Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
File: W8KZyUmzraue-TUmM_zsw7cr1Rg.mft (raw, json)
Hash identifier: zdXMjKxi9F2tT89gGYNAflFPutcQ1gCJl26AGQahhto=
Subject key identifier: 88:5F:CA:79:F2:FD:0B:69:B1:75:77:D6:3A:52:D6:16:E3:B3:22:C5
Authority key identifier: 5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
Certificate issuer: /CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Certificate serial: 019A72266EB2F3CB237E560135FCCFB9D252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
Manifest number: 142F
Signing time: Tue 11 Nov 2025 09:01:52 +0000
Manifest this update: Tue 11 Nov 2025 09:01:52 +0000
Manifest next update: Wed 12 Nov 2025 09:01:52 +0000
Files and hashes: 1: W8KZyUmzraue-TUmM_zsw7cr1Rg.crl (hash: uysjTowczEQ31LX3RRNtVCXog99zoGUw/N/u51AUqSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6e:b2:f3:cb:23:7e:56:01:35:fc:cf:b9:d2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Validity
Not Before: Nov 11 09:01:52 2025 GMT
Not After : Nov 12 09:01:52 2025 GMT
Subject: CN=885fca79f2fd0b69b17577d63a52d616e3b322c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:d3:88:72:41:f2:02:3b:43:89:4e:50:3b:
42:7e:76:f0:78:5c:1d:6a:0e:e7:e4:6f:71:d7:08:
7b:87:d6:80:f8:8b:e0:20:dc:de:43:50:42:0e:94:
32:c3:2a:61:50:f5:ef:1a:32:5a:ab:cf:30:a9:56:
a4:5c:c7:a7:dd:f4:8b:a6:e3:d0:43:c9:20:e9:98:
c8:29:a7:c3:7e:a4:a0:c1:8f:72:90:a9:d3:77:14:
4c:cc:da:20:42:bd:0a:6e:60:d0:f8:ce:a9:cf:36:
e6:77:6d:b6:f1:e9:e7:05:11:87:82:36:d8:04:80:
4f:8a:95:e0:1d:37:13:f9:87:43:21:1c:64:d6:74:
94:44:ad:1d:57:cb:54:31:93:f4:e6:a3:d3:37:b4:
cf:64:31:8a:9f:df:be:20:75:00:69:87:00:15:52:
4b:2b:0c:52:20:43:50:47:af:8d:35:e2:49:8a:cd:
a4:a9:98:23:6a:af:0e:6f:99:4c:93:07:7e:d8:97:
55:a3:5b:30:33:ea:40:25:7c:51:69:3d:49:80:f9:
e6:0a:22:8f:50:39:88:58:8c:43:5b:73:1b:a3:4b:
4e:18:48:77:71:04:3f:e5:b8:88:5b:4a:a0:d8:74:
1a:17:a9:48:50:fd:6c:7c:84:49:57:57:61:c8:16:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5F:CA:79:F2:FD:0B:69:B1:75:77:D6:3A:52:D6:16:E3:B3:22:C5
X509v3 Authority Key Identifier:
keyid:5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:73:73:a2:fd:10:b3:3c:8e:1f:44:02:21:04:33:4b:a5:09:
45:11:56:5f:e1:48:cd:9c:5f:28:c7:e9:96:aa:59:a6:5e:d0:
a8:d1:e1:6a:a2:9a:12:8e:45:f8:b1:8a:5c:aa:34:88:c3:da:
dc:7a:44:6e:17:ed:59:61:f3:73:db:f4:9f:61:90:7f:89:40:
8c:0e:bd:ef:68:a1:9e:16:15:eb:39:26:9b:7b:a3:17:b1:d7:
63:c1:48:dc:7d:92:df:5b:81:b4:c6:ff:17:50:17:c3:d8:d4:
e7:cb:b0:ef:b3:fe:fb:92:9d:ce:b6:f1:c2:09:02:7d:06:87:
0f:dc:36:05:49:25:37:bd:89:30:a1:f4:92:df:f7:74:5e:3e:
66:e9:70:aa:f6:8f:07:e3:48:06:08:da:5d:c4:63:dc:7a:58:
d2:ca:5e:10:25:2a:f3:4d:f8:56:58:3d:9b:01:c4:f6:bc:09:
85:93:f3:85:98:08:8f:ae:4a:64:98:d9:d2:d7:ea:b4:23:76:
85:4d:be:f7:4d:99:28:2a:31:1a:e9:37:93:40:fe:84:65:82:
b1:b7:2e:98:1d:62:92:11:ed:90:6f:ff:96:fd:2a:a6:c9:b4:
ea:47:69:63:2b:86:09:4e:82:19:8f:00:48:0f:9f:26:bd:09:
01:48:64:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJm6y88sjflYBNfzPudJSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYzI5OWM5NDliM2FkYWI5ZWY5MzUyNjMzZmNlY2MzYjcy
YmQ1MTgwHhcNMjUxMTExMDkwMTUyWhcNMjUxMTEyMDkwMTUyWjAzMTEwLwYDVQQD
Eyg4ODVmY2E3OWYyZmQwYjY5YjE3NTc3ZDYzYTUyZDYxNmUzYjMyMmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvPTiHJB8gI7Q4lOUDtCfnbweFwd
ag7n5G9x1wh7h9aA+IvgINzeQ1BCDpQywyphUPXvGjJaq88wqVakXMen3fSLpuPQ
Q8kg6ZjIKafDfqSgwY9ykKnTdxRMzNogQr0KbmDQ+M6pzzbmd2228ennBRGHgjbY
BIBPipXgHTcT+YdDIRxk1nSURK0dV8tUMZP05qPTN7TPZDGKn9++IHUAaYcAFVJL
KwxSIENQR6+NNeJJis2kqZgjaq8Ob5lMkwd+2JdVo1swM+pAJXxRaT1JgPnmCiKP
UDmIWIxDW3Mbo0tOGEh3cQQ/5biIW0qg2HQaF6lIUP1sfIRJV1dhyBaOHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhfynny/QtpsXV31jpS1hbjsyLFMB8GA1UdIwQY
MBaAFFvCmclJs62rnvk1JjP87MO3K9UYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzhLWnlVbXpyYXVlLVRVbU1fenN3N2NyMVJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYjU2MjctZDYyNy00MTYxLWEyYjMt
OWQyNWMzMzQ5ZDExLzEvVzhLWnlVbXpyYXVlLVRVbU1fenN3N2NyMVJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iYjU2MjctZDYyNy00MTYxLWEyYjMtOWQyNWMzMzQ5ZDEx
LzEvVzhLWnlVbXpyYXVlLVRVbU1fenN3N2NyMVJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXNzov0Q
szyOH0QCIQQzS6UJRRFWX+FIzZxfKMfplqpZpl7QqNHhaqKaEo5F+LGKXKo0iMPa
3HpEbhftWWHzc9v0n2GQf4lAjA6972ihnhYV6zkmm3ujF7HXY8FI3H2S31uBtMb/
F1AXw9jU58uw77P++5KdzrbxwgkCfQaHD9w2BUklN72JMKH0kt/3dF4+ZulwqvaP
B+NIBgjaXcRj3HpY0speECUq8034Vlg9mwHE9rwJhZPzhZgIj65KZJjZ0tfqtCN2
hU2+902ZKCoxGuk3k0D+hGWCsbcumB1ikhHtkG//lv0qpsm06kdpYyuGCU6CGY8A
SA+fJr0JAUhkPA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:19 2025 by rpki-client