Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
File: wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft (raw, json)
Hash identifier: WebQYduarltARpGcmPqsmqDWrm9ruR6G+c9ol3w1oUY=
Subject key identifier: F5:C9:65:40:15:5F:22:49:E1:E7:23:1E:E7:F6:05:F4:03:6C:7A:EA
Authority key identifier: C1:2C:07:2C:35:90:9D:52:53:22:B0:27:58:6B:AC:FA:D1:19:F1:7D
Certificate issuer: /CN=c12c072c35909d525322b027586bacfad119f17d
Certificate serial: 019A4D3D12F203D9DF28398D1B15AA36C398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
Manifest number: 052E
Signing time: Tue 04 Nov 2025 05:00:39 +0000
Manifest this update: Tue 04 Nov 2025 05:00:39 +0000
Manifest next update: Wed 05 Nov 2025 05:00:39 +0000
Files and hashes: 1: wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl (hash: ShOkJCJvU9845oMdgYpZPpxYr1FKr6nur1nCvx7yf9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:12:f2:03:d9:df:28:39:8d:1b:15:aa:36:c3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12c072c35909d525322b027586bacfad119f17d
Validity
Not Before: Nov 4 05:00:39 2025 GMT
Not After : Nov 5 05:00:39 2025 GMT
Subject: CN=f5c96540155f2249e1e7231ee7f605f4036c7aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:3c:6d:8f:3e:4d:52:30:67:2e:f1:d3:09:
ce:5f:25:d2:92:08:3c:fb:ad:bc:c9:60:26:96:fb:
77:49:fe:a5:46:64:69:20:e6:e0:87:4c:f2:db:75:
9f:7b:78:69:c0:63:a3:67:1c:aa:ed:9a:cd:9d:b4:
56:c9:74:a5:20:f8:50:03:b2:16:fa:a4:99:e4:21:
35:4e:5b:ae:5c:79:5d:93:9d:e6:d9:a2:eb:c8:9f:
24:48:14:ab:52:a8:92:a2:4e:7d:92:33:8a:db:c0:
22:e1:bc:cb:9d:e0:f9:36:8c:e1:5d:b6:c2:38:7e:
1a:2c:86:cf:9c:16:5c:31:31:15:8d:70:42:5f:f8:
e2:2d:1f:09:f6:00:a3:a8:82:5f:50:c7:70:31:40:
40:41:09:ec:cf:95:c8:65:1c:4f:8c:07:6d:5b:52:
e8:b1:15:d1:d5:8c:25:db:9c:b2:35:5c:f8:0e:92:
1b:3c:b8:81:74:6d:bd:2d:6f:9f:15:69:43:38:a5:
05:70:5f:cd:c3:19:7e:96:ee:3f:89:a4:f8:9e:4f:
e7:18:63:1d:cd:62:03:03:3e:a5:d5:4c:ef:51:db:
7c:2a:60:58:22:f7:fc:3b:4a:97:d0:8d:70:65:23:
36:ab:9d:aa:a2:16:5e:69:13:d5:ca:ee:8a:5a:9d:
df:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C9:65:40:15:5F:22:49:E1:E7:23:1E:E7:F6:05:F4:03:6C:7A:EA
X509v3 Authority Key Identifier:
keyid:C1:2C:07:2C:35:90:9D:52:53:22:B0:27:58:6B:AC:FA:D1:19:F1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:17:17:cc:ec:f9:42:e6:3b:86:9b:8a:dd:f7:c5:14:f8:97:
e7:c4:21:14:a1:b5:ad:7f:25:c7:e9:f3:ae:26:f0:64:6f:6d:
15:1f:6c:99:b0:e3:47:81:f8:17:92:62:4d:33:48:0d:ef:a6:
fa:ab:c1:82:bc:e1:45:63:4f:e1:cc:37:ba:aa:7d:85:ac:1e:
d4:57:5a:2a:e3:d3:38:9b:8e:52:c9:28:f0:3f:70:37:b4:8f:
87:ee:8c:f3:d9:9f:b6:b9:12:12:3c:7f:91:6a:03:6c:82:db:
4d:2c:76:ad:9f:3a:0a:1f:09:c0:e7:9d:15:af:43:b3:88:26:
10:93:5f:b8:a5:ad:5c:cf:72:49:09:d6:a5:0b:88:74:d7:a1:
1f:07:5c:48:5f:33:82:97:af:5a:da:b1:3e:45:dc:e2:c5:8e:
e5:f5:0b:c2:00:ac:e3:e1:f1:12:40:c0:ba:51:59:7b:ad:ca:
1e:fa:59:e3:ed:d2:0c:ee:70:63:25:42:18:b7:8e:b9:70:92:
e1:60:aa:cb:8c:3b:e3:d6:c5:47:68:9f:ae:8e:3b:28:cb:80:
85:f6:60:f6:ee:f8:d8:20:9b:28:91:3c:16:ce:64:bf:a8:fc:
fa:32:f2:38:03:bf:a9:c1:f3:83:15:28:0e:d1:43:91:69:8c:
47:0a:5d:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPRLyA9nfKDmNGxWqNsOYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMmMwNzJjMzU5MDlkNTI1MzIyYjAyNzU4NmJhY2ZhZDEx
OWYxN2QwHhcNMjUxMTA0MDUwMDM5WhcNMjUxMTA1MDUwMDM5WjAzMTEwLwYDVQQD
EyhmNWM5NjU0MDE1NWYyMjQ5ZTFlNzIzMWVlN2Y2MDVmNDAzNmM3YWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDU8bY8+TVIwZy7x0wnOXyXSkgg8
+628yWAmlvt3Sf6lRmRpIObgh0zy23Wfe3hpwGOjZxyq7ZrNnbRWyXSlIPhQA7IW
+qSZ5CE1TluuXHldk53m2aLryJ8kSBSrUqiSok59kjOK28Ai4bzLneD5NozhXbbC
OH4aLIbPnBZcMTEVjXBCX/jiLR8J9gCjqIJfUMdwMUBAQQnsz5XIZRxPjAdtW1Lo
sRXR1Ywl25yyNVz4DpIbPLiBdG29LW+fFWlDOKUFcF/Nwxl+lu4/iaT4nk/nGGMd
zWIDAz6l1UzvUdt8KmBYIvf8O0qX0I1wZSM2q52qohZeaRPVyu6KWp3f8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXJZUAVXyJJ4ecjHuf2BfQDbHrqMB8GA1UdIwQY
MBaAFMEsByw1kJ1SUyKwJ1hrrPrRGfF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1N3SExEV1FuVkpUSXJBbldHdXMtdEVaOFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9lZWM1MjgtZjJmZi00Y2I1LTljZGEt
ZjZiNTQ3ZmVlOGUwLzEvd1N3SExEV1FuVkpUSXJBbldHdXMtdEVaOFgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9lZWM1MjgtZjJmZi00Y2I1LTljZGEtZjZiNTQ3ZmVlOGUw
LzEvd1N3SExEV1FuVkpUSXJBbldHdXMtdEVaOFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhcXzOz5
QuY7hpuK3ffFFPiX58QhFKG1rX8lx+nzribwZG9tFR9smbDjR4H4F5JiTTNIDe+m
+qvBgrzhRWNP4cw3uqp9hawe1FdaKuPTOJuOUsko8D9wN7SPh+6M89mftrkSEjx/
kWoDbILbTSx2rZ86Ch8JwOedFa9Ds4gmEJNfuKWtXM9ySQnWpQuIdNehHwdcSF8z
gpevWtqxPkXc4sWO5fULwgCs4+HxEkDAulFZe63KHvpZ4+3SDO5wYyVCGLeOuXCS
4WCqy4w749bFR2ifro47KMuAhfZg9u742CCbKJE8Fs5kv6j8+jLyOAO/qcHzgxUo
DtFDkWmMRwpdrA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:25 2025 by rpki-client