Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
File: wTyftZyZzftKbYQpzYNwWQYBKxE.mft (raw, json)
Hash identifier: 2pAXN3Y6Mi06hwenSH0QdbHnsx2l4aZQUkyi32fsQVo=
Subject key identifier: 19:BC:09:E8:FA:03:B1:D0:BD:3A:5D:D0:79:0B:A5:89:65:EF:AF:8A
Authority key identifier: C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
Certificate issuer: /CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Certificate serial: 0197BCDA4049B9DE91A25807CFE416A2F14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
Manifest number: 132D
Signing time: Sun 29 Jun 2025 18:01:49 +0000
Manifest this update: Sun 29 Jun 2025 18:01:49 +0000
Manifest next update: Mon 30 Jun 2025 18:01:49 +0000
Files and hashes: 1: wTyftZyZzftKbYQpzYNwWQYBKxE.crl (hash: 9XEZD90aWqeTx3MTTfu9MqME5PSWRkUAfnPRXQ3cMRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bc:da:40:49:b9:de:91:a2:58:07:cf:e4:16:a2:f1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Validity
Not Before: Jun 29 18:01:49 2025 GMT
Not After : Jun 30 18:01:49 2025 GMT
Subject: CN=19bc09e8fa03b1d0bd3a5dd0790ba58965efaf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:18:a7:54:1b:72:82:35:b2:06:3e:9d:38:91:
41:c2:9e:32:1c:31:1c:96:e5:f2:be:02:6e:60:10:
d5:11:54:ad:a8:6e:58:0b:c2:1a:d0:75:93:4f:f2:
5f:ee:c5:06:a2:85:9e:23:2b:41:17:82:c7:df:19:
0a:ed:83:cd:5f:42:41:25:b3:3a:9b:83:cd:3a:07:
3e:9a:a2:90:d2:3d:0b:7e:da:12:f4:14:19:e2:0b:
2d:9f:cf:0b:b6:13:29:bf:24:8d:3a:c7:04:c5:b8:
35:fe:34:c5:5f:61:ea:45:45:eb:2d:79:29:31:0b:
f4:12:dc:19:30:d4:0f:43:d1:0e:24:34:29:69:43:
fa:8b:bf:bc:1b:7e:e2:14:79:31:41:07:7e:34:d1:
33:b2:d3:b3:b6:2a:37:a9:90:61:11:bc:65:25:8c:
7d:8d:d4:56:9b:05:5b:c5:a2:dd:58:98:b6:34:ad:
95:b5:3c:d7:cf:b0:a1:bd:14:a9:15:70:86:db:a2:
db:1e:af:a1:ce:6d:ff:19:ec:9a:5f:de:50:81:f2:
3f:25:51:ff:6c:8e:89:45:58:b7:52:03:2c:25:8d:
f6:c2:4d:38:ee:39:84:ef:82:1c:b3:f0:e2:a3:00:
38:a5:d1:a0:3a:59:ca:3d:58:d6:ca:58:dc:37:f3:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BC:09:E8:FA:03:B1:D0:BD:3A:5D:D0:79:0B:A5:89:65:EF:AF:8A
X509v3 Authority Key Identifier:
keyid:C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b5:b4:8e:69:ec:09:2e:a6:42:b3:b0:d4:78:5e:04:25:15:
47:a0:0d:79:71:c7:ee:68:fc:6c:b1:5e:e3:a4:0f:22:25:fe:
b1:8b:3c:d7:49:e1:90:ea:a2:ff:6b:d6:2a:8f:a5:ab:44:c7:
10:6c:b9:74:78:58:d9:5b:25:45:93:ac:e0:e8:c9:bf:80:33:
42:7f:9b:fd:40:d9:cd:81:72:c1:f0:51:43:30:74:42:8f:9a:
c5:cc:e4:e7:82:ea:08:5f:fb:67:17:fa:2e:bd:99:ab:03:e1:
06:69:02:3f:1d:fe:ee:c6:28:a2:84:1c:18:c9:13:86:83:f8:
93:9d:79:29:c6:55:9e:4e:98:6d:72:8b:84:93:dc:5b:b5:ce:
55:cd:89:23:4c:b6:1e:45:2f:b8:10:24:0b:4a:b5:68:67:45:
25:d5:c9:7d:64:94:25:52:b8:c2:f4:db:9f:41:36:bb:2d:79:
11:5b:b6:b8:66:23:3b:a2:ba:c8:cb:5e:1b:61:fb:9d:5c:05:
c6:07:9f:01:eb:e1:57:30:97:59:76:27:7e:78:95:e9:b1:e1:
19:a4:67:ae:32:13:00:1d:42:39:03:5d:73:50:21:be:4d:41:
cd:cd:81:03:e4:7b:a5:07:1f:32:f7:ae:dc:af:dd:1a:17:23:
59:8e:78:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:03:58 2025 by rpki-client