
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
File: WVUSBp5lxZCALs5b972H5muPNdM.mft (raw, json)
Hash identifier: h6YBIN1VQLz5U8SxAK1UDNdGCOZPWorxwsaabtYEZIc=
Subject key identifier: BC:3C:4B:91:35:AE:D3:2A:11:B8:AE:EE:D2:0A:03:0A:B3:54:EE:67
Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
Certificate issuer: /CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Certificate serial: 0199FC8FC7FA0E89B7F1A6E617BE781FA0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
Manifest number: 05AA
Signing time: Sun 19 Oct 2025 13:01:45 +0000
Manifest this update: Sun 19 Oct 2025 13:01:45 +0000
Manifest next update: Mon 20 Oct 2025 13:01:45 +0000
Files and hashes: 1: WVUSBp5lxZCALs5b972H5muPNdM.crl (hash: U+VEbML2F7SyuGhEAyrZ4OeMpUDpvJyqLBNFysBSst0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c7:fa:0e:89:b7:f1:a6:e6:17:be:78:1f:a0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Validity
Not Before: Oct 19 13:01:45 2025 GMT
Not After : Oct 20 13:01:45 2025 GMT
Subject: CN=bc3c4b9135aed32a11b8aeeed20a030ab354ee67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:8a:c7:57:cd:9e:18:ea:27:ff:dc:b4:9d:
15:6d:78:0d:4f:57:e0:49:64:70:d2:de:ed:0c:1a:
26:54:1e:e7:8c:1f:25:c5:12:de:82:d6:a6:16:4c:
55:7b:cc:11:f2:2f:78:64:6e:3d:50:96:5d:45:03:
52:c8:13:f3:d0:07:45:7d:99:23:aa:8f:cd:a7:65:
ff:d5:1c:bc:a7:9d:49:29:6d:7d:75:14:13:3f:6d:
81:b2:78:08:e5:23:f9:37:6d:63:54:2d:69:2e:e4:
72:df:bb:94:1d:f5:1c:e1:d4:3f:62:ab:39:96:1e:
42:f5:b8:3c:4f:3f:3b:c3:30:a2:a4:36:f1:f1:5f:
93:e7:6c:8b:4f:c2:58:31:cf:19:3f:e2:e9:b0:ce:
14:a4:8f:e0:aa:fb:88:7a:bc:e1:98:bc:ab:f7:18:
36:0e:1d:ac:db:99:3a:ca:fe:fa:46:5e:cd:ad:e5:
1d:08:40:ed:25:7b:cc:59:82:d7:f8:f5:c8:ee:0c:
ac:33:cb:02:d0:fe:ee:a3:81:73:98:b4:cd:4f:5d:
6b:92:bb:9f:18:d7:09:bd:da:28:ed:95:d5:37:9c:
32:3c:a2:06:f2:0b:c8:8d:a7:58:d2:9e:44:df:8a:
df:49:c5:76:a7:a3:94:c7:59:72:b7:6f:81:b3:20:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3C:4B:91:35:AE:D3:2A:11:B8:AE:EE:D2:0A:03:0A:B3:54:EE:67
X509v3 Authority Key Identifier:
keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:dd:b0:63:06:1e:2d:a1:a8:5a:4c:54:29:80:2d:a4:10:66:
4d:5e:b4:2f:75:24:8a:dd:f1:cd:b8:34:7d:de:1b:66:c0:88:
2d:cb:4a:78:dc:6e:88:d9:65:31:f4:c4:01:c6:50:75:76:4d:
7f:8a:ce:7b:23:81:1c:3d:26:1b:a2:d5:a9:45:f4:5a:42:32:
1d:40:ec:a8:c1:3b:56:36:72:64:77:51:81:12:bd:99:ac:9b:
5f:8a:8f:b8:d5:8b:97:5f:35:04:61:d3:36:7a:d9:87:f4:04:
82:bf:9c:03:bf:f0:ff:d2:03:0c:c6:5c:62:60:6b:cc:59:07:
8f:ce:df:18:da:ec:0a:15:09:b7:9c:42:6f:51:68:81:3a:58:
8f:75:1d:d5:13:42:47:6b:0d:30:03:bb:17:d5:56:16:c1:1f:
d3:f6:8c:f6:37:84:31:49:8d:5f:e6:77:55:d8:3b:67:06:a7:
14:90:1a:e6:76:51:59:9f:3e:de:d0:e4:24:50:68:6e:7c:30:
86:45:03:cd:d8:54:0a:72:bf:68:71:87:5d:db:59:8b:35:30:
a6:92:c2:86:d4:57:78:be:c1:8a:52:23:9c:7a:c5:c0:69:8b:
d2:28:92:a5:79:b7:ec:d2:0d:71:9c:da:63:18:db:3b:64:c4:
d4:95:35:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:38 2025 by rpki-client