Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
File: wTyftZyZzftKbYQpzYNwWQYBKxE.mft (raw, json)
Hash identifier: b/Gfxhwbc3AU8xmyNYODIcvFMyt7hSEXKXE21AYhr3c=
Subject key identifier: 44:5B:36:0F:C0:65:C1:8D:B1:F4:D0:3B:9B:07:9D:94:90:2C:AE:42
Authority key identifier: C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
Certificate issuer: /CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Certificate serial: 0198D4DFD5B06CFA186263695AEF3AB1AF9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
Manifest number: 13BE
Signing time: Sat 23 Aug 2025 03:01:35 +0000
Manifest this update: Sat 23 Aug 2025 03:01:35 +0000
Manifest next update: Sun 24 Aug 2025 03:01:35 +0000
Files and hashes: 1: wTyftZyZzftKbYQpzYNwWQYBKxE.crl (hash: kPHACEIXAk2UPbTgi3ojRB7oQvAmXtkDkRpw6UlwYmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d5:b0:6c:fa:18:62:63:69:5a:ef:3a:b1:af:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Validity
Not Before: Aug 23 03:01:35 2025 GMT
Not After : Aug 24 03:01:35 2025 GMT
Subject: CN=445b360fc065c18db1f4d03b9b079d94902cae42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e5:87:d9:95:3e:cb:e0:0c:61:48:75:4d:0a:
3a:8a:6d:f9:cc:55:54:f7:df:25:77:ca:13:2e:00:
d9:7b:a3:93:71:c7:db:72:1d:f1:d0:0b:f3:9b:b3:
1e:a6:79:67:d4:74:5f:a3:54:0d:d9:77:4e:b2:78:
90:c9:83:7d:e5:d2:ab:4d:e5:03:2c:bc:fe:2b:70:
df:e1:5d:f0:fc:ec:c2:09:d2:94:b3:b9:10:22:ca:
32:db:1e:73:a9:76:3d:77:23:c9:84:89:23:a4:b4:
d6:86:4c:04:8b:26:09:d7:db:4d:a0:9e:f4:59:10:
0d:36:09:03:33:dc:c3:bd:f2:10:f6:41:1f:64:a2:
a5:c4:5c:0f:64:ff:90:b1:f5:0a:45:eb:17:e1:4c:
e9:12:3c:6b:f5:a9:14:bb:8c:51:81:d4:03:b0:97:
68:6e:16:08:7b:73:60:88:fa:b1:17:5f:8d:d7:d6:
8c:b3:99:72:ec:07:e5:36:0f:aa:88:d6:b5:81:f9:
2e:85:2a:70:8f:61:d6:1b:c0:f3:6d:88:66:35:51:
32:d9:2e:82:1b:8f:72:51:36:34:d3:e5:ee:b0:62:
74:b2:b4:b2:d4:bf:01:10:4d:50:40:61:76:79:18:
8a:e0:a3:61:2f:16:68:23:50:9c:21:f0:68:3e:57:
c2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5B:36:0F:C0:65:C1:8D:B1:F4:D0:3B:9B:07:9D:94:90:2C:AE:42
X509v3 Authority Key Identifier:
keyid:C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d6:7e:c7:d0:97:a4:66:cb:59:6c:f2:ab:28:75:24:3c:f9:
60:29:67:ae:a1:c4:f5:67:b1:09:6f:47:3d:04:d2:6a:4c:7e:
b8:b3:64:15:bc:b3:e2:82:90:d7:9c:d6:0c:ff:60:05:69:d9:
94:fa:b4:31:c6:6f:f4:a4:9e:1f:ee:fa:23:dc:b5:ed:d6:56:
94:83:6e:55:7f:50:1c:ef:42:e6:e8:e6:19:8d:3c:ff:46:60:
a0:0b:86:50:38:25:df:7b:4d:50:0e:74:53:03:e1:a5:35:29:
7b:63:4e:ae:31:69:60:fb:79:3f:68:6f:26:12:55:7c:e9:08:
0c:59:ce:89:3c:9d:4d:4d:d9:90:58:c1:2e:f9:c0:35:a3:a8:
94:c7:9b:d5:3f:01:0c:59:66:8e:6f:c6:97:d3:48:a3:46:da:
68:0c:e7:8a:b2:20:f3:92:d1:ac:2f:ee:0f:54:3f:de:4c:82:
70:c3:22:d2:24:6a:dc:ee:53:9d:92:b0:8d:81:29:c3:ae:23:
3c:cf:6f:b7:5b:71:b8:7b:3b:69:7f:e7:c2:68:5d:9f:32:10:
08:9e:e2:eb:ee:01:13:40:47:a8:40:c2:9e:a8:d6:6b:18:85:
86:52:a3:be:b7:a7:c1:b9:21:3e:36:5e:aa:97:b2:6f:87:28:
ae:1d:64:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:42 2025 by rpki-client