Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
File: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft (raw, json)
Hash identifier: +RdT++tcTSceYpNW8nKmluDJ8bUPFIl9IbXKa1K/SR4=
Subject key identifier: 84:9D:69:7B:91:2B:0B:7A:B7:7F:E6:53:A0:8E:61:08:CD:12:E5:6C
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Certificate issuer: /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial: 019A1BE286103FA7C9CBDB349084E68E5283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 15:00:21 +0000
Manifest this update: Sat 25 Oct 2025 15:00:21 +0000
Manifest next update: Sun 26 Oct 2025 15:00:21 +0000
Files and hashes: 1: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl (hash: k3eQQEnqzt1eaeSBUNMrt5bH0xi3uqKbtOkSYLVSyBU=)
2: aiBw7mg-7iWQbjUD1MChAVL_Coo.roa (hash: KeivAY3qo56HW2nMzFcSP1tB4CHei3XM2+AGnhTVVP0=)
3: jqsja3Ig_Inj8Kr-paXhHO8forw.roa (hash: lgk++/8/iHEqAJTqQrY78sNZtOq1z4JSDJP8vNMWH0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:e2:86:10:3f:a7:c9:cb:db:34:90:84:e6:8e:52:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Validity
Not Before: Oct 25 15:00:21 2025 GMT
Not After : Oct 26 15:00:21 2025 GMT
Subject: CN=849d697b912b0b7ab77fe653a08e6108cd12e56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:fb:46:b2:ff:4a:b8:f8:99:3c:af:70:21:
64:aa:41:33:45:30:d3:43:bf:bf:84:43:68:47:3c:
4d:6c:7d:68:1d:62:8d:79:3e:2e:6b:fa:97:48:17:
56:fc:c3:87:4c:40:6b:85:0e:e8:4a:c7:ad:38:d8:
6f:dd:9a:fa:27:df:ba:cf:a4:80:9e:f2:9d:2e:a6:
d7:2d:95:b9:b2:0d:6f:1f:4f:43:e9:dc:b5:aa:83:
64:c4:bc:3f:fb:72:61:7a:21:62:f6:18:e7:90:29:
67:b5:ea:88:f5:20:89:80:d9:8f:2d:51:d2:dd:08:
dd:d7:de:bb:df:16:95:3c:0e:f9:39:f6:29:a2:1e:
b8:05:6e:6a:29:f5:ac:c1:e0:37:55:1b:76:1a:f1:
11:61:36:bd:4b:ca:66:db:9c:6e:e0:f5:e9:f7:5b:
1f:e9:37:0c:49:6c:12:78:1b:cb:50:b6:b6:6c:b4:
f4:0e:f6:f7:2e:6b:ca:7a:62:9b:30:ea:fc:64:6a:
e3:dd:67:a6:f1:ea:ca:eb:55:62:bd:76:46:eb:e0:
74:7f:29:59:36:7c:67:de:a4:07:d7:7e:05:97:d3:
1d:53:97:43:17:81:1e:9b:77:3b:b6:76:c4:a7:a0:
33:2b:01:51:1f:80:0f:18:3c:53:86:dc:63:6e:4c:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9D:69:7B:91:2B:0B:7A:B7:7F:E6:53:A0:8E:61:08:CD:12:E5:6C
X509v3 Authority Key Identifier:
keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cd:57:8a:a1:bc:32:2d:1b:c4:3f:fa:ba:dd:5d:c2:af:e9:
ab:ef:d7:a3:b8:ef:c6:1d:92:1f:cf:8a:d5:c3:e1:81:60:81:
a1:aa:c1:64:92:d2:95:b0:59:49:bc:97:06:a4:be:cf:08:84:
20:5e:2c:b2:f5:fe:45:82:56:c8:74:ff:fd:b2:97:8f:e5:8e:
29:e0:cc:50:ef:dc:e2:09:18:cd:92:be:ec:4a:e6:d0:b8:bb:
78:25:29:cc:f8:4d:73:d3:04:c7:ac:d3:ca:71:03:99:17:ae:
a8:e4:f4:c4:ac:4f:35:e3:10:2e:1b:32:16:14:70:0f:d7:7a:
30:21:53:0c:b8:7d:b5:1a:f0:e9:08:2d:c1:5d:aa:ca:10:ba:
cb:57:d0:60:d6:82:49:1b:e1:08:1b:fe:25:d9:c6:c3:71:ce:
78:0d:8f:c0:ab:f7:87:50:91:ef:64:a5:7f:c2:10:a4:8c:4e:
78:fd:b7:84:ac:94:e4:64:6e:fa:6e:4d:9f:86:d6:3c:0c:7f:
7c:cc:ce:e4:17:80:e9:94:19:ae:a9:62:6a:5a:c1:96:7a:9d:
ea:c9:4c:32:39:39:a6:52:b1:1d:2d:df:28:c2:fe:49:fc:09:
38:b7:a5:6a:36:2e:4b:4c:bf:47:eb:92:16:5c:2d:7a:c8:c0:
b9:0f:01:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZob4oYQP6fJy9s0kITmjlKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNTI5NDVkMjMxZjVmOGE5NzRiZTcxMmU4NzE4YWI1MGYw
NGNmZmEwHhcNMjUxMDI1MTUwMDIxWhcNMjUxMDI2MTUwMDIxWjAzMTEwLwYDVQQD
Eyg4NDlkNjk3YjkxMmIwYjdhYjc3ZmU2NTNhMDhlNjEwOGNkMTJlNTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEb7RrL/Srj4mTyvcCFkqkEzRTDT
Q7+/hENoRzxNbH1oHWKNeT4ua/qXSBdW/MOHTEBrhQ7oSsetONhv3Zr6J9+6z6SA
nvKdLqbXLZW5sg1vH09D6dy1qoNkxLw/+3JheiFi9hjnkClnteqI9SCJgNmPLVHS
3Qjd19673xaVPA75OfYpoh64BW5qKfWsweA3VRt2GvERYTa9S8pm25xu4PXp91sf
6TcMSWwSeBvLULa2bLT0Dvb3LmvKemKbMOr8ZGrj3Wem8erK61VivXZG6+B0fylZ
Nnxn3qQH134Fl9MdU5dDF4Eem3c7tnbEp6AzKwFRH4APGDxThtxjbkx5cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISdaXuRKwt6t3/mU6COYQjNEuVsMB8GA1UdIwQY
MBaAFFpSlF0jH1+Kl0vnEuhxirUPBM/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2xLVVhTTWZYNHFYUy1jUzZIR0t0UThFel9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mMTA3ZDYtNThmZC00MzIzLThmNTEt
MmU0MWZmM2UwYTZmLzEvV2xLVVhTTWZYNHFYUy1jUzZIR0t0UThFel9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mMTA3ZDYtNThmZC00MzIzLThmNTEtMmU0MWZmM2UwYTZm
LzEvV2xLVVhTTWZYNHFYUy1jUzZIR0t0UThFel9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFM1XiqG8
Mi0bxD/6ut1dwq/pq+/Xo7jvxh2SH8+K1cPhgWCBoarBZJLSlbBZSbyXBqS+zwiE
IF4ssvX+RYJWyHT//bKXj+WOKeDMUO/c4gkYzZK+7Erm0Li7eCUpzPhNc9MEx6zT
ynEDmReuqOT0xKxPNeMQLhsyFhRwD9d6MCFTDLh9tRrw6QgtwV2qyhC6y1fQYNaC
SRvhCBv+JdnGw3HOeA2PwKv3h1CR72Slf8IQpIxOeP23hKyU5GRu+m5Nn4bWPAx/
fMzO5BeA6ZQZrqlialrBlnqd6slMMjk5plKxHS3fKML+SfwJOLelajYuS0y/R+uS
FlwtesjAuQ8BFA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 16:35:13 2025 by rpki-client