Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
File: WLtUmHY5ugxs-8rVmMP145_KlFw.mft (raw, json)
Hash identifier: CkC8PvOVfVbXUFcjVMiJzV3FRpK4KTxtDzAoYkYZO4o=
Subject key identifier: B9:BD:35:6F:58:53:D6:D6:29:E9:5F:0A:A2:70:F5:34:B6:6D:64:8A
Authority key identifier: 58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
Certificate issuer: /CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Certificate serial: 019A71B8D302A87C145EE93AF8CF7BA14405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:09 +0000
Manifest this update: Tue 11 Nov 2025 07:02:09 +0000
Manifest next update: Wed 12 Nov 2025 07:02:09 +0000
Files and hashes: 1: BfcfF2b1LL5M2AE__W3yCJVNAKA.roa (hash: +bgWpcxXbBLXQoTPRn9MMXKJT/S9VM5GWgJ62Kc9z/4=)
2: WLtUmHY5ugxs-8rVmMP145_KlFw.crl (hash: 1DUtubdt1GibXIViuChjx/Q7td6w14t+OG8tlg69d1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d3:02:a8:7c:14:5e:e9:3a:f8:cf:7b:a1:44:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Validity
Not Before: Nov 11 07:02:09 2025 GMT
Not After : Nov 12 07:02:09 2025 GMT
Subject: CN=b9bd356f5853d6d629e95f0aa270f534b66d648a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:8f:e4:47:85:48:ec:ad:b1:02:ee:34:cc:
3f:0a:ba:7e:9d:9f:f3:e9:07:e9:bc:62:2a:94:67:
23:b3:be:b8:b5:a6:7f:0a:ef:80:28:c6:b9:25:af:
d0:e2:69:82:ec:98:cc:dd:40:ac:86:7e:4c:33:8d:
3e:05:64:d7:b4:63:de:27:b3:c8:20:a4:b5:e7:13:
83:67:66:6d:5d:bb:b9:04:3a:14:32:26:2e:1c:20:
a0:37:52:6b:3f:fc:b3:27:3e:30:2c:08:ff:ce:80:
1a:0f:5c:57:37:4a:7e:d4:d3:27:94:74:86:11:55:
b6:51:53:94:00:e7:9f:39:25:ad:2d:74:b2:8c:e7:
f1:f9:11:f0:47:08:48:3c:92:87:d2:e1:d2:2b:45:
8f:c9:ec:0f:73:26:bb:50:78:e2:12:f1:5e:b7:89:
68:30:7e:b3:bb:70:b2:6c:e3:4c:02:d0:a3:3a:51:
74:db:1e:b1:b7:19:e1:8c:ac:93:3d:6a:f0:5b:92:
cd:21:36:c6:c2:a7:c6:9d:38:df:b9:fb:5a:97:d8:
30:4f:02:ad:a9:f1:0c:0b:21:85:f5:87:c7:e0:cf:
9b:ad:49:a3:3c:37:c1:53:5b:42:f2:3d:ef:18:e3:
c8:80:61:54:f2:28:3b:ab:28:d5:a0:b6:15:89:ab:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BD:35:6F:58:53:D6:D6:29:E9:5F:0A:A2:70:F5:34:B6:6D:64:8A
X509v3 Authority Key Identifier:
keyid:58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:19:50:f4:d8:52:f2:ab:ad:1e:d7:86:67:ef:84:3f:34:53:
33:72:70:c1:6b:f1:4c:b1:c7:cd:3c:e8:c3:f3:10:54:b9:03:
79:70:43:7f:6d:04:1c:ea:23:b0:83:d0:9b:27:a3:fb:82:09:
5e:1c:97:01:d9:b6:1f:29:c4:3e:46:66:7b:ae:e2:09:d5:24:
b9:d4:24:67:74:24:37:61:28:d0:de:c3:b8:78:f6:16:1e:04:
2d:ec:0a:f9:dc:ec:bf:6f:d6:e8:92:20:c8:de:b7:74:5c:5f:
96:b4:6e:a6:81:5a:68:01:c6:98:68:26:e8:48:29:db:4a:87:
33:aa:e1:4a:f4:56:93:5a:12:0b:b1:c3:a6:ef:b3:80:65:7e:
32:4e:22:56:7e:ac:a5:25:e2:67:38:75:9c:00:0f:15:99:b8:
1c:96:7a:4a:61:9f:c8:6e:1f:07:e6:d0:f7:25:5b:4f:b4:38:
2f:59:ae:bf:6f:20:cd:bd:bc:7f:52:ae:10:ed:b0:ad:36:61:
ac:74:51:0d:3c:e8:e6:34:6c:60:1e:60:87:a3:86:d5:a6:48:
eb:ff:39:2f:6b:46:ba:df:ee:a8:4f:a2:20:f2:99:dd:37:18:
0a:17:13:92:d8:7f:d0:bf:9b:d3:95:c1:40:ee:54:f4:14:52:
0b:0f:ca:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:55 2025 by rpki-client