Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
File: WsPivbYyltXw86_pW9FUURelsUk.mft (raw, json)
Hash identifier: NMNj0NnR/jlfrcz1QkHixhsgpAmmUpniIu/e5aJQLY0=
Subject key identifier: 35:F5:52:27:19:DC:24:D5:A6:24:FD:CC:24:ED:31:2E:85:A2:98:86
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Certificate issuer: /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial: 0199FB4581F1C9301BA69B947E308985D8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
Manifest number: 1119
Signing time: Sun 19 Oct 2025 07:01:00 +0000
Manifest this update: Sun 19 Oct 2025 07:01:00 +0000
Manifest next update: Mon 20 Oct 2025 07:01:00 +0000
Files and hashes: 1: WsPivbYyltXw86_pW9FUURelsUk.crl (hash: esJo66ef2acBqZrWRyX4x2NqvLqnDBkDWhOuIXX8kBY=)
2: Y1iDW0v_VjcE4OMZE6xW26RRBS8.roa (hash: +eewpgaXa+H5fZW2StNgdbfGXtL6pcCIZkhxs3pPHow=)
3: _3l5IDn3xoKCx9gk6CDmJc9PemQ.roa (hash: tAGS+HxIOTgQB55lROqPB0hTI4bw3qpbmFTzCC9BoS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:81:f1:c9:30:1b:a6:9b:94:7e:30:89:85:d8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Validity
Not Before: Oct 19 07:01:00 2025 GMT
Not After : Oct 20 07:01:00 2025 GMT
Subject: CN=35f5522719dc24d5a624fdcc24ed312e85a29886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:56:6d:22:cd:d1:1d:de:a4:db:79:7a:8f:
99:14:b2:64:42:28:5d:e1:fc:e4:55:bb:54:87:c4:
31:4b:1d:83:24:a6:58:35:80:85:ea:fc:69:c2:f4:
44:53:94:1d:f1:2e:bd:5e:8b:2a:1d:ad:ad:ff:27:
cd:bb:e6:b8:74:24:e6:61:63:42:d7:b1:d9:7e:2e:
08:2d:4f:61:9a:29:86:33:59:7a:04:1a:d0:0b:d4:
17:ee:41:07:5f:be:00:19:f1:2f:2f:dd:95:5e:3c:
2e:22:e2:a4:6a:7b:51:2a:56:61:3f:c8:42:eb:0a:
a7:03:6c:7f:4b:77:2f:c4:6b:ab:e4:92:1c:a0:e5:
9e:ea:f5:c0:22:7a:4e:38:d8:84:d7:aa:bb:47:bc:
65:cb:2b:d9:14:aa:da:79:68:e2:43:4a:8d:b4:26:
1b:64:ce:14:d9:46:2a:5f:c4:36:25:4e:1a:80:8d:
82:c4:4d:8b:78:af:56:06:00:43:96:67:7e:ff:2a:
a7:1a:30:a9:93:e2:9a:19:bd:72:0b:0f:14:34:94:
8d:d0:d2:16:d3:ea:ab:81:ad:18:48:c8:52:76:e9:
7c:cc:d6:91:78:13:a5:8d:9c:c9:cc:db:4f:1c:ea:
19:b0:f5:b6:6c:0a:34:f5:bd:86:f4:64:50:00:f7:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F5:52:27:19:DC:24:D5:A6:24:FD:CC:24:ED:31:2E:85:A2:98:86
X509v3 Authority Key Identifier:
keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:bc:9d:db:ba:43:44:0b:6c:26:53:c9:36:94:b7:e5:f3:e7:
fb:d5:bc:67:8d:ad:f5:27:ac:1d:e9:20:10:5c:a5:0b:cf:90:
4a:5c:98:ae:3c:00:17:15:9c:9b:cd:14:5e:4b:c2:ff:c9:7c:
c7:58:54:e2:67:2d:50:84:18:1d:59:2c:21:d9:31:11:5a:ca:
90:06:d9:6d:d6:1c:0e:1a:1a:00:70:e2:46:eb:7a:da:75:61:
fa:30:95:85:71:f4:db:fb:16:b0:89:4a:2f:c9:7b:37:30:0d:
ab:b7:66:dc:b6:54:c1:dc:3a:3b:51:7b:28:a8:da:d3:83:e6:
86:58:e9:fa:6c:60:a7:07:d4:c6:a0:ba:6f:a7:d0:31:ba:af:
c5:37:d9:18:76:db:19:d7:76:dc:68:82:a4:24:76:65:ab:93:
63:98:9e:7e:b3:ae:36:9e:73:cd:f1:d1:d1:e7:a3:6b:7c:a6:
83:16:58:4e:21:5b:ae:b9:e5:e3:2a:9c:2a:df:a6:d3:4a:ab:
8c:5d:cc:bf:ea:e4:a5:ca:6c:84:73:84:d8:ac:6f:e8:5a:b7:
69:5d:df:2e:25:ab:f4:5b:69:fe:ce:34:c8:c6:11:07:33:24:
ca:28:f4:f8:c8:e9:2e:0e:65:cd:48:68:a5:20:c9:ef:8e:53:
f4:98:dc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:18 2025 by rpki-client