Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
File: WsPivbYyltXw86_pW9FUURelsUk.mft (raw, json)
Hash identifier: o05T4SV4/rxqZG63TBVEXb+h+NBJYwi7UZZvueY15R4=
Subject key identifier: 88:28:2C:C1:FB:5E:E4:B2:34:71:F9:AD:E9:23:2F:C9:0A:CF:10:96
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Certificate issuer: /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial: 019A06DB0D4ED0D101214DF5FBA29C27E1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
Manifest number: 111F
Signing time: Tue 21 Oct 2025 13:00:10 +0000
Manifest this update: Tue 21 Oct 2025 13:00:10 +0000
Manifest next update: Wed 22 Oct 2025 13:00:10 +0000
Files and hashes: 1: WsPivbYyltXw86_pW9FUURelsUk.crl (hash: y8QS2PGdgbrnlC5OpEF/a+z/EWo+FiYsZqfiVb+YcsQ=)
2: Y1iDW0v_VjcE4OMZE6xW26RRBS8.roa (hash: +eewpgaXa+H5fZW2StNgdbfGXtL6pcCIZkhxs3pPHow=)
3: _3l5IDn3xoKCx9gk6CDmJc9PemQ.roa (hash: tAGS+HxIOTgQB55lROqPB0hTI4bw3qpbmFTzCC9BoS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:db:0d:4e:d0:d1:01:21:4d:f5:fb:a2:9c:27:e1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Validity
Not Before: Oct 21 13:00:10 2025 GMT
Not After : Oct 22 13:00:10 2025 GMT
Subject: CN=88282cc1fb5ee4b23471f9ade9232fc90acf1096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3c:3a:db:ad:56:bb:3f:dd:d8:ac:58:88:77:
46:d7:db:e8:39:81:b1:23:ad:55:2e:6d:01:cb:01:
21:bd:89:1a:fb:f6:32:13:a6:8a:26:1b:26:b6:3e:
f2:37:a6:d1:f5:54:e6:84:27:0f:8c:54:ef:23:54:
fc:c5:08:8c:12:85:c9:d6:d8:dd:92:d3:21:af:bc:
a1:ab:03:cb:f3:6f:2a:0b:66:a5:a4:53:40:78:fb:
e1:d9:b3:5d:a7:d7:38:67:fa:b2:31:c3:79:77:f0:
1f:09:a9:76:c4:46:5e:63:12:df:88:ec:7a:5e:67:
9c:f5:12:c0:57:55:de:f5:42:b6:2f:d0:2d:7c:be:
71:e8:6b:bd:38:0d:54:a0:e0:4e:21:ba:98:9d:76:
c7:c5:86:d1:1d:b3:a3:96:98:d5:1b:a4:a9:37:1d:
74:27:a2:06:3d:40:50:86:1e:11:88:88:34:a7:e8:
3b:17:af:6d:c3:3a:58:94:9d:e9:b5:85:cd:03:82:
a1:07:43:7a:a0:a1:57:f5:82:8e:5f:e9:1d:5f:2c:
6d:12:bd:c4:ba:2c:07:ff:78:5c:77:a2:10:88:60:
74:eb:da:40:7b:7d:47:dc:0b:c1:f2:78:f7:ac:18:
fa:f4:e1:2c:e8:5c:6d:cb:90:68:39:15:15:2c:33:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:28:2C:C1:FB:5E:E4:B2:34:71:F9:AD:E9:23:2F:C9:0A:CF:10:96
X509v3 Authority Key Identifier:
keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6f:8b:39:23:3f:2b:d0:b7:44:7f:d6:fc:75:25:4d:68:24:
b1:4f:92:fb:ba:ab:a4:f0:2f:07:d2:6d:1b:60:1a:d0:e9:c1:
21:e2:e1:27:4e:c7:af:f2:d9:da:15:03:80:66:73:ff:5b:11:
76:b7:69:e4:2c:2d:41:e7:32:c3:01:76:27:c0:fc:f4:78:68:
d3:fc:1f:88:5a:61:82:4c:1a:9f:79:16:a7:f7:d7:d5:43:b7:
5f:9f:dd:76:e2:0a:b7:5b:71:d6:15:b0:e4:86:0c:bf:93:a8:
85:2c:08:00:a4:ee:9b:ed:8c:e1:93:ef:59:ab:11:0d:36:5f:
c9:bf:cb:a4:9f:69:1c:41:d3:8b:e6:2f:0a:43:bd:66:0e:5e:
fa:f0:b7:1d:81:91:e6:6e:1a:1c:46:fc:d2:4a:e3:af:6c:73:
03:6a:c7:b2:df:38:9e:26:c6:5c:61:e0:9b:d8:ef:77:34:96:
00:b2:ba:98:e2:3d:ad:da:1b:13:13:6e:76:51:3f:9c:23:ea:
59:68:7a:da:a8:8e:15:ab:b5:e4:dc:30:6d:5c:cf:fc:5d:b8:
c2:a7:e2:e3:8c:07:9c:c4:0a:22:ac:7c:a7:1b:ae:cc:34:8c:
df:b1:7c:22:40:4b:29:3d:de:2d:b5:06:ad:be:c4:17:0f:72:
92:51:7e:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoG2w1O0NEBIU31+6KcJ+GgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzNlMmJkYjYzMjk2ZDVmMGYzYWZlOTViZDE1NDUxMTdh
NWIxNDkwHhcNMjUxMDIxMTMwMDEwWhcNMjUxMDIyMTMwMDEwWjAzMTEwLwYDVQQD
Eyg4ODI4MmNjMWZiNWVlNGIyMzQ3MWY5YWRlOTIzMmZjOTBhY2YxMDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jw6261Wuz/d2KxYiHdG19voOYGx
I61VLm0BywEhvYka+/YyE6aKJhsmtj7yN6bR9VTmhCcPjFTvI1T8xQiMEoXJ1tjd
ktMhr7yhqwPL828qC2alpFNAePvh2bNdp9c4Z/qyMcN5d/AfCal2xEZeYxLfiOx6
Xmec9RLAV1Xe9UK2L9AtfL5x6Gu9OA1UoOBOIbqYnXbHxYbRHbOjlpjVG6SpNx10
J6IGPUBQhh4RiIg0p+g7F69twzpYlJ3ptYXNA4KhB0N6oKFX9YKOX+kdXyxtEr3E
uiwH/3hcd6IQiGB069pAe31H3AvB8nj3rBj69OEs6Fxty5BoORUVLDOaiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgoLMH7XuSyNHH5rekjL8kKzxCWMB8GA1UdIwQY
MBaAFFrD4r22MpbV8POv6VvRVFEXpbFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iZTA3MTUtM2JiMi00NGY0LWJiZjYt
MjQwNjk4ZmJkZGZmLzEvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iZTA3MTUtM2JiMi00NGY0LWJiZjYtMjQwNjk4ZmJkZGZm
LzEvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPG+LOSM/
K9C3RH/W/HUlTWgksU+S+7qrpPAvB9JtG2Aa0OnBIeLhJ07Hr/LZ2hUDgGZz/1sR
drdp5CwtQecywwF2J8D89Hho0/wfiFphgkwan3kWp/fX1UO3X5/dduIKt1tx1hWw
5IYMv5OohSwIAKTum+2M4ZPvWasRDTZfyb/LpJ9pHEHTi+YvCkO9Zg5e+vC3HYGR
5m4aHEb80krjr2xzA2rHst84nibGXGHgm9jvdzSWALK6mOI9rdobExNudlE/nCPq
WWh62qiOFau15NwwbVzP/F24wqfi44wHnMQKIqx8pxuuzDSM37F8IkBLKT3eLbUG
rb7EFw9yklF+Bg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 22:53:15 2025 by rpki-client