
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
File: WLtUmHY5ugxs-8rVmMP145_KlFw.mft (raw, json)
Hash identifier: F4vn0BcwAEH0quHunWEH1oPj5KsVq8tZ50fTXE96c0w=
Subject key identifier: CD:C6:AF:DA:DF:B4:05:37:0C:DF:87:EF:1F:C8:6F:1A:A9:45:36:61
Authority key identifier: 58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
Certificate issuer: /CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Certificate serial: 0198D65F27CFC2D88FB96198B9457B0A7DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:16 +0000
Manifest this update: Sat 23 Aug 2025 10:00:16 +0000
Manifest next update: Sun 24 Aug 2025 10:00:16 +0000
Files and hashes: 1: BfcfF2b1LL5M2AE__W3yCJVNAKA.roa (hash: +bgWpcxXbBLXQoTPRn9MMXKJT/S9VM5GWgJ62Kc9z/4=)
2: WLtUmHY5ugxs-8rVmMP145_KlFw.crl (hash: CKl0kc4+qBYZKjeiaToifSUhWId5khJhSqtaeXxas70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:27:cf:c2:d8:8f:b9:61:98:b9:45:7b:0a:7d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Validity
Not Before: Aug 23 10:00:16 2025 GMT
Not After : Aug 24 10:00:16 2025 GMT
Subject: CN=cdc6afdadfb405370cdf87ef1fc86f1aa9453661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:f3:3c:96:2b:65:61:f5:5e:fd:43:bd:5b:
21:6d:96:22:41:15:a2:47:af:10:3d:cd:26:66:80:
16:67:7e:ff:13:85:8b:13:9b:36:86:9b:87:e3:3c:
07:85:a6:3f:c4:f2:03:4f:b9:5d:39:eb:60:6b:57:
dd:76:d3:b6:f9:96:93:f3:fa:a7:fe:61:56:32:f3:
49:50:75:66:b9:a7:a9:07:45:0b:5b:8a:96:1b:47:
2e:9f:ff:3c:6d:14:18:64:03:76:15:6d:c7:1a:5c:
37:cc:86:38:77:65:75:bb:5b:b6:ce:53:26:11:29:
64:3b:44:2b:04:24:9c:79:2a:94:1c:da:57:6d:77:
ee:47:c1:d1:b8:6d:52:86:89:4f:c0:94:fb:d1:19:
df:d9:c5:17:7d:95:f6:1c:f5:15:46:4d:9b:82:64:
e1:01:03:aa:e6:7e:a6:08:3f:72:5c:2f:db:cf:20:
83:26:d8:75:a3:54:01:73:29:a5:57:9a:36:30:3c:
3a:fb:29:f7:1e:ed:93:08:95:f5:da:35:9d:c8:bd:
43:ce:ec:89:89:32:f2:1a:7e:5b:69:07:53:96:07:
0f:5b:9b:96:bc:e2:68:6c:28:f2:86:53:bb:90:76:
9f:77:92:7a:9f:9d:08:0c:2a:8a:f2:7a:69:f5:a7:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C6:AF:DA:DF:B4:05:37:0C:DF:87:EF:1F:C8:6F:1A:A9:45:36:61
X509v3 Authority Key Identifier:
keyid:58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:f4:75:3a:bb:b4:21:1d:4d:a1:d8:45:d7:17:67:d9:f2:48:
16:53:fa:b4:a9:e0:de:38:99:3c:b8:3b:54:84:ad:65:2d:69:
4d:12:f0:9e:12:0d:45:85:e3:2e:f2:25:83:95:87:96:f8:2a:
e6:90:4a:74:07:0d:86:f7:b3:b4:12:8e:cd:44:b6:06:c4:f6:
c2:46:23:ff:32:70:fb:a8:14:57:6a:7a:48:32:c3:d1:47:8e:
e4:6e:c5:b3:1c:48:57:05:f2:d8:d0:2f:4f:7c:f4:07:a2:b5:
87:79:e8:6f:c3:a1:97:c7:70:b0:a8:3f:00:86:73:9c:a9:b9:
1b:f3:4f:1a:43:61:b8:a8:cb:c8:08:e8:0f:6a:6a:e1:3a:49:
b6:c2:c8:db:52:a2:95:a3:a3:ee:6e:fc:0c:e6:07:ca:00:bd:
d2:cf:d6:86:8c:c4:76:5e:05:9e:96:b0:0c:99:9b:d2:11:4a:
70:a2:60:6d:38:33:46:5a:56:ca:53:30:bc:34:d9:6d:c1:86:
33:f5:f1:bd:f7:4b:4c:79:9d:bf:aa:52:f7:bf:0b:b9:6c:81:
6f:5e:c4:5c:8e:67:25:55:6b:88:2e:1d:1f:ea:fe:f9:b1:64:
98:07:b1:4d:5a:de:d7:61:f1:61:6e:f8:fe:75:01:c4:2d:49:
97:9f:00:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:11:51 2025 by rpki-client