Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
File: WSh1E_SesUCO5BsoHIsnczB6iRA.mft (raw, json)
Hash identifier: FYCD9qHwKVGopoaJVES+jqc3n6SVPtnmVun9u6dXz3c=
Subject key identifier: 40:CE:88:B6:32:29:4F:8E:40:E1:E6:57:0B:F4:84:52:70:B5:B4:4F
Authority key identifier: 59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10
Certificate issuer: /CN=59287513f49eb1408ee41b281c8b2773307a8910
Certificate serial: 0199FC5899500D5AF2E84A49CF947E374316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:01:28 +0000
Manifest this update: Sun 19 Oct 2025 12:01:28 +0000
Manifest next update: Mon 20 Oct 2025 12:01:28 +0000
Files and hashes: 1: WSh1E_SesUCO5BsoHIsnczB6iRA.crl (hash: m+8TaxROR64loxtGUvIkYbfxisI9E3azCXLXI1UTa+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:99:50:0d:5a:f2:e8:4a:49:cf:94:7e:37:43:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59287513f49eb1408ee41b281c8b2773307a8910
Validity
Not Before: Oct 19 12:01:28 2025 GMT
Not After : Oct 20 12:01:28 2025 GMT
Subject: CN=40ce88b632294f8e40e1e6570bf4845270b5b44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:ef:63:ac:a8:7c:e9:e7:8c:c3:a8:81:27:
d3:6f:c6:fc:1d:ec:fd:3f:f7:1b:4f:6a:34:16:e0:
f1:3a:79:4f:9a:43:36:88:05:44:e7:d7:37:81:d6:
5f:05:4b:8f:5f:86:7e:b0:dd:9f:0f:70:4d:33:d9:
e6:6c:0e:70:71:af:80:03:70:4e:ff:ae:61:60:cb:
d6:95:d6:65:91:01:50:02:84:34:84:e6:7d:8d:ea:
66:6a:eb:0e:6a:4e:e9:f7:81:2c:b9:4d:01:eb:32:
19:9e:98:3d:49:52:1d:3e:fc:6b:29:ac:a6:99:e0:
72:de:df:c3:38:2d:a3:85:93:c9:f5:14:2d:36:33:
49:07:76:62:9c:41:9f:db:2a:5f:17:73:ed:fa:3c:
a0:55:97:6c:85:7a:37:ad:85:8d:88:56:98:cd:40:
5d:c1:08:08:d8:24:fa:8c:53:79:1c:56:b9:aa:f6:
b5:fb:4a:9f:90:c8:2e:0f:bd:87:21:0b:35:ec:3a:
9e:45:5c:ee:0c:02:21:c3:5d:a5:25:62:5a:29:9e:
95:87:a4:57:13:19:22:e9:01:6a:4b:d2:72:44:b5:
9f:fa:07:b6:cf:76:c1:85:74:f8:a1:4a:f3:8a:9d:
58:63:20:15:54:af:ea:7c:39:e1:5a:52:63:d3:bb:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CE:88:B6:32:29:4F:8E:40:E1:E6:57:0B:F4:84:52:70:B5:B4:4F
X509v3 Authority Key Identifier:
keyid:59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:14:05:5e:d0:94:b8:a1:7c:5f:62:ea:ad:4b:1b:1b:9f:21:
7c:0a:91:d7:6e:82:70:96:27:bf:3b:76:dc:1d:33:5c:0d:fe:
c4:64:7c:a3:0e:4a:b5:67:fe:cb:e0:90:0d:cc:5b:5f:b0:91:
66:f0:c1:01:89:d8:88:f5:01:dc:46:89:55:fb:eb:78:18:b7:
ae:dd:fc:c4:b7:4b:80:73:d9:05:f1:6d:a0:e7:f7:cd:06:a5:
3b:98:2d:87:ad:56:81:b4:d3:1d:44:e8:22:93:17:c5:67:18:
f2:e2:f0:99:68:4b:4e:ce:56:f6:b0:a3:b8:d4:df:37:34:04:
ab:cc:dd:03:ca:1d:91:b0:b9:2d:b2:4b:56:fb:76:9c:93:f3:
82:18:b8:70:cc:0a:c9:93:f0:45:c9:9d:83:da:05:05:09:0d:
5a:83:db:55:3f:d5:34:32:a6:ee:e5:85:a5:c6:19:64:d6:10:
0b:3b:77:f9:43:fe:b4:d2:14:8f:4f:62:20:bd:2b:aa:20:2b:
90:22:21:c5:76:c4:90:e3:98:63:71:5c:20:8b:91:d5:28:9c:
ab:c7:78:91:d8:79:1a:dd:de:79:dc:5f:5b:64:a3:5b:99:e7:
69:98:48:4d:b0:4a:cb:d5:2a:9b:cb:ea:d5:b5:ed:5f:dd:bb:
1a:8e:1b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:37 2025 by rpki-client