
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
File: W8KZyUmzraue-TUmM_zsw7cr1Rg.mft (raw, json)
Hash identifier: gTZxVSRGyw+WtkUS5LdNaBCF1NTQCwvVl/iMBkUTC0A=
Subject key identifier: A7:3B:C4:42:98:BD:40:80:5B:CE:59:B6:44:F0:D8:F6:BA:61:DC:37
Authority key identifier: 5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
Certificate issuer: /CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Certificate serial: 019A4F629C2BAEFC192FA6160AF37422D582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
Manifest number: 141D
Signing time: Tue 04 Nov 2025 15:00:53 +0000
Manifest this update: Tue 04 Nov 2025 15:00:53 +0000
Manifest next update: Wed 05 Nov 2025 15:00:53 +0000
Files and hashes: 1: W8KZyUmzraue-TUmM_zsw7cr1Rg.crl (hash: hWS4abu3Lzg46N1YseYQ9okEan28zCFwkQQI9xzmqOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:9c:2b:ae:fc:19:2f:a6:16:0a:f3:74:22:d5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Validity
Not Before: Nov 4 15:00:53 2025 GMT
Not After : Nov 5 15:00:53 2025 GMT
Subject: CN=a73bc44298bd40805bce59b644f0d8f6ba61dc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:a1:85:7c:d4:f3:9b:b8:7e:1e:f2:d4:ff:
87:2d:9f:6a:09:1e:b7:86:6b:3b:a2:9f:b1:6c:1d:
95:f8:f7:e0:ee:91:52:23:93:95:1c:e9:eb:c6:d4:
7a:81:7d:28:c9:1a:b9:5c:a5:ab:81:20:5e:0f:0c:
42:9d:75:51:fa:79:77:82:7d:4e:8c:95:f7:aa:b9:
d1:b0:1f:83:21:e5:d6:9f:ea:15:0d:45:c3:0e:6e:
c5:03:d8:9e:24:d1:94:01:ee:68:a5:ae:46:b5:60:
cb:bb:ed:a0:67:30:47:dc:f7:d6:d5:32:e7:fd:04:
95:f4:9b:51:5f:ba:ec:e6:d9:7d:f4:45:69:56:ae:
a2:55:42:6a:ca:b1:12:6c:94:be:71:e1:95:50:27:
c1:38:2a:5e:36:52:0f:20:84:c4:67:e8:1d:a8:5c:
43:fa:1a:c1:93:94:46:a8:97:df:81:83:bd:cf:bb:
4a:b8:a7:31:b8:d8:7e:33:1e:26:a7:d4:35:69:c5:
b0:ce:a3:f5:91:e6:b0:c5:3d:ea:69:36:a2:00:c7:
4b:32:23:c8:f8:51:8a:b1:ae:87:20:9e:af:0b:1f:
e8:73:bd:0c:e1:64:af:20:be:4a:f4:d4:15:63:36:
0d:a1:1d:6c:65:98:11:db:5a:a1:2b:4b:9b:45:c8:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3B:C4:42:98:BD:40:80:5B:CE:59:B6:44:F0:D8:F6:BA:61:DC:37
X509v3 Authority Key Identifier:
keyid:5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9b:38:c5:70:96:15:5f:ea:71:36:9b:79:0a:1f:5a:74:2e:
e4:89:12:ed:d9:8f:cf:aa:24:89:b6:50:55:a6:c3:2e:ac:68:
a0:83:5f:34:e6:68:96:6c:df:33:61:d5:0d:a6:a4:38:29:89:
be:d0:4f:3f:cf:eb:b8:f5:80:9e:26:cb:df:24:3c:0c:0f:85:
80:74:c3:25:1d:a7:87:c4:b8:5d:c9:c3:b6:b9:ae:4c:b6:4b:
24:44:35:20:f5:e2:7c:ba:89:1c:ad:f6:1d:3e:8c:0e:fd:ad:
94:67:52:54:4d:7a:b4:59:91:2d:d7:c3:37:1b:82:3a:df:85:
e7:bc:ff:48:e8:fc:9f:77:a9:c7:cb:84:7f:7d:d2:cf:14:9f:
c8:20:89:3c:e1:4d:3c:18:46:e2:17:42:7d:78:38:e3:bd:bc:
5a:91:b2:fc:0c:92:86:50:7f:72:b7:5d:b7:af:50:6f:ec:5d:
6f:f1:ae:27:b8:f7:bd:69:0e:4d:a0:6f:75:6c:3f:62:48:95:
e9:c6:01:71:d4:f7:75:b0:43:a7:87:06:b2:66:5a:19:1f:d3:
f5:f3:32:6f:e0:a9:d3:1c:58:d5:95:cd:99:1d:fa:03:27:9f:
e9:ae:b2:4c:11:7b:cc:2f:c8:53:08:b8:f0:02:91:c5:1a:78:
0e:48:2f:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYpwrrvwZL6YWCvN0ItWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYzI5OWM5NDliM2FkYWI5ZWY5MzUyNjMzZmNlY2MzYjcy
YmQ1MTgwHhcNMjUxMTA0MTUwMDUzWhcNMjUxMTA1MTUwMDUzWjAzMTEwLwYDVQQD
EyhhNzNiYzQ0Mjk4YmQ0MDgwNWJjZTU5YjY0NGYwZDhmNmJhNjFkYzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqChhXzU85u4fh7y1P+HLZ9qCR63
hms7op+xbB2V+Pfg7pFSI5OVHOnrxtR6gX0oyRq5XKWrgSBeDwxCnXVR+nl3gn1O
jJX3qrnRsB+DIeXWn+oVDUXDDm7FA9ieJNGUAe5opa5GtWDLu+2gZzBH3PfW1TLn
/QSV9JtRX7rs5tl99EVpVq6iVUJqyrESbJS+ceGVUCfBOCpeNlIPIITEZ+gdqFxD
+hrBk5RGqJffgYO9z7tKuKcxuNh+Mx4mp9Q1acWwzqP1keawxT3qaTaiAMdLMiPI
+FGKsa6HIJ6vCx/oc70M4WSvIL5K9NQVYzYNoR1sZZgR21qhK0ubRci5BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKc7xEKYvUCAW85ZtkTw2Pa6Ydw3MB8GA1UdIwQY
MBaAFFvCmclJs62rnvk1JjP87MO3K9UYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzhLWnlVbXpyYXVlLVRVbU1fenN3N2NyMVJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYjU2MjctZDYyNy00MTYxLWEyYjMt
OWQyNWMzMzQ5ZDExLzEvVzhLWnlVbXpyYXVlLVRVbU1fenN3N2NyMVJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iYjU2MjctZDYyNy00MTYxLWEyYjMtOWQyNWMzMzQ5ZDEx
LzEvVzhLWnlVbXpyYXVlLVRVbU1fenN3N2NyMVJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5s4xXCW
FV/qcTabeQofWnQu5IkS7dmPz6okibZQVabDLqxooINfNOZolmzfM2HVDaakOCmJ
vtBPP8/ruPWAnibL3yQ8DA+FgHTDJR2nh8S4XcnDtrmuTLZLJEQ1IPXifLqJHK32
HT6MDv2tlGdSVE16tFmRLdfDNxuCOt+F57z/SOj8n3epx8uEf33SzxSfyCCJPOFN
PBhG4hdCfXg44728WpGy/AyShlB/crddt69Qb+xdb/GuJ7j3vWkOTaBvdWw/YkiV
6cYBcdT3dbBDp4cGsmZaGR/T9fMyb+Cp0xxY1ZXNmR36Ayef6a6yTBF7zC/IUwi4
8AKRxRp4DkgveQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:43:35 2025 by rpki-client