Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
File: W8KZyUmzraue-TUmM_zsw7cr1Rg.mft (raw, json)
Hash identifier: g2WDeNQe/IMpL12joHXOnczwLAv9tGe2shPHOd05Msw=
Subject key identifier: FD:52:1B:68:7F:57:17:0B:C3:98:84:80:6B:20:66:EA:EA:DF:ED:32
Authority key identifier: 5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
Certificate issuer: /CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Certificate serial: 019847E512BB0C0B19D035DAAADED4521766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
Manifest number: 1310
Signing time: Sat 26 Jul 2025 18:00:51 +0000
Manifest this update: Sat 26 Jul 2025 18:00:51 +0000
Manifest next update: Sun 27 Jul 2025 18:00:51 +0000
Files and hashes: 1: W8KZyUmzraue-TUmM_zsw7cr1Rg.crl (hash: Q/tG+IFBzLLK8m55VhmJMSuLawdaaJJnk8ucAQJj+MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:12:bb:0c:0b:19:d0:35:da:aa:de:d4:52:17:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Validity
Not Before: Jul 26 18:00:51 2025 GMT
Not After : Jul 27 18:00:51 2025 GMT
Subject: CN=fd521b687f57170bc39884806b2066eaeadfed32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:05:cb:21:fc:db:7e:e3:9a:e0:8f:8d:36:
98:c2:89:01:6d:cd:dd:14:32:99:21:f0:20:ce:a6:
f2:bf:6b:a1:4e:83:28:9a:fc:2a:59:ab:a3:82:53:
d8:f9:77:ed:c4:6d:4f:55:41:5f:6e:60:39:e6:96:
00:7d:84:40:25:46:7f:1f:d0:92:52:78:36:48:ef:
12:b1:71:30:58:28:f2:bd:c0:cd:92:a3:41:a2:6f:
31:ce:0c:95:b2:1b:2a:ed:03:26:16:63:c8:f8:b1:
a9:81:33:55:bf:31:3d:64:f7:7e:ba:b1:1f:e9:f2:
4c:64:93:b3:8e:e5:41:f2:64:f7:61:26:20:46:82:
9d:9d:00:93:94:f9:37:89:3c:fe:4d:aa:96:b2:ce:
ca:0b:7f:d7:87:9a:1c:04:6a:a9:38:d6:10:bc:ec:
b1:e8:a5:4d:a5:aa:f8:b1:9c:ff:bc:ee:10:d9:61:
8a:da:67:ba:70:ef:3e:70:f9:98:f7:d9:70:48:09:
c4:7e:22:99:9d:62:d9:0f:0a:bf:bf:4e:06:b0:ce:
4d:cf:84:bf:01:52:bb:0e:74:64:64:21:96:0c:b0:
8a:93:a8:af:22:10:ba:57:d6:7a:0e:5a:80:48:37:
d1:3f:6d:e4:d2:13:4c:f2:49:a2:d8:80:90:8e:57:
f1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:52:1B:68:7F:57:17:0B:C3:98:84:80:6B:20:66:EA:EA:DF:ED:32
X509v3 Authority Key Identifier:
keyid:5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:1a:c9:04:87:18:a3:51:37:aa:39:6b:8f:6d:dc:21:05:a3:
b1:7a:ba:33:85:6b:9c:8c:41:ef:fc:96:9d:0a:79:48:c1:3d:
cb:1c:17:9d:08:9c:96:69:92:55:7f:71:36:d0:ac:a7:84:c3:
14:97:19:7d:d8:6f:10:88:aa:ab:91:c6:5b:50:3a:a2:07:31:
85:32:46:d7:c7:87:2a:6b:bf:0d:3d:29:69:6e:9e:02:f1:89:
ec:0e:24:6a:32:e6:e1:f4:cd:3a:6c:2f:f0:07:9f:d5:ca:fd:
de:05:c0:ac:77:2b:29:52:a2:db:36:e5:e9:ac:fb:46:03:2d:
8b:08:90:02:2e:a2:32:25:4a:4e:eb:70:53:a3:52:58:70:04:
4f:d0:59:24:52:06:7e:0b:70:53:d7:39:df:52:d1:f7:29:b5:
8f:33:d9:f6:22:b9:e2:6a:09:f6:9d:10:5b:53:bb:be:b0:91:
8f:f6:30:63:da:88:87:ad:25:62:81:c2:f7:61:87:bd:e2:7b:
09:35:ed:78:01:49:d3:f1:40:2c:66:24:f1:e3:43:cf:15:36:
1e:aa:06:ff:3a:70:5f:7a:e9:65:31:7b:ec:3e:29:d4:0b:99:
cd:99:d6:16:9b:7e:01:b2:17:fb:42:23:dc:04:04:1e:49:23:
b2:01:89:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5RK7DAsZ0DXaqt7UUhdmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYzI5OWM5NDliM2FkYWI5ZWY5MzUyNjMzZmNlY2MzYjcy
YmQ1MTgwHhcNMjUwNzI2MTgwMDUxWhcNMjUwNzI3MTgwMDUxWjAzMTEwLwYDVQQD
EyhmZDUyMWI2ODdmNTcxNzBiYzM5ODg0ODA2YjIwNjZlYWVhZGZlZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7YFyyH8237jmuCPjTaYwokBbc3d
FDKZIfAgzqbyv2uhToMomvwqWaujglPY+XftxG1PVUFfbmA55pYAfYRAJUZ/H9CS
Ung2SO8SsXEwWCjyvcDNkqNBom8xzgyVshsq7QMmFmPI+LGpgTNVvzE9ZPd+urEf
6fJMZJOzjuVB8mT3YSYgRoKdnQCTlPk3iTz+TaqWss7KC3/Xh5ocBGqpONYQvOyx
6KVNpar4sZz/vO4Q2WGK2me6cO8+cPmY99lwSAnEfiKZnWLZDwq/v04GsM5Nz4S/
AVK7DnRkZCGWDLCKk6ivIhC6V9Z6DlqASDfRP23k0hNM8kmi2ICQjlfxFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1SG2h/VxcLw5iEgGsgZurq3+0yMB8GA1UdIwQY
MBaAFFvCmclJs62rnvk1JjP87MO3K9UYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzhLWnlVbXpyYXVlLVRVbU1fenN3N2NyMVJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYjU2MjctZDYyNy00MTYxLWEyYjMt
OWQyNWMzMzQ5ZDExLzEvVzhLWnlVbXpyYXVlLVRVbU1fenN3N2NyMVJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iYjU2MjctZDYyNy00MTYxLWEyYjMtOWQyNWMzMzQ5ZDEx
LzEvVzhLWnlVbXpyYXVlLVRVbU1fenN3N2NyMVJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2RrJBIcY
o1E3qjlrj23cIQWjsXq6M4VrnIxB7/yWnQp5SME9yxwXnQiclmmSVX9xNtCsp4TD
FJcZfdhvEIiqq5HGW1A6ogcxhTJG18eHKmu/DT0paW6eAvGJ7A4kajLm4fTNOmwv
8Aef1cr93gXArHcrKVKi2zbl6az7RgMtiwiQAi6iMiVKTutwU6NSWHAET9BZJFIG
fgtwU9c531LR9ym1jzPZ9iK54moJ9p0QW1O7vrCRj/YwY9qIh60lYoHC92GHveJ7
CTXteAFJ0/FALGYk8eNDzxU2HqoG/zpwX3rpZTF77D4p1AuZzZnWFpt+AbIX+0Ij
3AQEHkkjsgGJ2Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:55:04 2025 by rpki-client