Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
File: WLtUmHY5ugxs-8rVmMP145_KlFw.mft (raw, json)
Hash identifier: 4cho+w3g/eW2nekgnUZtOb8/3siE57TnG+1jsR3diKM=
Subject key identifier: 29:DB:9C:7A:EA:43:41:32:3A:99:53:4A:15:35:B0:36:B2:42:5B:F5
Authority key identifier: 58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
Certificate issuer: /CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Certificate serial: 019A54BF441EA3CA6A6C032F773CA891183B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 16:00:12 +0000
Manifest this update: Wed 05 Nov 2025 16:00:12 +0000
Manifest next update: Thu 06 Nov 2025 16:00:12 +0000
Files and hashes: 1: BfcfF2b1LL5M2AE__W3yCJVNAKA.roa (hash: +bgWpcxXbBLXQoTPRn9MMXKJT/S9VM5GWgJ62Kc9z/4=)
2: WLtUmHY5ugxs-8rVmMP145_KlFw.crl (hash: lpD2C4C2euN3kqBA/UOwBKnRleM6fZWK4dNIduETOrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:44:1e:a3:ca:6a:6c:03:2f:77:3c:a8:91:18:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Validity
Not Before: Nov 5 16:00:12 2025 GMT
Not After : Nov 6 16:00:12 2025 GMT
Subject: CN=29db9c7aea4341323a99534a1535b036b2425bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:31:a2:7b:d6:50:ba:c9:39:38:8d:8b:61:49:
aa:cc:9c:60:6d:9b:4c:d0:e1:07:d8:99:59:d4:5b:
a4:13:d4:91:29:d3:92:eb:a6:f5:cf:a0:2d:23:c2:
70:35:03:b8:5e:09:c6:da:ea:6e:b6:8e:09:4a:ba:
18:69:df:c4:a5:d7:db:15:50:7a:00:d0:0f:95:7e:
68:b1:6c:a2:07:de:63:e1:ff:5b:7d:7b:96:65:74:
23:1a:5b:f6:68:31:98:b0:4b:16:25:c4:9b:21:6d:
98:bc:e6:d0:31:a7:02:f2:8a:ea:36:8d:a8:f5:48:
2b:bd:aa:cb:82:a4:d6:9c:5c:fd:23:a5:68:df:9f:
12:ae:7f:89:2d:05:ed:75:99:62:55:26:d1:70:6a:
ae:c9:58:d3:a2:ca:7d:8e:47:c4:f9:5e:82:d0:24:
e1:b3:3e:a3:7d:41:fb:b6:ed:c0:07:86:7b:03:d8:
fa:95:d4:18:4a:31:63:c4:5d:f6:6f:bf:0d:b9:7e:
5d:19:47:c0:36:e6:b1:51:64:83:65:38:b2:80:00:
c7:85:2a:3c:5c:ce:ff:ee:8f:37:a4:24:7c:68:dc:
88:f8:1a:12:39:47:b5:b7:5c:68:c0:e5:94:25:4d:
2a:db:54:d3:60:da:a4:b5:c4:3c:f1:72:72:02:76:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DB:9C:7A:EA:43:41:32:3A:99:53:4A:15:35:B0:36:B2:42:5B:F5
X509v3 Authority Key Identifier:
keyid:58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c4:21:d5:09:e3:a4:3a:27:b1:1a:63:32:35:74:8c:10:fd:
bb:22:25:67:2e:cc:dc:24:87:4e:47:5a:3e:53:b9:6f:93:6b:
72:88:ae:26:aa:f7:d6:93:06:65:18:f5:e4:ae:38:1c:dd:54:
69:14:da:39:60:98:73:3e:46:fb:73:c1:35:20:44:2e:ce:f1:
d2:88:77:b5:ba:78:c3:ef:80:a9:af:02:2c:7b:60:67:95:2e:
6e:7f:81:dc:39:ba:76:8f:71:49:a5:4b:5f:d6:76:65:b7:ea:
c3:46:ae:42:f7:3a:72:79:24:d5:78:99:0d:48:28:2b:33:a7:
8f:10:e6:af:ea:fb:4f:d6:44:95:f9:59:4c:09:7f:54:58:1b:
0a:60:d9:e9:17:b5:00:7f:f0:1b:bb:c4:1e:34:ed:1e:7a:50:
d5:2f:8f:9e:ad:51:55:48:5c:04:ea:96:c8:10:86:6e:ba:74:
e0:0e:1d:5e:ff:48:90:5d:90:14:b4:42:1e:ec:b6:73:74:8f:
31:c7:17:24:f7:a0:d8:3b:0a:89:11:24:23:e0:34:40:50:a6:
1a:b9:cf:3f:11:ea:51:c4:34:37:52:23:a7:95:a2:ab:f0:54:
f7:39:19:7f:bc:3a:48:d5:9b:d3:2d:7d:a5:18:77:47:2f:c0:
83:1a:65:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:48:43 2025 by rpki-client