Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
File: WVUSBp5lxZCALs5b972H5muPNdM.mft (raw, json)
Hash identifier: gjH811s9GQs6DHZHeMPV4yq3dc6FX1UeMn3LGyfictg=
Subject key identifier: F7:BE:5B:A1:3C:87:1C:A4:42:0E:18:B8:0E:36:FF:1E:4E:B6:B1:A5
Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
Certificate issuer: /CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Certificate serial: 019A725C389BB9363AFE927E4DA8EF50CF60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
Manifest number: 05E7
Signing time: Tue 11 Nov 2025 10:00:37 +0000
Manifest this update: Tue 11 Nov 2025 10:00:37 +0000
Manifest next update: Wed 12 Nov 2025 10:00:37 +0000
Files and hashes: 1: WVUSBp5lxZCALs5b972H5muPNdM.crl (hash: GgVxelhYyd0oVS5G54SJa87vcbXUPa7Pz8Yf4TdVpgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:38:9b:b9:36:3a:fe:92:7e:4d:a8:ef:50:cf:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Validity
Not Before: Nov 11 10:00:37 2025 GMT
Not After : Nov 12 10:00:37 2025 GMT
Subject: CN=f7be5ba13c871ca4420e18b80e36ff1e4eb6b1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:63:09:ef:bb:33:44:1c:25:43:34:4e:7a:
c1:2e:b5:89:ea:f6:68:cb:4c:2d:18:8a:78:f9:0c:
1d:90:82:2f:28:fb:f9:51:94:00:fc:35:e5:e3:e6:
fc:3f:e7:4b:98:7c:88:c4:31:46:f1:6c:b6:81:ef:
b4:86:7a:97:d3:5d:17:af:9b:1c:d1:4b:9f:ed:0f:
f5:0d:56:ab:a9:dc:cb:19:82:47:4d:87:89:ff:1e:
4b:01:3f:aa:fa:d3:c4:6a:d5:68:d4:bd:19:92:c3:
72:3c:04:98:e8:41:40:34:b4:4f:a1:75:d6:33:f1:
5a:18:cd:11:a2:eb:76:20:9c:c5:10:57:69:15:53:
eb:6d:6d:14:50:01:b5:df:01:69:c4:fb:2c:7d:ec:
eb:70:90:3e:37:ff:5f:7e:9c:d9:ee:f2:4f:40:18:
1d:04:bc:c9:cf:3c:4f:64:e7:a1:aa:1b:3f:00:d0:
56:dd:e7:6f:5a:b7:74:33:ad:df:ef:5f:76:09:bb:
e4:02:7e:a4:de:80:77:ac:0f:57:d0:4e:bc:a4:e5:
1a:4c:47:87:5f:b7:f0:1e:6f:a4:19:6e:d0:89:34:
88:e1:9a:28:30:76:06:83:8a:65:4f:2f:c0:3a:f8:
18:1f:e4:a5:1b:ed:8f:0e:5c:a9:72:32:8d:b8:7c:
8f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BE:5B:A1:3C:87:1C:A4:42:0E:18:B8:0E:36:FF:1E:4E:B6:B1:A5
X509v3 Authority Key Identifier:
keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a3:13:b7:1e:0b:0c:89:b0:62:57:be:c4:53:e7:27:32:ae:
e4:00:56:b7:c4:73:87:92:b2:a0:d7:f8:c6:5b:0d:42:a5:4f:
65:e2:c7:34:72:6d:e4:18:6c:84:8b:36:22:de:f5:3e:32:48:
13:b6:f0:cc:55:23:b7:33:46:52:78:d7:9f:96:d7:06:5c:21:
9c:f2:e6:2d:f8:ff:6b:69:e0:99:48:74:b4:3c:f8:d0:ef:03:
55:1a:b2:d6:7f:91:c8:00:be:05:68:45:e0:71:38:86:7f:43:
94:2e:83:aa:9c:a9:3a:41:05:3c:9d:7c:1a:2c:26:39:dc:7a:
5c:e9:0a:2d:37:5c:4e:0f:23:48:bc:eb:86:82:8c:b5:97:c4:
b7:8a:a7:9a:14:43:f8:2e:1f:9d:a5:a9:1f:3b:e8:0b:30:70:
e2:6e:ed:8b:f6:51:5e:03:de:c9:70:49:a1:7d:a0:d3:08:cc:
36:57:ce:2f:ab:5c:ae:b5:01:89:c0:29:af:5b:ce:03:48:05:
f0:fb:05:86:01:76:0f:4d:76:80:ce:25:11:f6:83:17:e7:ed:
dc:29:05:61:98:86:82:21:8f:20:33:88:54:69:3c:c4:04:70:
36:bd:5f:25:67:2f:cd:7d:9e:1a:00:53:2b:84:c2:57:f5:7d:
52:3c:2c:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXDibuTY6/pJ+TajvUM9gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NTUxMjA2OWU2NWM1OTA4MDJlY2U1YmY3YmQ4N2U2NmI4
ZjM1ZDMwHhcNMjUxMTExMTAwMDM3WhcNMjUxMTEyMTAwMDM3WjAzMTEwLwYDVQQD
EyhmN2JlNWJhMTNjODcxY2E0NDIwZTE4YjgwZTM2ZmYxZTRlYjZiMWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMNjCe+7M0QcJUM0TnrBLrWJ6vZo
y0wtGIp4+QwdkIIvKPv5UZQA/DXl4+b8P+dLmHyIxDFG8Wy2ge+0hnqX010Xr5sc
0Uuf7Q/1DVarqdzLGYJHTYeJ/x5LAT+q+tPEatVo1L0ZksNyPASY6EFANLRPoXXW
M/FaGM0Rout2IJzFEFdpFVPrbW0UUAG13wFpxPssfezrcJA+N/9ffpzZ7vJPQBgd
BLzJzzxPZOehqhs/ANBW3edvWrd0M63f7192CbvkAn6k3oB3rA9X0E68pOUaTEeH
X7fwHm+kGW7QiTSI4ZooMHYGg4plTy/AOvgYH+SlG+2PDlypcjKNuHyPXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPe+W6E8hxykQg4YuA42/x5OtrGlMB8GA1UdIwQY
MBaAFFlVEgaeZcWQgC7OW/e9h+ZrjzXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZVU0JwNWx4WkNBTHM1Yjk3Mkg1bXVQTmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xYmVkMTctNWUzMy00M2ExLWJiOGYt
NDNhNDNkYTkyODlhLzEvV1ZVU0JwNWx4WkNBTHM1Yjk3Mkg1bXVQTmRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8xYmVkMTctNWUzMy00M2ExLWJiOGYtNDNhNDNkYTkyODlh
LzEvV1ZVU0JwNWx4WkNBTHM1Yjk3Mkg1bXVQTmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqMTtx4L
DImwYle+xFPnJzKu5ABWt8Rzh5KyoNf4xlsNQqVPZeLHNHJt5BhshIs2It71PjJI
E7bwzFUjtzNGUnjXn5bXBlwhnPLmLfj/a2ngmUh0tDz40O8DVRqy1n+RyAC+BWhF
4HE4hn9DlC6DqpypOkEFPJ18GiwmOdx6XOkKLTdcTg8jSLzrhoKMtZfEt4qnmhRD
+C4fnaWpHzvoCzBw4m7ti/ZRXgPeyXBJoX2g0wjMNlfOL6tcrrUBicApr1vOA0gF
8PsFhgF2D012gM4lEfaDF+ft3CkFYZiGgiGPIDOIVGk8xARwNr1fJWcvzX2eGgBT
K4TCV/V9UjwsIQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:43 2025 by rpki-client