Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
File: WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft (raw, json)
Hash identifier: mGeizd94Z5i5fnhe6Kr8yfiuHYKKCDbtaOL5V2R+WEI=
Subject key identifier: BC:AD:FB:80:87:50:1D:37:02:EA:93:9B:80:2A:00:F2:84:35:24:B9
Authority key identifier: 5A:15:68:19:9D:29:23:9A:27:45:AD:43:B6:96:FB:DC:2E:06:70:6D
Certificate issuer: /CN=5a1568199d29239a2745ad43b696fbdc2e06706d
Certificate serial: 0199FBEA9CDF66847E1947787A0E023BA27A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
Manifest number: 16AA
Signing time: Sun 19 Oct 2025 10:01:20 +0000
Manifest this update: Sun 19 Oct 2025 10:01:20 +0000
Manifest next update: Mon 20 Oct 2025 10:01:20 +0000
Files and hashes: 1: WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl (hash: ztSRtKp1h3kplnW8JQaYeFsgToiSeF3NRnp31vjFI9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9c:df:66:84:7e:19:47:78:7a:0e:02:3b:a2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1568199d29239a2745ad43b696fbdc2e06706d
Validity
Not Before: Oct 19 10:01:20 2025 GMT
Not After : Oct 20 10:01:20 2025 GMT
Subject: CN=bcadfb8087501d3702ea939b802a00f2843524b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:a0:35:e3:5a:81:5d:60:85:a7:c4:4a:9d:
75:d3:01:da:09:7b:c8:92:58:6f:1e:2f:ce:32:91:
35:50:b0:78:30:c6:e6:87:b3:34:89:f6:8d:8e:76:
ec:f3:9c:35:f7:16:ac:49:aa:c0:05:dc:66:95:44:
ae:bc:cf:f9:24:cd:cd:61:85:fd:78:dd:0d:81:99:
a6:53:86:85:12:6d:e5:dd:b7:83:34:60:bf:2b:9f:
82:36:57:3d:88:04:c0:3c:66:e9:97:05:f9:47:ef:
c3:3a:2e:4c:b8:22:e0:e9:b2:b5:bb:ee:69:e3:7d:
bb:74:d4:42:a8:3f:3f:cb:e3:69:60:4e:1c:1a:8a:
03:f4:30:62:a6:5d:a0:1b:61:58:67:e9:7a:ba:fb:
f0:24:92:8a:b5:ff:37:9c:e2:00:f2:15:1e:ce:ec:
7d:62:7e:26:4e:51:28:0c:58:c9:fc:2e:c5:5a:41:
82:33:fe:0f:89:7d:14:a3:51:df:de:fe:4a:99:81:
e0:92:aa:81:1c:76:c7:b9:57:45:19:5c:e1:59:9b:
0e:41:37:97:41:e3:4f:eb:31:f4:de:cd:9b:9d:68:
9b:e4:51:97:ae:86:e9:bd:e0:bd:05:c2:42:e0:a7:
32:b7:ce:f6:50:f1:0b:21:44:47:e9:93:d6:12:f1:
76:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AD:FB:80:87:50:1D:37:02:EA:93:9B:80:2A:00:F2:84:35:24:B9
X509v3 Authority Key Identifier:
keyid:5A:15:68:19:9D:29:23:9A:27:45:AD:43:B6:96:FB:DC:2E:06:70:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:79:9e:15:b4:5a:12:2f:b5:40:3e:af:2e:5e:ee:d8:ed:ae:
18:cb:87:8b:30:66:da:59:e3:4c:bb:73:8b:ae:da:f8:33:4f:
20:3e:95:18:9b:a4:28:39:0d:fd:7b:55:84:80:88:43:db:55:
99:6a:3c:5c:a2:4a:1f:33:1a:e2:f0:68:3c:69:6b:b5:e6:50:
60:27:d5:37:8e:43:2b:fc:ca:e3:e3:04:99:fb:89:a5:c7:8c:
79:3f:26:58:3e:c9:d5:a4:c8:bd:31:60:3d:b8:93:e1:6e:b8:
a7:89:34:ed:8d:25:61:c2:c3:21:1b:cf:d7:6b:c0:05:a7:9f:
35:60:2a:19:66:a5:0d:35:dc:c1:b9:67:23:e2:0d:a1:0b:3b:
59:e8:d5:7d:77:48:97:8c:85:9c:75:37:8a:8a:e1:4c:a6:71:
1f:11:de:f1:c9:ec:59:75:27:5f:c3:b2:ac:c6:a3:69:ff:66:
38:ab:be:f8:b5:f7:32:93:b6:5f:5c:8c:5a:51:40:10:72:bb:
b3:99:84:1a:e3:b9:df:2b:9e:fb:95:e1:00:f0:a5:43:60:b0:
cd:76:93:b7:bd:0a:6f:ba:e1:5d:e1:ac:2f:a9:39:d6:91:05:
a2:75:d4:ae:a9:81:1b:9c:17:2a:8d:28:7b:02:32:44:f3:52:
f6:6a:02:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76pzfZoR+GUd4eg4CO6J6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTU2ODE5OWQyOTIzOWEyNzQ1YWQ0M2I2OTZmYmRjMmUw
NjcwNmQwHhcNMjUxMDE5MTAwMTIwWhcNMjUxMDIwMTAwMTIwWjAzMTEwLwYDVQQD
EyhiY2FkZmI4MDg3NTAxZDM3MDJlYTkzOWI4MDJhMDBmMjg0MzUyNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYSgNeNagV1ghafESp110wHaCXvI
klhvHi/OMpE1ULB4MMbmh7M0ifaNjnbs85w19xasSarABdxmlUSuvM/5JM3NYYX9
eN0NgZmmU4aFEm3l3beDNGC/K5+CNlc9iATAPGbplwX5R+/DOi5MuCLg6bK1u+5p
4327dNRCqD8/y+NpYE4cGooD9DBipl2gG2FYZ+l6uvvwJJKKtf83nOIA8hUezux9
Yn4mTlEoDFjJ/C7FWkGCM/4PiX0Uo1Hf3v5KmYHgkqqBHHbHuVdFGVzhWZsOQTeX
QeNP6zH03s2bnWib5FGXrobpveC9BcJC4Kcyt872UPELIURH6ZPWEvF28wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyt+4CHUB03AuqTm4AqAPKENSS5MB8GA1UdIwQY
MBaAFFoVaBmdKSOaJ0WtQ7aW+9wuBnBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hWb0daMHBJNW9uUmExRHRwYjczQzRHY0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iOTIyMTMtNWMzNC00ZmM2LTkyY2Mt
NWJlOTY4NjBhZmM0LzEvV2hWb0daMHBJNW9uUmExRHRwYjczQzRHY0cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iOTIyMTMtNWMzNC00ZmM2LTkyY2MtNWJlOTY4NjBhZmM0
LzEvV2hWb0daMHBJNW9uUmExRHRwYjczQzRHY0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHmeFbRa
Ei+1QD6vLl7u2O2uGMuHizBm2lnjTLtzi67a+DNPID6VGJukKDkN/XtVhICIQ9tV
mWo8XKJKHzMa4vBoPGlrteZQYCfVN45DK/zK4+MEmfuJpceMeT8mWD7J1aTIvTFg
PbiT4W64p4k07Y0lYcLDIRvP12vABaefNWAqGWalDTXcwblnI+INoQs7WejVfXdI
l4yFnHU3iorhTKZxHxHe8cnsWXUnX8OyrMajaf9mOKu++LX3MpO2X1yMWlFAEHK7
s5mEGuO53yue+5XhAPClQ2CwzXaTt70Kb7rhXeGsL6k51pEFonXUrqmBG5wXKo0o
ewIyRPNS9moCZA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:46 2025 by rpki-client