Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
File: WSh1E_SesUCO5BsoHIsnczB6iRA.mft (raw, json)
Hash identifier: LDkPaj7+7I/stBNbDuGnxn9xIITKaKTjb2uFpSjl0WI=
Subject key identifier: 20:97:B2:B5:37:0E:49:BD:3C:DF:CD:88:E1:AD:84:E2:1D:B9:D3:E9
Authority key identifier: 59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10
Certificate issuer: /CN=59287513f49eb1408ee41b281c8b2773307a8910
Certificate serial: 019A4D7411E6E1C82A92A5AD61C8C3488FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 06:00:43 +0000
Manifest this update: Tue 04 Nov 2025 06:00:43 +0000
Manifest next update: Wed 05 Nov 2025 06:00:43 +0000
Files and hashes: 1: WSh1E_SesUCO5BsoHIsnczB6iRA.crl (hash: t81GZwroQLAYihUElV8pBN3L1WYulMZ7HRrEFY/GUBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:11:e6:e1:c8:2a:92:a5:ad:61:c8:c3:48:8f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59287513f49eb1408ee41b281c8b2773307a8910
Validity
Not Before: Nov 4 06:00:43 2025 GMT
Not After : Nov 5 06:00:43 2025 GMT
Subject: CN=2097b2b5370e49bd3cdfcd88e1ad84e21db9d3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:ae:50:9d:51:29:9e:6c:cd:77:e8:da:9a:
bc:bd:d3:6d:21:bc:17:1e:db:b1:00:e2:f0:9a:d9:
62:43:42:1c:91:cc:b1:90:4b:98:28:65:23:43:68:
57:98:11:63:3f:43:32:38:27:3b:bc:16:2b:f8:5d:
87:b0:67:4c:fe:17:69:21:b4:b1:17:2d:b8:c7:30:
5d:11:ab:c9:6b:c6:d3:da:f3:df:76:3c:73:be:1e:
f6:15:2d:03:b3:ef:39:45:aa:ac:e1:62:03:47:09:
76:80:3c:cb:41:25:a3:47:44:c7:23:ef:f7:a1:b2:
35:66:39:40:a9:4b:dc:1e:f8:6f:79:2c:9c:67:5c:
61:7e:b2:b7:35:36:09:ca:90:f6:0a:07:ce:52:97:
80:48:64:6c:92:1f:8f:9f:14:02:0d:c6:d9:7a:ee:
d8:ac:9d:c0:e3:8e:0e:83:4b:bb:cd:d6:88:72:74:
f4:2e:59:3c:b8:6f:9b:d9:93:be:5d:92:1e:85:09:
e9:dc:14:55:ab:26:53:a3:97:4a:c7:f0:c8:55:d8:
0f:44:c1:bf:b6:ab:b4:d5:0a:d1:e8:24:f4:87:cb:
01:68:25:49:f1:28:be:4f:a8:ec:19:51:b3:09:e8:
72:36:0e:a4:8c:35:aa:6a:c9:0b:76:ec:24:dd:80:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:97:B2:B5:37:0E:49:BD:3C:DF:CD:88:E1:AD:84:E2:1D:B9:D3:E9
X509v3 Authority Key Identifier:
keyid:59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b5:bb:b9:da:88:96:51:ef:c3:ac:9d:91:d0:f2:95:88:ce:
63:15:aa:56:e0:3f:29:0d:61:2c:53:03:ad:1d:01:71:6a:de:
2b:1d:e5:1a:2e:83:84:82:a1:2a:fb:69:de:9b:56:a0:50:4f:
07:31:9b:18:30:58:3b:76:0c:6c:c0:94:6e:fa:f1:45:a0:d6:
dc:79:7e:99:e2:4c:f7:2d:9c:cf:d5:91:7b:e6:4f:06:c5:d4:
6c:70:ec:2a:f0:8a:50:a9:a9:4a:83:5b:3f:94:1a:47:e2:f1:
85:7c:97:b5:d5:2a:33:8d:ed:58:e9:c2:74:91:02:d5:e5:10:
11:f9:33:fa:ba:f3:20:9e:ce:a2:af:47:9a:93:a0:e8:f6:45:
ae:28:2f:b3:a6:d2:62:81:41:b3:36:cf:5b:48:c4:82:eb:e7:
06:4b:87:e9:c8:54:31:02:be:3b:38:a7:64:e0:01:77:75:33:
3e:68:59:6d:fd:b3:19:60:3d:18:7d:7a:2c:13:a0:10:6b:a3:
6f:f5:51:b4:df:cd:cd:18:dc:ba:61:41:15:e0:4f:b5:c6:80:
d9:af:16:1b:79:1f:8a:38:f0:c8:e7:7c:55:bf:64:43:0e:26:
91:a0:36:02:e3:56:67:e7:ca:06:14:34:bc:f8:05:6a:b2:cd:
1a:bc:b9:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdBHm4cgqkqWtYcjDSI/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5Mjg3NTEzZjQ5ZWIxNDA4ZWU0MWIyODFjOGIyNzczMzA3
YTg5MTAwHhcNMjUxMTA0MDYwMDQzWhcNMjUxMTA1MDYwMDQzWjAzMTEwLwYDVQQD
EygyMDk3YjJiNTM3MGU0OWJkM2NkZmNkODhlMWFkODRlMjFkYjlkM2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw92uUJ1RKZ5szXfo2pq8vdNtIbwX
HtuxAOLwmtliQ0IckcyxkEuYKGUjQ2hXmBFjP0MyOCc7vBYr+F2HsGdM/hdpIbSx
Fy24xzBdEavJa8bT2vPfdjxzvh72FS0Ds+85Raqs4WIDRwl2gDzLQSWjR0THI+/3
obI1ZjlAqUvcHvhveSycZ1xhfrK3NTYJypD2CgfOUpeASGRskh+PnxQCDcbZeu7Y
rJ3A444Og0u7zdaIcnT0Llk8uG+b2ZO+XZIehQnp3BRVqyZTo5dKx/DIVdgPRMG/
tqu01QrR6CT0h8sBaCVJ8Si+T6jsGVGzCehyNg6kjDWqaskLduwk3YC86wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCXsrU3Dkm9PN/NiOGthOIdudPpMB8GA1UdIwQY
MBaAFFkodRP0nrFAjuQbKByLJ3MweokQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1NoMUVfU2VzVUNPNUJzb0hJc25jekI2aVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84OTUxMTctYTBmOC00MTQ1LWJkYWEt
ODhjZWMyZjk1NTEzLzEvV1NoMUVfU2VzVUNPNUJzb0hJc25jekI2aVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84OTUxMTctYTBmOC00MTQ1LWJkYWEtODhjZWMyZjk1NTEz
LzEvV1NoMUVfU2VzVUNPNUJzb0hJc25jekI2aVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbW7udqI
llHvw6ydkdDylYjOYxWqVuA/KQ1hLFMDrR0BcWreKx3lGi6DhIKhKvtp3ptWoFBP
BzGbGDBYO3YMbMCUbvrxRaDW3Hl+meJM9y2cz9WRe+ZPBsXUbHDsKvCKUKmpSoNb
P5QaR+LxhXyXtdUqM43tWOnCdJEC1eUQEfkz+rrzIJ7Ooq9HmpOg6PZFrigvs6bS
YoFBszbPW0jEguvnBkuH6chUMQK+OzinZOABd3UzPmhZbf2zGWA9GH16LBOgEGuj
b/VRtN/NzRjcumFBFeBPtcaA2a8WG3kfijjwyOd8Vb9kQw4mkaA2AuNWZ+fKBhQ0
vPgFarLNGry5Wg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:31 2025 by rpki-client