
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier: gUgJPRnt0tJTsvNF6T2XPzXntewaof/hN7jOr6Du6R8=
Subject key identifier: E8:36:FB:5C:2B:63:54:69:4D:A2:EB:BD:29:1A:D9:AF:BB:23:47:EA
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 0198744FBD29889203B51C154B74D8FC344B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number: 1620
Signing time: Mon 04 Aug 2025 09:00:39 +0000
Manifest this update: Mon 04 Aug 2025 09:00:39 +0000
Manifest next update: Tue 05 Aug 2025 09:00:39 +0000
Files and hashes: 1: 9mv5BJvEaAqWoj8vH5r1xx_pFgo.roa (hash: IAS+DSX7WNtHYk4j+RDYn0qWAwRUWPxJ+A4Wt+jMAHQ=)
2: Jue_aw4zHx1sp-mJmowMMM2tGGA.roa (hash: 0Yitoumoz1xxoSRol/a1PWMjCmZIGDa9duJ/3vMhBiw=)
3: MpJGW61wsAY2na2GoCEJeo5HvXk.roa (hash: vRlmBz0iiqrk+J7PazbAwX0O6F7JU+iRJTTbiLqVjxU=)
4: PNxKt9EExJcdff8t4PlXHS3Zp8E.roa (hash: l/sm5m0RtWP1FamD6nvtIs4Wmty8En19TqcjOBknuMY=)
5: SNph92J-Xcf8IveNNNu0MkGJVWI.roa (hash: VJRwO2aW7uM1HccqCjhKGDaLckqIJFkhu3+W4SavOHw=)
6: U8yyp-JTHsc4PzNj0KNOVG9KECs.roa (hash: XL8cza6Y6dTsPDS6Eb2/zXU0zrVRVcGlEc/rkfzZaj0=)
7: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: 8Gc0xT63CBja5NxgmIXjVtzGIfUroFkBpNYBUvqrADQ=)
8: ve4iz1Nb8DcHS9BJwN65K0mM0-E.roa (hash: KrskrDJ9DRb/ge1dc1ifB8Oiho4jbO0ADnVg8CJqCCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:bd:29:88:92:03:b5:1c:15:4b:74:d8:fc:34:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Aug 4 09:00:39 2025 GMT
Not After : Aug 5 09:00:39 2025 GMT
Subject: CN=e836fb5c2b6354694da2ebbd291ad9afbb2347ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:81:62:a2:d4:5b:d9:71:a7:69:37:61:5d:e6:
79:be:47:dd:9f:06:e7:d5:4c:b7:d9:52:fb:ee:b1:
88:82:94:73:df:66:8c:76:f4:36:46:f8:18:a5:44:
64:1a:c5:35:05:51:d3:2c:d5:3b:09:9d:e3:53:db:
bd:46:10:c9:ac:4f:a9:73:ed:31:3d:c7:bf:71:69:
64:ab:e3:27:ed:61:a9:e3:c9:58:90:0b:42:65:12:
71:47:51:53:f7:cf:2a:e5:ae:e4:0c:b3:a7:6d:fb:
b9:1c:9b:fd:8e:40:7c:f2:14:21:93:37:fb:04:7b:
d5:7b:8b:a9:6a:ba:56:30:4d:5d:18:a4:f5:e2:84:
c4:0e:d3:8f:8c:d8:dc:b7:b4:eb:5b:f4:f5:be:1b:
2b:f5:02:21:24:94:da:06:11:a3:84:0e:ae:08:11:
fb:20:34:0f:73:02:4f:de:91:ae:3b:88:9e:af:a5:
5f:7b:09:60:75:ab:65:8d:54:ef:67:9e:b9:2d:f0:
25:e5:ee:73:55:df:f9:4c:a6:70:3d:4e:34:6d:70:
34:46:46:d5:cc:61:d6:b9:87:30:47:81:70:b7:32:
14:63:a8:08:85:d7:0c:07:4c:30:d4:05:9a:c2:45:
95:ef:f3:a4:c2:d6:20:f8:3b:8b:59:29:41:fa:96:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:36:FB:5C:2B:63:54:69:4D:A2:EB:BD:29:1A:D9:AF:BB:23:47:EA
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:16:1d:53:41:05:f2:19:80:e3:f8:36:3f:e6:1e:b7:fb:b8:
82:a0:20:38:86:46:03:b4:44:32:73:b9:df:91:22:9a:44:a5:
4d:e1:63:ac:2d:62:24:d8:a3:6b:d8:20:12:ac:6f:fb:93:00:
e4:86:0c:a5:60:dc:cc:a5:c1:69:6c:68:0a:c4:20:ce:b2:a7:
29:16:d9:4c:92:5f:b5:7f:6f:0f:40:6c:55:71:e7:cc:2e:e7:
e4:30:b0:2f:37:b3:10:86:d8:fe:c6:08:5a:89:d4:b8:4b:6b:
8e:68:59:52:26:f9:c2:27:50:81:b1:e0:35:ef:e5:83:11:81:
00:19:b7:fb:34:5f:4c:a6:df:51:e8:72:d0:46:a2:42:93:d9:
1d:3c:a9:27:2d:78:7f:c4:37:49:5f:83:d3:9d:c4:70:3c:aa:
f2:9d:81:00:9d:2f:75:88:e2:af:fe:9c:93:f3:90:1e:2c:ac:
a1:61:22:b8:c4:95:12:b2:05:22:4e:53:d2:08:35:1c:0e:06:
99:4f:e2:d6:0a:35:41:4d:39:6e:56:93:27:f1:f8:a3:d6:83:
78:36:70:84:8d:08:ad:ad:15:b6:d9:7a:96:cb:a1:8e:1a:94:
cc:70:a4:ff:7e:c7:c0:38:ab:62:2a:96:f0:bb:68:60:1e:2f:
a2:53:36:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:17:02 2025 by rpki-client