Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
File: W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft (raw, json)
Hash identifier: x7aDfg2zsLxxEsDih31ZxdWCJR/JcOqgX8hzb0S4Uak=
Subject key identifier: C2:33:87:CD:3A:56:6B:66:B2:C7:8F:CC:32:EF:57:C9:76:29:0C:B5
Authority key identifier: 5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
Certificate issuer: /CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Certificate serial: 019A73016AA18D420193496859EEEA2098B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
Manifest number: 0569
Signing time: Tue 11 Nov 2025 13:01:03 +0000
Manifest this update: Tue 11 Nov 2025 13:01:03 +0000
Manifest next update: Wed 12 Nov 2025 13:01:03 +0000
Files and hashes: 1: W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl (hash: AQmxfl5YC7UQld4Lfqahkx7x3oT0ulo4UBIG3E+Tpi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:6a:a1:8d:42:01:93:49:68:59:ee:ea:20:98:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Validity
Not Before: Nov 11 13:01:03 2025 GMT
Not After : Nov 12 13:01:03 2025 GMT
Subject: CN=c23387cd3a566b66b2c78fcc32ef57c976290cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:63:c2:f3:7b:33:ca:c9:de:24:62:a3:86:b5:
cd:33:08:bd:99:5c:c5:7c:65:15:1a:83:25:46:71:
44:6a:fd:9c:7e:74:a5:f8:5f:49:61:c4:4e:22:6a:
de:11:ac:dd:1c:3c:f8:36:30:ed:7d:c4:e7:06:01:
70:6e:18:e1:9e:07:12:18:b4:c8:90:db:63:fa:f4:
8f:1a:1d:78:d4:b0:78:99:bf:4c:24:32:9a:fa:37:
06:f5:57:2e:a4:97:f2:2b:77:c3:6f:e6:43:5e:6f:
0a:4e:3a:9e:20:ac:6b:a0:28:7d:fc:fe:20:f1:fb:
5b:1f:93:7d:10:a4:6e:45:19:bf:6b:83:99:f9:6f:
3e:f9:63:23:e9:75:66:7f:b4:3b:ab:6e:9d:19:d3:
d0:38:f7:ef:8e:78:13:67:81:ef:85:09:41:d2:8d:
e1:af:3f:38:63:34:f9:7a:1d:91:ea:6d:95:3a:dd:
2c:4e:56:c5:97:2e:c6:a0:29:81:b8:96:6d:ff:28:
b5:1f:07:4a:bb:1e:fd:21:2c:6d:e6:7b:f1:1c:99:
c6:c5:0d:16:d7:e6:bf:d6:19:ec:b3:2f:30:ab:b1:
9a:96:d0:97:64:35:18:50:cc:32:ab:1f:b2:9d:5b:
1f:3c:e8:7d:69:59:e9:48:5b:81:5c:b7:2e:9b:1a:
76:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:33:87:CD:3A:56:6B:66:B2:C7:8F:CC:32:EF:57:C9:76:29:0C:B5
X509v3 Authority Key Identifier:
keyid:5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:35:26:39:60:ae:62:3c:65:94:fa:a9:6d:6d:4d:2b:4e:f3:
61:aa:36:08:71:1d:00:e2:8e:e8:d2:10:e6:d6:74:41:f3:cc:
11:45:c9:6e:61:d6:b8:be:bf:d4:f1:25:e0:dc:b5:bb:c7:0f:
ea:52:a1:09:62:dc:ab:25:10:ff:84:d4:e3:c8:eb:31:ae:fe:
8e:7c:91:ce:c5:ca:3a:9a:68:3c:b4:a2:74:d1:7c:71:95:4b:
82:5d:5c:2c:52:1e:92:0e:bc:c0:bd:a5:f5:bd:8d:20:05:7d:
13:3f:e1:2b:a5:a4:0a:e0:6d:a5:8d:7b:6d:61:74:60:c7:38:
df:9e:1b:11:b4:44:1f:bd:9c:54:d0:f6:32:97:a2:ac:e3:dd:
78:2c:34:92:32:30:44:07:7a:44:ea:d8:e2:fd:5c:50:35:04:
67:b0:85:d6:4a:d2:47:83:6b:4f:6b:69:39:13:1f:63:b9:1a:
a8:3d:81:18:61:71:dc:b9:d0:eb:12:1b:ca:b1:88:66:a6:7a:
e3:99:75:d2:6c:bc:68:f1:dd:5c:13:ad:0e:3e:b0:34:13:98:
86:f4:97:0c:17:4c:b9:9a:97:ab:28:39:f3:8f:29:ed:97:e1:
13:3f:06:21:c0:61:41:6a:65:6d:ff:77:9b:18:3d:0a:5f:40:
ce:04:e6:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAWqhjUIBk0loWe7qIJi3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNWI3N2Q2NDU4ZmZhZDk4NGU1MWRmMzM0ZjNlOGY5ODM4
MmFjMjQwHhcNMjUxMTExMTMwMTAzWhcNMjUxMTEyMTMwMTAzWjAzMTEwLwYDVQQD
EyhjMjMzODdjZDNhNTY2YjY2YjJjNzhmY2MzMmVmNTdjOTc2MjkwY2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12PC83szysneJGKjhrXNMwi9mVzF
fGUVGoMlRnFEav2cfnSl+F9JYcROImreEazdHDz4NjDtfcTnBgFwbhjhngcSGLTI
kNtj+vSPGh141LB4mb9MJDKa+jcG9VcupJfyK3fDb+ZDXm8KTjqeIKxroCh9/P4g
8ftbH5N9EKRuRRm/a4OZ+W8++WMj6XVmf7Q7q26dGdPQOPfvjngTZ4HvhQlB0o3h
rz84YzT5eh2R6m2VOt0sTlbFly7GoCmBuJZt/yi1HwdKux79ISxt5nvxHJnGxQ0W
1+a/1hnssy8wq7GaltCXZDUYUMwyqx+ynVsfPOh9aVnpSFuBXLcumxp2gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIzh806VmtmssePzDLvV8l2KQy1MB8GA1UdIwQY
MBaAFFtbd9ZFj/rZhOUd8zTz6PmDgqwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xNTQwYzEtOTg2Ny00MDNkLThiOWIt
ZjNkOWY2M2Q1ZDk3LzEvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xNTQwYzEtOTg2Ny00MDNkLThiOWItZjNkOWY2M2Q1ZDk3
LzEvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjUmOWCu
YjxllPqpbW1NK07zYao2CHEdAOKO6NIQ5tZ0QfPMEUXJbmHWuL6/1PEl4Ny1u8cP
6lKhCWLcqyUQ/4TU48jrMa7+jnyRzsXKOppoPLSidNF8cZVLgl1cLFIekg68wL2l
9b2NIAV9Ez/hK6WkCuBtpY17bWF0YMc4354bEbREH72cVND2MpeirOPdeCw0kjIw
RAd6ROrY4v1cUDUEZ7CF1krSR4NrT2tpORMfY7kaqD2BGGFx3LnQ6xIbyrGIZqZ6
45l10my8aPHdXBOtDj6wNBOYhvSXDBdMuZqXqyg5848p7ZfhEz8GIcBhQWplbf93
mxg9Cl9AzgTmDQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:07 2025 by rpki-client