Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
File: wTyftZyZzftKbYQpzYNwWQYBKxE.mft (raw, json)
Hash identifier: mxTYCWhW3RDu8yHQkN/GdMevsLoyQjDw2cqBmz8n6Eo=
Subject key identifier: 99:9F:84:72:A8:B1:BB:07:80:02:12:33:23:14:C1:1E:88:3D:84:4D
Authority key identifier: C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
Certificate issuer: /CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Certificate serial: 0196C3B9C2E5F5EFE95DEE646C241A070633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
Manifest number: 12AC
Signing time: Mon 12 May 2025 09:00:53 +0000
Manifest this update: Mon 12 May 2025 09:00:53 +0000
Manifest next update: Tue 13 May 2025 09:00:53 +0000
Files and hashes: 1: wTyftZyZzftKbYQpzYNwWQYBKxE.crl (hash: GBx8plkCpXwhmk+yWaKwxHVDU/57Hy6BVBRXwC8XjzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:c2:e5:f5:ef:e9:5d:ee:64:6c:24:1a:07:06:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Validity
Not Before: May 12 09:00:53 2025 GMT
Not After : May 13 09:00:53 2025 GMT
Subject: CN=999f8472a8b1bb07800212332314c11e883d844d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:ce:62:ef:e8:78:14:e1:e4:c1:02:f3:07:
95:d4:92:2e:72:5b:ac:00:f2:11:c2:eb:33:4b:1c:
94:af:ea:d1:8e:0d:7a:4b:e1:b0:d9:1f:38:f2:39:
a8:8a:c5:3e:94:92:2d:08:33:ec:87:a0:fd:ba:bf:
70:6b:2d:b8:9c:59:2d:99:6e:80:1f:06:93:8e:07:
ec:0b:08:fa:df:5f:ab:02:48:6a:54:c9:e1:c4:0b:
28:10:e5:f4:26:6f:60:a9:d1:ab:be:37:f7:6c:a1:
e9:aa:82:46:7b:38:c3:f3:de:2e:51:97:31:4e:f5:
12:10:2a:5b:14:16:66:19:83:95:0e:12:c9:2a:cc:
61:b9:9d:71:1e:e0:8f:90:02:61:11:f5:21:c2:29:
51:40:6b:21:b6:3c:64:25:fc:96:f7:d5:fe:09:cc:
40:69:aa:a6:f8:6a:7a:32:af:dd:0d:b5:45:bc:79:
7d:45:32:a5:60:59:d8:37:94:0f:d9:6e:bf:b9:30:
07:1f:ed:83:49:50:0c:1c:ed:a6:6f:be:bb:f7:dd:
6c:f3:1b:a9:b5:80:c4:e6:22:70:13:ff:9d:35:c6:
89:a0:56:d1:d5:3d:18:11:f9:eb:0e:46:df:36:f5:
0b:f0:62:9a:51:af:13:6e:b4:88:05:aa:fe:82:c1:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9F:84:72:A8:B1:BB:07:80:02:12:33:23:14:C1:1E:88:3D:84:4D
X509v3 Authority Key Identifier:
keyid:C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:39:20:ce:cc:d4:64:ec:31:dc:f9:44:b6:c0:41:28:31:96:
a6:25:17:39:94:16:58:c6:74:43:6d:5c:1a:22:6a:d0:d6:e0:
25:6f:00:c8:d1:ea:c0:87:27:6d:42:28:ec:b8:90:ad:99:c4:
d8:2f:92:55:63:0a:7e:02:15:a3:a7:1a:69:fa:bd:ee:ac:27:
bc:1c:ec:98:b4:a0:07:54:d2:0a:c8:ae:a9:f6:18:07:b3:8b:
1e:c3:06:83:78:53:93:79:0f:7e:c3:93:46:59:91:6c:06:2d:
96:e5:ae:4f:96:04:43:18:ce:ce:71:1e:10:48:e1:a9:06:df:
30:e8:b6:b8:80:b4:cf:cf:02:66:dd:b6:4a:44:7b:5a:79:98:
91:77:14:34:70:76:68:c7:1e:be:90:c1:c2:3c:11:d9:0e:d8:
21:34:c2:dc:8d:c4:46:cb:d0:47:11:db:b5:4d:22:cb:59:c0:
3c:cc:bc:00:2e:db:cf:da:73:67:30:88:3d:9e:2a:cc:2a:dc:
d2:98:7e:3f:9e:0b:0d:99:72:39:88:3f:5f:12:7c:f7:3a:51:
15:6c:67:82:7c:9a:96:f8:71:1a:c1:25:33:29:0d:7a:38:0a:
d3:ea:96:27:02:7e:ca:ee:ad:56:f4:72:ea:19:aa:b2:45:52:
cf:5f:8f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:18:10 2025 by rpki-client