Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
File: WLtUmHY5ugxs-8rVmMP145_KlFw.mft (raw, json)
Hash identifier: T75FypHiUFVzfk5GpzcBtabcwonvhoqlFE/YTY0t6Zc=
Subject key identifier: D3:06:DD:07:7B:C2:07:05:20:8F:1C:46:F0:43:BF:EE:86:09:BE:EC
Authority key identifier: 58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
Certificate issuer: /CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Certificate serial: 0199FBEB23B32697894935BD94DBEAADD306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:55 +0000
Manifest this update: Sun 19 Oct 2025 10:01:55 +0000
Manifest next update: Mon 20 Oct 2025 10:01:55 +0000
Files and hashes: 1: BfcfF2b1LL5M2AE__W3yCJVNAKA.roa (hash: +bgWpcxXbBLXQoTPRn9MMXKJT/S9VM5GWgJ62Kc9z/4=)
2: WLtUmHY5ugxs-8rVmMP145_KlFw.crl (hash: 62XAX+rcy87BecV1IZbfy5FL314z2wrtCsqVrj0l0FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:23:b3:26:97:89:49:35:bd:94:db:ea:ad:d3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Validity
Not Before: Oct 19 10:01:55 2025 GMT
Not After : Oct 20 10:01:55 2025 GMT
Subject: CN=d306dd077bc20705208f1c46f043bfee8609beec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:5a:36:dc:ad:9a:20:3b:ad:1d:58:18:b4:
99:78:8b:42:cd:58:14:2f:90:45:3c:d9:97:43:27:
cc:ae:9a:87:e0:1d:90:3a:1a:50:88:36:96:d1:5f:
86:22:b8:05:6f:a9:84:d0:1a:e6:a7:8e:e1:02:74:
a5:4b:c7:81:84:d1:34:60:a0:c6:58:97:b5:24:d8:
0c:ae:e7:03:72:e1:66:3a:93:17:ff:70:05:ef:b1:
9f:f9:68:2f:c7:b2:06:e7:fe:98:8a:1c:0f:91:fe:
d2:32:de:5a:71:11:06:39:c1:4e:ee:dd:d7:96:50:
7d:89:ba:1a:fd:90:f0:ed:6a:af:07:b4:dd:ef:5a:
5a:b3:7a:e0:46:7e:46:15:d8:1b:6e:e5:88:37:01:
c4:74:f4:aa:af:98:30:45:b4:76:e4:e1:87:3b:50:
08:3f:02:db:fe:c3:e5:8b:16:4b:fe:02:90:9a:a7:
5b:76:94:48:95:ee:7c:b5:90:5a:e5:e1:d0:90:3e:
d9:70:d4:57:07:63:16:8e:ca:c2:10:cb:dc:a9:1d:
56:51:e3:0c:31:50:99:22:71:12:73:12:89:e1:81:
18:eb:fe:28:0b:6f:f4:1c:78:23:7f:cd:b9:b0:01:
02:66:8d:85:64:9a:90:e1:4d:fb:b4:94:01:21:99:
dc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:06:DD:07:7B:C2:07:05:20:8F:1C:46:F0:43:BF:EE:86:09:BE:EC
X509v3 Authority Key Identifier:
keyid:58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:93:d1:ba:ff:19:b7:fa:1f:e0:00:28:12:07:cd:c2:b3:31:
1e:e9:3e:c5:c9:50:d8:26:9c:8c:be:16:e9:3d:a5:92:06:63:
38:84:51:a4:66:75:c4:6f:52:da:fa:e7:a6:71:a2:e2:bc:f8:
54:6c:07:11:fd:f3:66:fa:0c:84:6f:f0:b2:9d:d5:c8:f7:39:
93:45:ae:3b:8b:b7:2e:82:b6:91:8d:1a:15:b8:a2:ad:10:07:
83:78:08:43:33:c3:8e:b5:7c:f8:1f:12:b6:4c:89:69:8f:f5:
c4:3b:ba:9c:73:35:f7:de:b1:c0:5a:f7:7a:95:43:a5:86:64:
8e:60:15:f4:44:1d:2b:ba:83:c8:f3:12:20:3c:d4:1d:ac:3b:
b7:8d:2d:b6:44:6d:86:85:ed:fb:e8:44:26:1c:9f:b8:f0:22:
ad:17:2c:1a:2a:be:3e:07:c2:2a:ec:ec:b8:36:8f:1d:20:82:
eb:e0:c0:51:0d:2b:25:2a:25:e2:df:6b:40:a7:c3:61:e9:5b:
81:b9:5a:bd:69:7b:c8:74:c4:55:ee:16:3d:4f:64:f8:22:ca:
8d:cf:af:35:2f:63:11:49:97:42:b4:36:3a:40:f5:6c:7f:bd:
89:c0:48:5f:bd:dd:ae:d7:bd:f8:2d:68:fd:04:fe:9b:82:12:
c2:f4:42:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76yOzJpeJSTW9lNvqrdMGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YmI1NDk4NzYzOWJhMGM2Y2ZiY2FkNTk4YzNmNWUzOWZj
YTk0NWMwHhcNMjUxMDE5MTAwMTU1WhcNMjUxMDIwMTAwMTU1WjAzMTEwLwYDVQQD
EyhkMzA2ZGQwNzdiYzIwNzA1MjA4ZjFjNDZmMDQzYmZlZTg2MDliZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfhaNtytmiA7rR1YGLSZeItCzVgU
L5BFPNmXQyfMrpqH4B2QOhpQiDaW0V+GIrgFb6mE0Brmp47hAnSlS8eBhNE0YKDG
WJe1JNgMrucDcuFmOpMX/3AF77Gf+Wgvx7IG5/6YihwPkf7SMt5acREGOcFO7t3X
llB9iboa/ZDw7WqvB7Td71pas3rgRn5GFdgbbuWINwHEdPSqr5gwRbR25OGHO1AI
PwLb/sPlixZL/gKQmqdbdpRIle58tZBa5eHQkD7ZcNRXB2MWjsrCEMvcqR1WUeMM
MVCZInEScxKJ4YEY6/4oC2/0HHgjf825sAECZo2FZJqQ4U37tJQBIZncAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMG3Qd7wgcFII8cRvBDv+6GCb7sMB8GA1UdIwQY
MBaAFFi7VJh2OboMbPvK1ZjD9eOfypRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0x0VW1IWTV1Z3hzLThyVm1NUDE0NV9LbEZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yM2EyYjItNjliYi00OTMzLWFlNmYt
OGM5ZjJkNzA1OTQ4LzEvV0x0VW1IWTV1Z3hzLThyVm1NUDE0NV9LbEZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8yM2EyYjItNjliYi00OTMzLWFlNmYtOGM5ZjJkNzA1OTQ4
LzEvV0x0VW1IWTV1Z3hzLThyVm1NUDE0NV9LbEZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZPRuv8Z
t/of4AAoEgfNwrMxHuk+xclQ2CacjL4W6T2lkgZjOIRRpGZ1xG9S2vrnpnGi4rz4
VGwHEf3zZvoMhG/wsp3VyPc5k0WuO4u3LoK2kY0aFbiirRAHg3gIQzPDjrV8+B8S
tkyJaY/1xDu6nHM1996xwFr3epVDpYZkjmAV9EQdK7qDyPMSIDzUHaw7t40ttkRt
hoXt++hEJhyfuPAirRcsGiq+PgfCKuzsuDaPHSCC6+DAUQ0rJSol4t9rQKfDYelb
gblavWl7yHTEVe4WPU9k+CLKjc+vNS9jEUmXQrQ2OkD1bH+9icBIX73drte9+C1o
/QT+m4ISwvRCnQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:47 2025 by rpki-client