Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier: 6APG5viR+5np/m9nNdds4Zf+Lj/KR0i3p7E2IFqTNyo=
Subject key identifier: 76:C6:8C:EE:13:56:03:D4:3C:9E:9D:5E:0C:47:A0:D1:D3:4D:53:9A
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 019A4F621138461BF1C659AB347B80CF88C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 15:00:18 +0000
Manifest this update: Tue 04 Nov 2025 15:00:18 +0000
Manifest next update: Wed 05 Nov 2025 15:00:18 +0000
Files and hashes: 1: 9mv5BJvEaAqWoj8vH5r1xx_pFgo.roa (hash: IAS+DSX7WNtHYk4j+RDYn0qWAwRUWPxJ+A4Wt+jMAHQ=)
2: Jue_aw4zHx1sp-mJmowMMM2tGGA.roa (hash: 0Yitoumoz1xxoSRol/a1PWMjCmZIGDa9duJ/3vMhBiw=)
3: MpJGW61wsAY2na2GoCEJeo5HvXk.roa (hash: vRlmBz0iiqrk+J7PazbAwX0O6F7JU+iRJTTbiLqVjxU=)
4: PNxKt9EExJcdff8t4PlXHS3Zp8E.roa (hash: l/sm5m0RtWP1FamD6nvtIs4Wmty8En19TqcjOBknuMY=)
5: SNph92J-Xcf8IveNNNu0MkGJVWI.roa (hash: VJRwO2aW7uM1HccqCjhKGDaLckqIJFkhu3+W4SavOHw=)
6: U8yyp-JTHsc4PzNj0KNOVG9KECs.roa (hash: XL8cza6Y6dTsPDS6Eb2/zXU0zrVRVcGlEc/rkfzZaj0=)
7: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: vYnyyTewKV3+5nfg4zOIMakQFUthY21jSEiLjp2Fr/s=)
8: ve4iz1Nb8DcHS9BJwN65K0mM0-E.roa (hash: KrskrDJ9DRb/ge1dc1ifB8Oiho4jbO0ADnVg8CJqCCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:11:38:46:1b:f1:c6:59:ab:34:7b:80:cf:88:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Nov 4 15:00:18 2025 GMT
Not After : Nov 5 15:00:18 2025 GMT
Subject: CN=76c68cee135603d43c9e9d5e0c47a0d1d34d539a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:0c:2d:7f:c5:65:ed:6a:8c:b3:c2:94:b4:
7a:20:9e:47:c3:e6:93:68:bc:9c:28:d8:70:b7:b8:
9a:2c:d2:f5:e8:88:e5:b1:64:f8:d9:34:16:f6:95:
c9:f9:3a:1a:ba:f0:bf:cf:08:f8:fb:79:9f:27:e3:
ee:bb:76:47:91:d9:6e:cd:eb:9e:a7:f1:06:98:f8:
9c:b5:24:f0:cb:a4:b3:59:2f:ca:70:7d:15:44:8e:
d0:3c:18:d5:65:5b:d5:f7:e1:38:67:f0:15:65:11:
36:10:d8:a9:09:8c:d7:44:22:8c:be:f7:68:52:c1:
be:b7:63:16:18:0b:b7:5c:de:11:85:84:d9:d5:3a:
4b:06:db:a0:ce:12:1b:4b:01:33:db:84:6b:6e:6d:
6d:d9:35:c3:99:8a:dd:82:10:6f:f3:33:f2:9d:75:
88:6f:06:25:f1:0f:95:56:da:57:cd:76:df:38:5a:
41:0f:08:1b:c5:0a:ed:8c:c4:db:50:45:27:45:12:
b6:39:10:58:c3:cd:a0:10:32:7f:65:1b:91:95:80:
aa:a8:0b:9b:56:d4:29:f1:20:6e:2b:5f:59:74:d1:
96:95:e0:aa:68:bb:7c:a4:c7:07:b6:a1:73:cc:91:
55:51:1f:c7:e9:69:8b:28:94:d6:f3:53:90:f0:b1:
d1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C6:8C:EE:13:56:03:D4:3C:9E:9D:5E:0C:47:A0:D1:D3:4D:53:9A
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:77:e1:54:7c:41:d7:db:1d:58:9c:f3:48:27:14:86:7d:81:
f7:82:57:dd:df:6e:66:c4:ca:ef:da:84:56:87:61:c5:df:f2:
12:03:cb:34:64:7d:49:5c:64:2b:df:df:c3:de:d2:7d:ed:e7:
46:48:5a:ba:af:62:b6:c7:0c:ec:84:e7:1b:56:99:1d:76:83:
c2:be:d9:0f:89:04:70:a9:c6:3e:b4:27:28:b7:1f:6a:6a:40:
a1:0a:21:ee:ec:08:99:81:57:0b:7f:1c:39:be:73:49:17:0d:
e7:10:d0:2a:42:a3:e9:bb:0b:59:e1:96:85:2b:99:7b:d0:5a:
eb:b9:6a:9c:b9:5a:a7:f5:38:f9:a9:e7:14:cd:5b:16:80:6e:
5f:4e:8f:ee:c9:75:39:f9:b4:e1:ca:3b:a7:78:8b:8b:33:a1:
e9:38:92:ef:13:9d:d4:79:db:78:98:16:7f:db:fa:6a:f9:0c:
0d:e5:9a:6d:84:1b:7a:e5:ff:e6:2f:56:a3:2a:66:20:cd:e5:
53:a8:5d:22:f2:02:8e:df:20:36:00:36:0f:1e:ec:6f:ab:9e:
a4:1e:75:2b:08:b1:c9:88:71:15:c9:9f:8b:60:50:99:3b:7f:
54:4a:fb:eb:f4:2a:25:21:eb:bf:5d:f2:07:bb:1d:77:25:4a:
ba:58:37:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:18:07 2025 by rpki-client