Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
File: W8KZyUmzraue-TUmM_zsw7cr1Rg.mft (raw, json)
Hash identifier: LwxCaAC8Pi2TS8lwLwNlIE1bbHNnV1BkD++Na0b5yFM=
Subject key identifier: E9:F9:E5:25:E1:9C:CB:F8:22:8C:44:BC:19:AB:10:FF:A6:F4:50:5A
Authority key identifier: 5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
Certificate issuer: /CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Certificate serial: 0199FC58C9D8424291330F76706AB6558524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
Manifest number: 13F2
Signing time: Sun 19 Oct 2025 12:01:41 +0000
Manifest this update: Sun 19 Oct 2025 12:01:41 +0000
Manifest next update: Mon 20 Oct 2025 12:01:41 +0000
Files and hashes: 1: W8KZyUmzraue-TUmM_zsw7cr1Rg.crl (hash: xWxwZx/30kg6eBWuEcZ9X89AeCttx50Am3Xxl1S2API=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c9:d8:42:42:91:33:0f:76:70:6a:b6:55:85:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Validity
Not Before: Oct 19 12:01:41 2025 GMT
Not After : Oct 20 12:01:41 2025 GMT
Subject: CN=e9f9e525e19ccbf8228c44bc19ab10ffa6f4505a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:51:69:e3:ec:d8:90:bc:99:2d:db:1f:bd:da:
7c:c0:f2:60:60:96:2a:38:f1:0f:74:2c:6f:35:a5:
a7:a5:77:1e:d4:ec:90:60:4b:bf:14:7e:a5:ad:f3:
fb:24:34:66:0e:80:40:e0:69:6f:2e:a7:aa:1d:e5:
76:42:13:42:2c:15:d9:60:0b:e4:04:2c:71:f8:be:
c4:d0:65:9c:99:15:b6:ab:10:27:7a:24:fa:05:e8:
b6:72:16:f7:30:4a:30:7b:8c:de:ae:c4:a7:e1:bc:
a5:48:b4:b4:0e:b8:45:8d:43:5d:e4:1a:03:bc:0e:
09:c6:fb:7e:65:a5:ff:07:86:aa:de:cb:83:ed:5e:
c7:0b:08:a6:a0:92:87:47:30:68:15:9d:44:d0:de:
8c:e5:68:75:c6:94:9d:81:de:f1:58:c3:61:f6:42:
78:5e:c3:a2:ef:ea:20:0e:9d:40:a3:b6:e7:c5:1a:
2c:ae:88:83:ee:f3:0a:a6:94:30:14:cb:94:be:ee:
5d:5e:1d:7f:c3:9f:b5:8a:d0:9f:7c:18:8d:7f:f2:
dd:a0:3e:51:4e:18:ab:6b:5d:90:4e:95:7d:8f:7b:
11:31:ed:25:da:0e:55:8c:39:eb:49:21:10:2b:3c:
5f:62:d5:08:b5:57:ff:c9:a7:36:c6:66:d4:13:2f:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F9:E5:25:E1:9C:CB:F8:22:8C:44:BC:19:AB:10:FF:A6:F4:50:5A
X509v3 Authority Key Identifier:
keyid:5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7a:5b:26:91:97:da:2d:e6:0b:fe:3e:3a:62:d8:a2:25:02:
67:46:14:32:fd:c0:0e:07:93:6b:5d:3b:59:2d:38:b5:8c:93:
ef:59:4c:12:91:c0:fd:79:26:2e:2e:e3:23:f8:50:d1:8d:a9:
21:20:e1:b2:7c:04:9c:3b:94:ec:03:c4:42:62:1c:6a:bd:5c:
d8:d8:e5:12:74:d8:b5:b5:b0:d7:03:ff:36:8d:51:6f:1c:3e:
28:4e:5c:04:6f:bd:fa:ff:c6:1f:0f:b6:c4:95:24:eb:97:b2:
8b:88:df:1f:0b:f6:3d:ad:ff:7d:7f:19:17:c4:95:d0:71:a5:
f6:cf:18:3c:f7:27:b6:09:8d:46:cc:8a:0e:06:e2:05:90:a9:
57:f3:85:aa:fc:3b:d0:17:87:af:28:6e:50:3a:f5:ca:a5:4c:
00:a2:85:3b:e2:30:77:c8:cd:94:5a:a0:fb:5e:8f:7c:e6:44:
6b:00:4b:05:1b:d7:3a:71:97:f9:18:ca:d7:0f:0f:23:90:2e:
2f:41:ee:67:7c:ee:da:8f:ab:37:db:f1:8f:3f:16:c8:e2:81:
8b:84:19:25:e4:52:33:24:56:28:26:17:b6:d9:56:b6:4d:3c:
c6:0f:3b:75:ee:c3:ee:b9:3c:3b:58:5e:38:a3:0a:f2:de:f6:
15:8d:c9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:46 2025 by rpki-client