Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
File: WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft (raw, json)
Hash identifier: B1AEZlxb4A4/nnn/oBC8ifPqTu+jkIzUiDIRCYlkRIU=
Subject key identifier: B6:F3:AC:E4:A6:79:F1:51:F9:23:AB:CD:47:18:15:06:F3:A5:62:EF
Authority key identifier: 5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
Certificate issuer: /CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Certificate serial: 019A5119EE125B8AFB25142617E9B660B4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
Manifest number: 136B
Signing time: Tue 04 Nov 2025 23:00:45 +0000
Manifest this update: Tue 04 Nov 2025 23:00:45 +0000
Manifest next update: Wed 05 Nov 2025 23:00:45 +0000
Files and hashes: 1: Oh-cQnXBc3lf8_SsKrCv90dr1do.roa (hash: /clQdBNjFo+DPpzGiAtMduHa7oP5zjEdGJ0IRP2uvgo=)
2: WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl (hash: eSdO54WxnXmmItAY6bn++jONa9MlRA1nj7kWiIo/+bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:ee:12:5b:8a:fb:25:14:26:17:e9:b6:60:b4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Validity
Not Before: Nov 4 23:00:45 2025 GMT
Not After : Nov 5 23:00:45 2025 GMT
Subject: CN=b6f3ace4a679f151f923abcd47181506f3a562ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:ba:92:b0:c2:c2:e2:ea:f4:fe:c3:09:e0:
2b:52:5d:6d:da:16:c3:81:5e:82:70:96:a3:fb:23:
09:e4:9b:10:bd:df:07:91:0e:55:cb:a6:0e:5d:3c:
06:47:b2:e2:51:fc:0e:c2:72:12:d0:75:e3:1b:32:
8b:81:36:5c:7a:99:18:cf:59:e4:02:15:08:c1:e8:
df:cf:3c:7d:c9:ca:fd:d6:6c:e1:f9:c7:0c:4a:9d:
24:88:a4:c4:55:e3:e1:07:df:b2:1c:b1:2c:14:89:
e2:d4:0d:fb:fa:d5:17:a1:a5:87:f6:3f:37:01:3a:
67:3e:a9:77:fb:e3:89:d9:27:93:3b:46:0b:db:80:
82:c9:24:95:a0:d3:e0:c6:13:4d:b5:84:cf:46:8b:
95:0b:88:68:f2:48:4f:00:40:03:e9:b8:10:29:84:
6d:c4:00:bb:fa:a0:6a:a3:15:e9:32:91:d6:6f:8f:
6c:51:ac:ad:39:55:a0:a2:79:a8:f3:ca:f1:28:e7:
6f:2b:e5:03:2d:d9:7a:e7:a3:49:2e:8a:c9:42:22:
ca:83:d2:85:75:59:51:9a:43:39:b4:2e:50:3d:3b:
e0:a7:0c:b0:ee:6e:15:18:05:a7:77:bf:f7:db:e0:
a1:f5:de:d5:e5:63:c6:39:ba:72:cb:72:d0:7a:52:
b6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F3:AC:E4:A6:79:F1:51:F9:23:AB:CD:47:18:15:06:F3:A5:62:EF
X509v3 Authority Key Identifier:
keyid:5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:bb:a5:2f:23:86:b1:33:ec:51:0f:59:76:09:62:55:0d:8f:
02:9e:58:a1:df:e3:94:2c:b3:f5:d7:be:4c:bf:37:4a:2b:8f:
d4:e5:fb:42:79:ff:e7:67:9f:1c:25:cf:9b:23:f3:34:19:d1:
3d:46:b6:77:7e:f7:2d:f4:a0:38:fe:74:8f:ec:c1:40:83:ac:
04:1f:63:f7:98:d4:4d:10:f9:4f:4e:89:21:3c:21:f7:73:7d:
ba:1f:98:c9:f2:e6:d8:43:00:3f:7b:64:ef:b3:c1:e8:fa:92:
20:b7:fe:90:6b:dd:73:ee:7b:1d:26:bc:2e:e1:25:6d:3b:1b:
3f:e5:3e:16:42:16:2d:da:a1:6d:c5:c4:8b:dd:e0:c0:8e:24:
51:51:67:60:17:0b:21:72:30:e9:c6:dc:6e:55:57:7a:50:94:
8f:eb:56:d3:b0:b9:74:05:f7:c5:81:19:07:d6:cb:1d:2e:64:
91:72:c6:f2:79:77:96:82:95:b9:dc:ac:50:8c:99:36:d2:92:
3d:9b:6a:7e:2d:aa:17:fa:3b:45:7c:de:d6:fa:dc:25:f4:cc:
3c:b6:df:6a:5b:22:64:62:8e:1d:21:d3:6e:c4:2a:12:4a:eb:
68:ed:13:1d:a8:ae:33:e0:28:85:c9:0e:4c:07:13:c5:86:5c:
72:01:83:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:05:03 2025 by rpki-client