
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
File: WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft (raw, json)
Hash identifier: r1Vx73H3XbZ30yjn14l0n9C2ALildG5SM3zqZVXRe8o=
Subject key identifier: 5F:2E:44:ED:BA:D0:4E:28:03:5D:E1:74:05:51:22:72:74:AE:89:23
Authority key identifier: 5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
Certificate issuer: /CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Certificate serial: 0199FB4594FE713ADBFC21B6B10D86A13CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 07:01:05 +0000
Manifest this update: Sun 19 Oct 2025 07:01:05 +0000
Manifest next update: Mon 20 Oct 2025 07:01:05 +0000
Files and hashes: 1: H-w2T99zCrrlKQYxLvTqjVHNtNs.roa (hash: 8/w5H9itBFo+zRfCIM8deFlqPQ7aIcS5e5Q1K2Dc7sw=)
2: WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl (hash: OSsJryACjXJLV+7aVmSseUUTZwZA/RJSn3YJzPknqyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:94:fe:71:3a:db:fc:21:b6:b1:0d:86:a1:3c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Validity
Not Before: Oct 19 07:01:05 2025 GMT
Not After : Oct 20 07:01:05 2025 GMT
Subject: CN=5f2e44edbad04e28035de1740551227274ae8923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4c:2d:21:a1:60:52:77:f6:f0:ab:e4:4d:33:
6d:45:b6:82:32:a2:0e:a4:65:0d:31:ec:29:9a:27:
92:ed:17:85:66:ab:8c:57:8f:6e:4d:bd:a3:01:11:
05:78:fa:ce:cc:7c:a9:ac:9b:a2:99:d1:45:5e:03:
ff:f9:8b:78:2f:77:45:81:34:70:8f:4a:68:d0:31:
2c:87:2e:1d:68:42:9d:75:b4:ef:97:c9:ff:84:d6:
4a:9f:94:e4:1a:42:f8:df:eb:4f:4a:30:d7:ee:7e:
9a:e8:b5:2c:00:4f:41:a7:d1:fb:54:1d:cb:c5:93:
0d:a7:57:fb:c9:a7:42:27:cd:3c:dc:02:56:de:98:
79:d0:84:62:83:35:f9:84:80:00:3d:c8:36:19:0a:
de:1c:52:2f:1d:e5:77:a6:26:c9:fa:7a:96:7a:a5:
60:7d:26:72:2b:fc:53:19:fa:67:e0:ce:83:6e:81:
12:d7:2c:e1:1c:ff:dc:2b:d7:0f:19:10:47:ce:38:
e8:0e:c3:6b:fc:2b:78:da:4d:aa:0c:89:bb:a7:8f:
c0:94:79:7f:aa:cb:06:a9:07:1d:bd:84:4a:64:e0:
14:20:5a:5d:5c:d3:9c:4f:ba:6c:7b:20:5f:bc:eb:
52:ed:59:b6:6a:28:26:17:de:9a:99:27:6d:d7:cc:
e1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2E:44:ED:BA:D0:4E:28:03:5D:E1:74:05:51:22:72:74:AE:89:23
X509v3 Authority Key Identifier:
keyid:5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:7e:d0:30:12:15:12:8f:35:ae:d5:7f:5a:b0:ca:ab:92:41:
fc:4f:0c:6f:b0:0c:f3:4f:38:ba:9c:75:ac:9e:16:d6:2a:c4:
a3:a5:58:97:e8:a4:cb:0c:62:b0:a0:58:12:ac:fc:db:aa:f4:
26:72:89:2e:2c:e0:c1:bf:aa:42:78:72:00:77:0b:4c:d1:a2:
87:1c:e7:8d:6d:3c:82:72:4e:68:b6:02:0d:9b:8e:66:4a:4b:
6a:f1:0f:11:15:6e:81:3a:bd:2b:ce:dc:30:62:fc:52:7c:86:
08:0b:fe:71:69:95:ee:8a:d0:1e:22:6d:ce:b6:cf:9a:74:90:
ed:52:1d:99:5d:98:db:bc:37:01:29:72:99:da:f6:a1:4c:ba:
2f:2e:0e:e2:dd:f7:c5:6d:1f:dc:3e:f7:a8:6a:81:f2:33:08:
69:db:b0:1f:0c:9c:84:bc:12:27:23:d5:4f:b6:b3:52:c9:30:
50:a8:f2:1d:9e:3f:c7:20:65:2e:b6:55:dc:01:24:79:c1:52:
e4:a0:cc:a3:50:25:e4:e8:7c:91:38:9f:39:eb:8a:2e:e4:e0:
47:fa:bc:24:3c:87:7f:63:17:03:74:4d:4a:de:14:fd:17:41:
88:82:34:0a:77:f0:49:57:9d:02:fe:35:a7:11:aa:7c:a0:f9:
9a:b0:c3:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RZT+cTrb/CG2sQ2GoTzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZTQzNDFlMjNhMzMxNWVkNDQ1NWE1NDVkMWE0OGNlZjI5
ZTc4OTMwHhcNMjUxMDE5MDcwMTA1WhcNMjUxMDIwMDcwMTA1WjAzMTEwLwYDVQQD
Eyg1ZjJlNDRlZGJhZDA0ZTI4MDM1ZGUxNzQwNTUxMjI3Mjc0YWU4OTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEwtIaFgUnf28KvkTTNtRbaCMqIO
pGUNMewpmieS7ReFZquMV49uTb2jAREFePrOzHyprJuimdFFXgP/+Yt4L3dFgTRw
j0po0DEshy4daEKddbTvl8n/hNZKn5TkGkL43+tPSjDX7n6a6LUsAE9Bp9H7VB3L
xZMNp1f7yadCJ8083AJW3ph50IRigzX5hIAAPcg2GQreHFIvHeV3pibJ+nqWeqVg
fSZyK/xTGfpn4M6DboES1yzhHP/cK9cPGRBHzjjoDsNr/Ct42k2qDIm7p4/AlHl/
qssGqQcdvYRKZOAUIFpdXNOcT7pseyBfvOtS7Vm2aigmF96amSdt18zh7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8uRO260E4oA13hdAVRInJ0rokjMB8GA1UdIwQY
MBaAFFrkNB4jozFe1EVaVF0aSM7ynniTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3VRMEhpT2pNVjdVUlZwVVhScEl6dktlZUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mMGVhMmMtZDI3ZC00ZWNmLWJhMjUt
MWUwOGRmZDIzNWM3LzEvV3VRMEhpT2pNVjdVUlZwVVhScEl6dktlZUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mMGVhMmMtZDI3ZC00ZWNmLWJhMjUtMWUwOGRmZDIzNWM3
LzEvV3VRMEhpT2pNVjdVUlZwVVhScEl6dktlZUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApn7QMBIV
Eo81rtV/WrDKq5JB/E8Mb7AM8084upx1rJ4W1irEo6VYl+ikywxisKBYEqz826r0
JnKJLizgwb+qQnhyAHcLTNGihxznjW08gnJOaLYCDZuOZkpLavEPERVugTq9K87c
MGL8UnyGCAv+cWmV7orQHiJtzrbPmnSQ7VIdmV2Y27w3ASlymdr2oUy6Ly4O4t33
xW0f3D73qGqB8jMIaduwHwychLwSJyPVT7azUskwUKjyHZ4/xyBlLrZV3AEkecFS
5KDMo1Al5Oh8kTifOeuKLuTgR/q8JDyHf2MXA3RNSt4U/RdBiII0CnfwSVedAv41
pxGqfKD5mrDDDQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:51 2025 by rpki-client