Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
File: WsPivbYyltXw86_pW9FUURelsUk.mft (raw, json)
Hash identifier: T9jJVqWjDn2MY+k6RfN92fWw9SjGbCd6wjffGC/aSUI=
Subject key identifier: 51:CC:CB:94:89:F1:21:CE:D5:91:E0:2A:58:91:D5:5E:D8:F6:83:6E
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Certificate issuer: /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial: 019A503DCBB08BB405F797E305B2859ADC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
Manifest number: 1145
Signing time: Tue 04 Nov 2025 19:00:18 +0000
Manifest this update: Tue 04 Nov 2025 19:00:18 +0000
Manifest next update: Wed 05 Nov 2025 19:00:18 +0000
Files and hashes: 1: WsPivbYyltXw86_pW9FUURelsUk.crl (hash: FIIV2EULD6HOZyebHScGkbwvl0I2W19fi5d1I/O7I9Y=)
2: Y1iDW0v_VjcE4OMZE6xW26RRBS8.roa (hash: +eewpgaXa+H5fZW2StNgdbfGXtL6pcCIZkhxs3pPHow=)
3: _3l5IDn3xoKCx9gk6CDmJc9PemQ.roa (hash: tAGS+HxIOTgQB55lROqPB0hTI4bw3qpbmFTzCC9BoS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:cb:b0:8b:b4:05:f7:97:e3:05:b2:85:9a:dc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Validity
Not Before: Nov 4 19:00:18 2025 GMT
Not After : Nov 5 19:00:18 2025 GMT
Subject: CN=51cccb9489f121ced591e02a5891d55ed8f6836e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:90:bc:1c:bc:77:52:48:c5:8d:c5:5b:70:
a3:7d:09:81:8c:f1:c1:b6:37:48:36:cd:da:91:87:
89:77:a2:de:33:61:68:9c:a9:01:e2:65:81:25:c1:
75:58:e8:c6:59:57:c7:02:80:bb:ba:6c:3a:e1:79:
d1:cb:2e:19:94:38:9a:78:24:af:b6:13:f1:cb:ed:
a1:df:14:4c:7b:a5:cf:1f:b5:3f:7f:bf:8c:f2:16:
f3:c2:ba:2a:83:ef:6d:2e:b5:47:9d:13:f8:b5:72:
30:9b:df:e0:b9:d5:b2:79:9d:8c:a1:79:78:f8:b5:
45:f9:a1:9e:48:28:35:63:c6:92:c7:3f:d7:d4:bb:
41:c4:5c:90:c6:4b:c9:1b:8a:1b:0e:c3:69:16:ae:
14:19:fa:9f:b5:1e:a2:81:f5:0e:20:35:71:f6:be:
50:a1:f2:fd:17:80:6e:db:ad:4e:75:e9:dd:41:8f:
ba:07:0c:46:56:d8:05:31:07:4f:36:d0:2c:c9:04:
b9:b2:10:a8:4c:0b:e0:3e:3e:a5:df:2e:11:0b:4e:
55:3e:70:81:25:b3:ab:1e:7a:9b:70:76:f9:90:00:
e1:f0:ad:01:83:65:03:52:53:b4:10:3e:da:de:2c:
e4:a9:45:6a:a0:75:2e:9c:d6:5f:08:88:98:a0:2e:
fe:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CC:CB:94:89:F1:21:CE:D5:91:E0:2A:58:91:D5:5E:D8:F6:83:6E
X509v3 Authority Key Identifier:
keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d0:ce:84:18:00:25:95:52:56:c2:9f:a4:05:c4:3e:46:04:
86:89:d1:7b:d4:fd:d5:fc:e1:2d:52:40:ec:e8:34:6a:a5:75:
37:20:4c:a2:2e:77:1f:62:37:49:1f:51:f3:15:94:be:02:a7:
9e:22:c5:89:56:e5:9d:0c:6d:22:b5:2f:4d:19:98:ee:12:1d:
b8:ab:36:42:b6:fd:c5:e5:43:99:8e:77:06:83:65:02:89:a5:
28:85:6b:4a:62:ba:e4:18:18:f9:7a:d1:81:5d:1d:74:33:f9:
23:14:67:a0:fb:1e:64:63:88:8b:8a:35:de:70:38:05:a6:fd:
69:9f:64:c0:32:e1:11:58:05:8d:93:5b:65:68:71:79:70:60:
93:8d:3a:05:73:7c:f3:21:f5:8c:44:50:43:67:7d:d8:de:23:
3b:07:d1:18:03:87:c1:c1:9a:75:ca:49:22:95:f1:da:11:50:
6c:a0:c6:28:f2:78:c8:55:68:b1:4c:8e:24:c1:4a:03:99:e0:
ed:c8:8d:2a:77:0e:2e:aa:4d:02:1f:98:38:c6:55:29:03:62:
4f:da:9f:07:c5:12:66:e3:b6:6b:b5:d3:51:19:2c:56:6d:9a:
15:60:60:22:91:51:70:a9:6e:6d:9f:9d:7e:47:1d:88:30:9e:
c6:80:86:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:01 2025 by rpki-client