Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
File: WSh1E_SesUCO5BsoHIsnczB6iRA.mft (raw, json)
Hash identifier: NRiRb/TxOEws7HcAP4F7tS/aAQB7G1NAQJILzUr5StQ=
Subject key identifier: C6:E7:F5:13:56:05:39:E5:B6:D5:4C:FC:09:51:16:A9:86:01:1D:22
Authority key identifier: 59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10
Certificate issuer: /CN=59287513f49eb1408ee41b281c8b2773307a8910
Certificate serial: 019A72258E3FE0C9386551FE0AB42618A9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: WSh1E_SesUCO5BsoHIsnczB6iRA.crl (hash: AoIImQCZPKu4FUQm2Gdb6mpIbd/B5vcx8rM7rk+kPfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8e:3f:e0:c9:38:65:51:fe:0a:b4:26:18:a9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59287513f49eb1408ee41b281c8b2773307a8910
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=c6e7f513560539e5b6d54cfc095116a986011d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9d:6a:de:0b:14:1d:f8:ee:0e:b0:66:05:4a:
10:a6:07:50:24:32:7f:87:c5:d4:68:8f:5b:87:46:
a8:2f:5a:d3:87:0e:97:90:b2:ad:92:df:11:e8:cc:
17:90:b0:5c:cc:c2:a9:66:ab:b1:57:0a:af:0e:2a:
bc:1a:9c:4a:ed:f8:26:d4:14:71:0e:00:db:61:8a:
4d:3e:51:0e:2f:42:3d:d3:d9:05:e1:3f:98:da:99:
c8:44:7d:82:25:25:d3:ac:1c:43:93:ba:6b:17:39:
fe:87:c4:ad:30:b6:7a:85:11:35:ce:80:fe:e6:4d:
11:75:13:f4:7e:d0:76:53:40:3e:da:a0:81:8d:72:
e2:6f:ac:7f:ca:e1:d6:83:da:f6:49:9d:76:3f:11:
0b:2b:00:75:9f:ca:3c:f7:2b:93:b8:80:6a:d4:18:
91:4f:74:59:f2:1e:91:be:78:cb:fe:37:0c:13:fa:
2f:8b:1d:c7:10:c3:12:f0:0b:11:de:80:4a:1a:dd:
f6:3b:a1:b1:38:07:1e:08:3e:43:56:30:63:45:03:
e7:3a:db:80:ab:12:f2:3c:e9:67:b8:84:7a:ee:27:
30:aa:28:70:ae:13:e8:66:17:92:67:33:fc:4e:b9:
94:74:13:59:ef:a1:cc:e1:09:5d:62:73:41:02:c2:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E7:F5:13:56:05:39:E5:B6:D5:4C:FC:09:51:16:A9:86:01:1D:22
X509v3 Authority Key Identifier:
keyid:59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0c:70:2b:38:b4:6e:5a:d0:11:0d:7b:47:16:82:2d:e5:96:
c1:bd:e7:10:cc:88:62:a1:c8:0e:48:43:6a:51:9d:48:3c:80:
23:3e:85:52:ab:b8:71:01:a8:a2:e1:77:d0:e3:51:32:f0:01:
e5:71:e6:de:dc:5d:14:b1:6b:a0:58:bd:e4:d4:bb:a4:2d:c7:
fb:5c:5b:55:b1:6d:a4:6c:56:14:76:95:f0:30:29:a2:fb:71:
0e:d7:ab:97:aa:39:31:c4:00:7f:f5:4a:2b:6a:93:d4:26:65:
7e:a2:e5:36:c4:35:a4:ef:0d:7d:ff:4b:24:80:b1:0a:ec:d8:
7e:bb:c8:38:e1:b0:fb:fa:10:1a:05:00:73:0b:c2:d4:39:48:
72:da:59:7d:9a:da:d4:74:67:ba:ba:56:68:2a:79:36:a0:dd:
a2:06:1e:87:f7:ab:86:69:0c:96:1f:9a:ec:1d:7d:fc:35:15:
eb:a9:97:f0:ba:76:32:d4:f0:2d:5c:f5:2b:07:ab:9f:6c:4f:
74:56:5d:b6:22:f6:a3:db:77:56:d0:9c:69:61:11:f3:e4:10:
1e:74:00:fb:68:f0:87:02:b6:bc:5b:54:fd:f0:eb:66:37:7a:
76:65:c2:fc:0a:a5:60:9a:48:74:61:e3:76:23:5a:b3:80:97:
d7:a1:58:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJY4/4Mk4ZVH+CrQmGKnGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5Mjg3NTEzZjQ5ZWIxNDA4ZWU0MWIyODFjOGIyNzczMzA3
YTg5MTAwHhcNMjUxMTExMDkwMDU0WhcNMjUxMTEyMDkwMDU0WjAzMTEwLwYDVQQD
EyhjNmU3ZjUxMzU2MDUzOWU1YjZkNTRjZmMwOTUxMTZhOTg2MDExZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p1q3gsUHfjuDrBmBUoQpgdQJDJ/
h8XUaI9bh0aoL1rThw6XkLKtkt8R6MwXkLBczMKpZquxVwqvDiq8GpxK7fgm1BRx
DgDbYYpNPlEOL0I909kF4T+Y2pnIRH2CJSXTrBxDk7prFzn+h8StMLZ6hRE1zoD+
5k0RdRP0ftB2U0A+2qCBjXLib6x/yuHWg9r2SZ12PxELKwB1n8o89yuTuIBq1BiR
T3RZ8h6RvnjL/jcME/ovix3HEMMS8AsR3oBKGt32O6GxOAceCD5DVjBjRQPnOtuA
qxLyPOlnuIR67icwqihwrhPoZheSZzP8TrmUdBNZ76HM4QldYnNBAsKAPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbn9RNWBTnlttVM/AlRFqmGAR0iMB8GA1UdIwQY
MBaAFFkodRP0nrFAjuQbKByLJ3MweokQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1NoMUVfU2VzVUNPNUJzb0hJc25jekI2aVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84OTUxMTctYTBmOC00MTQ1LWJkYWEt
ODhjZWMyZjk1NTEzLzEvV1NoMUVfU2VzVUNPNUJzb0hJc25jekI2aVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84OTUxMTctYTBmOC00MTQ1LWJkYWEtODhjZWMyZjk1NTEz
LzEvV1NoMUVfU2VzVUNPNUJzb0hJc25jekI2aVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwxwKzi0
blrQEQ17RxaCLeWWwb3nEMyIYqHIDkhDalGdSDyAIz6FUqu4cQGoouF30ONRMvAB
5XHm3txdFLFroFi95NS7pC3H+1xbVbFtpGxWFHaV8DApovtxDterl6o5McQAf/VK
K2qT1CZlfqLlNsQ1pO8Nff9LJICxCuzYfrvIOOGw+/oQGgUAcwvC1DlIctpZfZra
1HRnurpWaCp5NqDdogYeh/erhmkMlh+a7B19/DUV66mX8Lp2MtTwLVz1Kwern2xP
dFZdtiL2o9t3VtCcaWER8+QQHnQA+2jwhwK2vFtU/fDrZjd6dmXC/AqlYJpIdGHj
diNas4CX16FYQg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:11 2025 by rpki-client