Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
File: WUlpi7zST8nhqfX0FIbDGvGaS8g.mft (raw, json)
Hash identifier: YnEGf67lYMQg5fQ2DHIfLcCg9r2mHrSBs4NjKXgi4so=
Subject key identifier: 52:EA:02:7E:D6:5C:2F:A1:AE:54:1E:5F:B3:C5:C4:6B:67:C1:37:D5
Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
Certificate issuer: /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Certificate serial: 019A21ADE17D0421C874A775DC6631C122BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 18:00:34 +0000
Manifest this update: Sun 26 Oct 2025 18:00:34 +0000
Manifest next update: Mon 27 Oct 2025 18:00:34 +0000
Files and hashes: 1: WUlpi7zST8nhqfX0FIbDGvGaS8g.crl (hash: ybCu2fJxCj2wJ5XX7tsPSSZ4f/ObVYjuBhihj98aDX8=)
2: vt15ABy3zJP47x5DikC4lY7LNe4.roa (hash: IdpTO09MEQGHcGdgBzndMJHenkqW9uYtr/gnL2zPkrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:e1:7d:04:21:c8:74:a7:75:dc:66:31:c1:22:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Validity
Not Before: Oct 26 18:00:34 2025 GMT
Not After : Oct 27 18:00:34 2025 GMT
Subject: CN=52ea027ed65c2fa1ae541e5fb3c5c46b67c137d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:04:04:95:74:1b:fb:dd:77:87:e6:7d:3b:
ce:c3:25:50:12:48:91:a2:96:71:06:4e:a4:9d:90:
58:d1:35:a3:da:d0:b8:80:00:b0:fb:90:75:0e:ff:
f6:43:d4:47:ac:0f:1f:60:32:83:61:9d:90:21:50:
3e:ae:63:cd:2c:29:67:92:a7:b4:5b:e6:64:fe:2c:
b1:51:3f:0a:75:07:41:62:a2:e7:06:36:6d:86:9e:
4e:4b:ed:11:ac:4c:76:f1:26:e3:90:db:b6:22:93:
ca:45:b4:92:f7:28:8c:10:a0:07:a1:8f:a4:4b:3d:
3e:c5:03:80:9a:4e:46:f9:ad:8b:2f:24:97:30:03:
f9:8d:33:81:c9:e1:32:4f:b7:79:ef:b0:37:4b:b0:
a6:63:89:e9:61:d6:c4:36:75:f5:1d:fb:de:a2:ad:
90:02:f9:70:1a:dd:c2:5a:8f:ce:cd:69:21:fd:08:
4e:18:a3:e0:5c:a6:14:b8:d0:ac:10:39:7d:30:fd:
82:40:07:10:51:73:e4:86:d9:61:71:3b:0c:05:f9:
11:f6:fb:8d:2a:24:c9:b2:af:f7:7f:f1:33:05:cd:
ef:14:23:91:5c:9c:0d:0f:61:f6:d3:d0:b3:fe:d5:
31:f3:d1:ac:e8:e5:b4:e4:b1:ba:4c:dd:1c:63:1b:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EA:02:7E:D6:5C:2F:A1:AE:54:1E:5F:B3:C5:C4:6B:67:C1:37:D5
X509v3 Authority Key Identifier:
keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:26:fc:11:8d:b1:91:69:5f:9c:44:75:d1:01:27:97:a5:4c:
69:e7:e0:66:f9:0f:53:f4:d5:89:6b:a6:fc:51:9e:9f:f1:d7:
51:ab:56:b2:c2:01:0d:00:20:f7:4c:51:80:65:69:0d:cf:82:
f8:3f:39:f6:24:b4:3b:fe:4a:cf:7f:bf:f9:8c:69:c6:a3:2f:
e9:d1:32:37:2e:a3:60:a3:3d:39:4a:ba:59:ce:b9:13:58:88:
04:ef:62:9f:62:44:b4:99:23:6d:58:c7:bd:bb:11:38:5e:a7:
db:79:8e:7b:02:0e:84:e9:43:51:e4:04:e2:c9:16:6d:d8:cd:
07:15:f3:3f:a4:e5:61:e0:5a:ff:86:c2:2c:50:8a:6b:e3:11:
51:31:3a:6f:b8:4c:d5:1a:8f:00:a9:8a:3a:83:d7:f2:9f:23:
35:cf:e8:92:7d:47:3d:27:b3:b2:50:c1:e3:ab:8e:2e:6a:be:
8b:4a:85:e7:f6:fa:48:02:95:88:e5:29:45:bf:ad:3e:e7:7c:
b0:71:d6:49:9a:f5:11:fa:2e:f7:4e:15:6a:57:60:71:c2:3f:
1c:b1:7d:a4:5a:d0:93:bd:7c:ce:45:fa:f6:1a:83:cf:4f:c6:
52:72:ca:14:9a:39:10:f7:14:e3:a4:db:d7:fe:6c:7d:63:92:
a4:26:8d:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohreF9BCHIdKd13GYxwSK/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDk2OThiYmNkMjRmYzllMWE5ZjVmNDE0ODZjMzFhZjE5
YTRiYzgwHhcNMjUxMDI2MTgwMDM0WhcNMjUxMDI3MTgwMDM0WjAzMTEwLwYDVQQD
Eyg1MmVhMDI3ZWQ2NWMyZmExYWU1NDFlNWZiM2M1YzQ2YjY3YzEzN2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoIEBJV0G/vdd4fmfTvOwyVQEkiR
opZxBk6knZBY0TWj2tC4gACw+5B1Dv/2Q9RHrA8fYDKDYZ2QIVA+rmPNLClnkqe0
W+Zk/iyxUT8KdQdBYqLnBjZthp5OS+0RrEx28SbjkNu2IpPKRbSS9yiMEKAHoY+k
Sz0+xQOAmk5G+a2LLySXMAP5jTOByeEyT7d577A3S7CmY4npYdbENnX1Hfveoq2Q
AvlwGt3CWo/OzWkh/QhOGKPgXKYUuNCsEDl9MP2CQAcQUXPkhtlhcTsMBfkR9vuN
KiTJsq/3f/EzBc3vFCORXJwND2H209Cz/tUx89Gs6OW05LG6TN0cYxt2PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLqAn7WXC+hrlQeX7PFxGtnwTfVMB8GA1UdIwQY
MBaAFFlJaYu80k/J4an19BSGwxrxmkvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2Mt
NTgzZmJlNjRhOTU1LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2MtNTgzZmJlNjRhOTU1
LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIib8EY2x
kWlfnER10QEnl6VMaefgZvkPU/TViWum/FGen/HXUatWssIBDQAg90xRgGVpDc+C
+D859iS0O/5Kz3+/+YxpxqMv6dEyNy6jYKM9OUq6Wc65E1iIBO9in2JEtJkjbVjH
vbsROF6n23mOewIOhOlDUeQE4skWbdjNBxXzP6TlYeBa/4bCLFCKa+MRUTE6b7hM
1RqPAKmKOoPX8p8jNc/okn1HPSezslDB46uOLmq+i0qF5/b6SAKViOUpRb+tPud8
sHHWSZr1Efou904ValdgccI/HLF9pFrQk718zkX69hqDz0/GUnLKFJo5EPcU46Tb
1/5sfWOSpCaNLQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:46:38 2025 by rpki-client