Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier: ccOQlZcLI6XV3Iu0fC9BdPt04AQuNydc8fW+awwqCdk=
Subject key identifier: 2C:69:32:E9:E9:D3:F3:02:8F:3A:58:EB:08:5C:41:AD:41:A8:93:EB
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 01976DABB4E32604C8ADD261FC5FABA7BF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number: 1598
Signing time: Sat 14 Jun 2025 09:00:58 +0000
Manifest this update: Sat 14 Jun 2025 09:00:58 +0000
Manifest next update: Sun 15 Jun 2025 09:00:58 +0000
Files and hashes: 1: 9mv5BJvEaAqWoj8vH5r1xx_pFgo.roa (hash: IAS+DSX7WNtHYk4j+RDYn0qWAwRUWPxJ+A4Wt+jMAHQ=)
2: Jue_aw4zHx1sp-mJmowMMM2tGGA.roa (hash: 0Yitoumoz1xxoSRol/a1PWMjCmZIGDa9duJ/3vMhBiw=)
3: MpJGW61wsAY2na2GoCEJeo5HvXk.roa (hash: vRlmBz0iiqrk+J7PazbAwX0O6F7JU+iRJTTbiLqVjxU=)
4: PNxKt9EExJcdff8t4PlXHS3Zp8E.roa (hash: l/sm5m0RtWP1FamD6nvtIs4Wmty8En19TqcjOBknuMY=)
5: SNph92J-Xcf8IveNNNu0MkGJVWI.roa (hash: VJRwO2aW7uM1HccqCjhKGDaLckqIJFkhu3+W4SavOHw=)
6: U8yyp-JTHsc4PzNj0KNOVG9KECs.roa (hash: XL8cza6Y6dTsPDS6Eb2/zXU0zrVRVcGlEc/rkfzZaj0=)
7: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: FBDLtVL0GhCm4o2ZFRPcN+nBfYvwShqN2cNalZADbs0=)
8: ve4iz1Nb8DcHS9BJwN65K0mM0-E.roa (hash: KrskrDJ9DRb/ge1dc1ifB8Oiho4jbO0ADnVg8CJqCCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:b4:e3:26:04:c8:ad:d2:61:fc:5f:ab:a7:bf:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Jun 14 09:00:58 2025 GMT
Not After : Jun 15 09:00:58 2025 GMT
Subject: CN=2c6932e9e9d3f3028f3a58eb085c41ad41a893eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:db:a9:30:48:5d:4c:99:0d:64:e9:34:8e:7c:
e2:87:99:9c:b7:eb:7f:5c:65:a8:b0:56:1b:3a:32:
d0:e0:78:ec:f2:27:02:36:8f:f1:46:00:e9:c5:6f:
00:a3:48:04:86:71:95:4d:15:76:5d:9b:3a:fb:31:
5b:b5:e3:94:de:da:d1:17:6b:01:ec:c4:b5:1f:a0:
a9:dd:a1:7c:27:23:28:5b:38:b0:a4:21:b5:08:72:
a2:59:5a:b7:d4:c9:c8:5e:9b:35:71:3e:6a:95:19:
a0:11:2a:53:aa:08:02:64:a6:0a:6f:59:8c:d2:9c:
ee:01:d5:75:37:a1:9a:cb:ad:e6:d1:62:0f:ac:b3:
00:81:3f:87:ca:16:71:b6:7e:12:db:17:a2:35:0b:
d0:52:be:9b:ef:98:4a:68:da:b1:6e:55:85:96:7e:
8e:12:27:be:90:65:4a:30:5a:6a:f3:ca:af:ee:89:
ee:e1:b9:7b:e2:fd:70:c0:2c:db:89:18:7e:8e:a9:
b7:8d:4d:4f:8c:30:b0:0a:e1:84:27:1c:ca:76:a9:
d0:b6:34:b6:43:52:69:09:87:c0:d2:90:7b:cd:e9:
e2:4d:53:47:eb:20:69:49:13:0e:9d:bf:41:f3:83:
c3:c0:7c:26:ec:f8:4a:40:cd:b6:89:9f:45:3f:75:
e2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:69:32:E9:E9:D3:F3:02:8F:3A:58:EB:08:5C:41:AD:41:A8:93:EB
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a1:d8:17:0d:0c:77:61:52:a0:c3:ed:11:17:0f:ae:1a:9a:
82:0e:7c:0d:03:12:87:52:fc:27:20:d9:02:81:70:d2:57:c0:
28:0c:7f:d7:6f:77:14:ad:19:d1:77:b2:9f:57:07:eb:e4:bf:
a4:c7:93:31:bb:a2:22:ff:6d:7a:3a:2d:e5:8f:af:92:9d:dc:
bd:c6:94:1b:bb:89:11:ef:ba:8a:b2:51:0f:b3:fa:72:c8:65:
24:a3:67:92:34:45:30:3a:75:04:46:d0:75:1c:54:d9:a2:9b:
1e:80:8d:19:8a:13:9f:ab:5e:38:a7:7c:58:96:98:5e:79:7e:
be:b5:97:f5:2e:47:7e:dd:a6:79:80:97:8f:21:98:29:f7:57:
85:dc:49:fd:8d:2c:b7:22:9f:74:56:1e:09:12:b0:29:71:b0:
e9:09:9a:71:75:6c:57:9c:fe:54:1c:42:82:e0:f0:36:04:f9:
a8:05:00:66:50:87:dd:f7:b1:1c:ac:22:91:1f:ba:32:58:e3:
c8:25:38:6c:54:6e:99:59:eb:7d:9e:19:c2:03:fc:49:6a:b8:
4a:52:47:29:05:28:ce:f7:27:18:7f:a0:92:2e:5c:31:69:08:
d8:f6:da:c5:33:a1:62:29:5c:54:8b:6d:ef:09:8f:ec:db:83:
4f:fe:74:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:39:29 2025 by rpki-client