Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
File: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft (raw, json)
Hash identifier: kU27WwRB6vYE3l2gSN8jEJp4zgtIKu24LGdYN9qjcqE=
Subject key identifier: 27:1C:0E:85:D4:B3:42:1C:11:B4:46:61:08:67:54:3E:1F:5C:6E:72
Authority key identifier: 5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46
Certificate issuer: /CN=5a0e488bb09d2873d662e2846a2288a425ded946
Certificate serial: 019A4EF4C642B0DDE5094FBDB0A123327728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
Manifest number: 0323
Signing time: Tue 04 Nov 2025 13:00:55 +0000
Manifest this update: Tue 04 Nov 2025 13:00:55 +0000
Manifest next update: Wed 05 Nov 2025 13:00:55 +0000
Files and hashes: 1: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl (hash: ipiY+TYHB674PraOJSzgVL9/yi4ohKFQ4BKf7s93gyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c6:42:b0:dd:e5:09:4f:bd:b0:a1:23:32:77:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0e488bb09d2873d662e2846a2288a425ded946
Validity
Not Before: Nov 4 13:00:55 2025 GMT
Not After : Nov 5 13:00:55 2025 GMT
Subject: CN=271c0e85d4b3421c11b446610867543e1f5c6e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:ac:90:68:d3:6b:e7:9b:9c:7d:54:15:14:
a7:21:33:fa:b9:50:0c:e5:0a:8c:24:36:0f:48:96:
cc:47:d3:20:b8:1b:7e:f5:f5:e7:de:91:e1:d2:d1:
73:3e:87:5e:23:0f:c9:b9:b6:9b:65:60:85:1d:04:
8c:86:86:7b:c2:60:2a:6b:43:e1:ea:55:03:03:8c:
da:07:e0:d7:a0:2b:3e:d8:45:0e:b2:a2:7d:7d:3d:
c8:c1:93:76:35:e4:7b:8e:59:33:92:dc:54:32:88:
11:01:11:eb:d9:a9:c9:9b:29:ff:1b:4d:98:5e:02:
14:ea:d9:fc:a5:da:27:fe:28:97:5a:1a:bb:85:ce:
d2:7f:ca:c9:83:d2:aa:54:40:60:f0:f7:a3:c6:99:
51:99:da:62:44:42:ed:fd:6f:8b:97:cd:9e:f8:5e:
28:67:09:4d:ce:8e:74:76:c6:8b:e8:00:66:4c:14:
fb:aa:a2:70:37:d6:97:58:24:4f:4d:a1:a9:b5:74:
aa:5d:c4:15:ec:34:db:26:6e:66:0a:02:4d:b0:fb:
5b:f4:46:e7:54:c5:20:1d:51:38:03:4d:ee:95:09:
5b:b5:b4:45:41:ca:e7:3e:b4:5a:68:58:94:04:a1:
43:2b:a1:d3:94:82:6f:bc:a5:cc:62:df:56:9c:8e:
41:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1C:0E:85:D4:B3:42:1C:11:B4:46:61:08:67:54:3E:1F:5C:6E:72
X509v3 Authority Key Identifier:
keyid:5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:43:e3:24:14:11:e4:5e:0e:d4:2e:be:a4:d9:b8:70:34:92:
ad:f6:41:b3:e4:2e:ae:04:79:eb:f1:89:cb:3c:24:b8:6b:bb:
54:47:bb:50:64:98:1a:cf:67:90:12:b8:e0:de:d7:ba:0e:f1:
37:70:b2:57:4d:2d:41:dd:67:84:19:c5:d7:85:cb:81:18:a8:
2b:3f:a1:bc:8f:45:c1:8f:0d:ee:4d:a7:40:49:b7:71:96:92:
cc:f0:49:da:ed:18:c9:36:e3:f7:e2:70:37:12:f5:4d:76:6f:
45:59:d5:b8:9f:91:1f:98:5c:94:bb:26:fd:12:07:dd:9e:18:
ae:e3:1d:ff:0a:d1:44:dc:4b:51:e3:77:b2:4e:40:8e:08:c7:
27:15:8a:66:4e:f1:52:ea:b5:69:3e:a2:7d:f1:e0:72:0c:a6:
14:c5:cb:55:7d:af:41:dc:cb:bb:9c:46:71:a2:9d:89:24:5a:
31:75:24:91:e5:11:b2:d7:d1:e3:c6:09:85:01:8c:7c:f4:1a:
66:c3:d6:5d:fc:08:78:11:b0:aa:3f:e4:80:1d:8b:56:47:b3:
66:2d:37:e9:00:fd:58:99:6c:20:5e:29:27:5b:00:e6:49:ba:
89:c3:ad:1a:7f:51:78:22:0d:eb:7d:40:f5:49:95:a2:71:c4:
d6:cd:aa:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9MZCsN3lCU+9sKEjMncoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMGU0ODhiYjA5ZDI4NzNkNjYyZTI4NDZhMjI4OGE0MjVk
ZWQ5NDYwHhcNMjUxMTA0MTMwMDU1WhcNMjUxMTA1MTMwMDU1WjAzMTEwLwYDVQQD
EygyNzFjMGU4NWQ0YjM0MjFjMTFiNDQ2NjEwODY3NTQzZTFmNWM2ZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7eskGjTa+ebnH1UFRSnITP6uVAM
5QqMJDYPSJbMR9MguBt+9fXn3pHh0tFzPodeIw/JubabZWCFHQSMhoZ7wmAqa0Ph
6lUDA4zaB+DXoCs+2EUOsqJ9fT3IwZN2NeR7jlkzktxUMogRARHr2anJmyn/G02Y
XgIU6tn8pdon/iiXWhq7hc7Sf8rJg9KqVEBg8PejxplRmdpiRELt/W+Ll82e+F4o
ZwlNzo50dsaL6ABmTBT7qqJwN9aXWCRPTaGptXSqXcQV7DTbJm5mCgJNsPtb9Ebn
VMUgHVE4A03ulQlbtbRFQcrnPrRaaFiUBKFDK6HTlIJvvKXMYt9WnI5B+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCccDoXUs0IcEbRGYQhnVD4fXG5yMB8GA1UdIwQY
MBaAFFoOSIuwnShz1mLihGoiiKQl3tlGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2c1SWk3Q2RLSFBXWXVLRWFpS0lwQ1hlMlVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xMWNjMmEtYWQ2Ni00ZDJhLTllMzAt
MWY1OWJjNzI4N2NkLzEvV2c1SWk3Q2RLSFBXWXVLRWFpS0lwQ1hlMlVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8xMWNjMmEtYWQ2Ni00ZDJhLTllMzAtMWY1OWJjNzI4N2Nk
LzEvV2c1SWk3Q2RLSFBXWXVLRWFpS0lwQ1hlMlVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0PjJBQR
5F4O1C6+pNm4cDSSrfZBs+QurgR56/GJyzwkuGu7VEe7UGSYGs9nkBK44N7Xug7x
N3CyV00tQd1nhBnF14XLgRioKz+hvI9FwY8N7k2nQEm3cZaSzPBJ2u0YyTbj9+Jw
NxL1TXZvRVnVuJ+RH5hclLsm/RIH3Z4YruMd/wrRRNxLUeN3sk5AjgjHJxWKZk7x
Uuq1aT6iffHgcgymFMXLVX2vQdzLu5xGcaKdiSRaMXUkkeURstfR48YJhQGMfPQa
ZsPWXfwIeBGwqj/kgB2LVkezZi036QD9WJlsIF4pJ1sA5km6icOtGn9ReCIN631A
9UmVonHE1s2qSg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:38 2025 by rpki-client