2D:49:D3:65:C6:AB:90:E8:D2:D6:E0:11:E8:50:E5:3A:EE:59
X509v3 Authority Key Identifier:
keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:73:69:3f:ec:4a:6c:5c:2f:55:f1:93:43:ac:58:48:16:a1:
78:35:79:7b:b5:4e:25:6f:2a:57:a4:9b:3b:f7:c7:34:2e:79:
8a:bd:44:4a:ec:4b:50:27:97:89:ec:7a:8c:74:fb:de:49:51:
9c:d5:36:27:60:0d:fa:ee:8d:d4:5f:1a:cc:53:be:33:be:84:
79:94:01:dc:b7:40:f7:7e:8a:74:04:49:38:63:c3:c3:34:41:
d2:e4:68:e4:e5:40:92:87:d1:38:4b:94:72:20:be:24:30:92:
01:87:c1:7e:cc:fe:31:bb:91:a6:6f:42:82:00:b5:d7:d3:7f:
e6:57:73:bd:1d:48:7f:9c:89:cd:35:1f:a8:69:00:83:ca:be:
d7:90:b9:ad:2f:26:20:0b:f4:c7:ae:8a:41:b3:6e:0b:4f:84:
bc:20:a4:ca:e9:71:6b:38:4e:91:3b:52:ff:68:dd:e6:26:41:
10:d2:ea:8e:1c:35:42:09:5f:a2:69:59:3f:99:9b:4e:dc:0e:
7d:f3:a5:60:e9:3d:f4:a5:e0:da:1f:2a:c5:db:9c:12:2e:da:
6b:a7:e5:1c:73:bd:30:9e:48:e1:cd:b8:f0:8b:22:58:11:f7:
57:e6:6b:13:6f:40:d0:d9:0e:6b:ae:b1:53:db:c5:ca:1f:83:
bc:8c:0c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:57 2025 by rpki-client