Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
File: WtYwth0ucpL5zviTu21xJCpfS-0.mft (raw, json)
Hash identifier: 7eg+433nQm8iQmUL0Px2vU+8F++8loLMGYcS4qtZP/g=
Subject key identifier: 3B:D2:69:C9:A6:25:E8:AC:FE:8F:CA:16:CB:7C:0C:D9:62:5E:F1:F7
Authority key identifier: 5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
Certificate issuer: /CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Certificate serial: 0197B77CCE441CC35CF558FE1E78D6618219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
Manifest number: 12C2
Signing time: Sat 28 Jun 2025 17:01:39 +0000
Manifest this update: Sat 28 Jun 2025 17:01:39 +0000
Manifest next update: Sun 29 Jun 2025 17:01:39 +0000
Files and hashes: 1: WtYwth0ucpL5zviTu21xJCpfS-0.crl (hash: 18CePAxLd/FKf/aYzJpWQR5thb5b1ShjU89UNJ1/4og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:ce:44:1c:c3:5c:f5:58:fe:1e:78:d6:61:82:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Validity
Not Before: Jun 28 17:01:39 2025 GMT
Not After : Jun 29 17:01:39 2025 GMT
Subject: CN=3bd269c9a625e8acfe8fca16cb7c0cd9625ef1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:34:1a:c0:ad:94:3e:d8:87:c3:e4:3f:ef:63:
cf:5f:ab:ee:78:39:51:a6:2f:f8:7e:4a:69:14:b2:
ab:db:eb:48:16:12:ff:2c:02:db:52:ad:41:f2:b8:
35:81:57:f2:c1:ae:5e:58:1d:a4:b5:ac:59:38:b0:
df:4d:be:bd:76:6b:58:1d:70:d3:46:83:16:4b:ec:
6a:6a:36:5e:1c:96:36:7f:10:3f:e4:72:c7:9c:78:
ec:7d:f1:a1:6c:3e:6a:42:ff:48:8c:e9:db:23:ca:
60:0a:91:3d:7f:f9:b6:20:0c:83:6f:9e:d6:6b:69:
12:1a:02:52:28:e2:91:c7:53:7b:10:18:9e:89:fb:
10:e4:76:0b:6a:fe:a0:ca:eb:68:6c:54:7f:db:1d:
03:74:10:a7:70:f2:3c:d4:29:f0:ce:e1:40:d0:86:
4c:c2:83:74:65:36:96:21:5b:9d:52:17:cd:a8:f6:
0d:c8:d5:9b:93:c9:91:50:e5:7e:bf:3a:80:56:a7:
4f:b3:2e:39:e8:4f:37:bf:f4:ba:e8:85:72:ce:ff:
b8:d3:48:67:bb:67:6f:df:de:d9:c0:8e:03:5e:18:
c4:cf:62:a7:1d:e3:18:72:c0:00:9a:a5:7e:9b:f5:
3b:d5:2b:bf:5f:fb:1b:af:ff:8b:c4:3d:a0:e8:09:
21:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D2:69:C9:A6:25:E8:AC:FE:8F:CA:16:CB:7C:0C:D9:62:5E:F1:F7
X509v3 Authority Key Identifier:
keyid:5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fa:da:08:4c:6d:8f:f2:fd:b8:d7:ed:1e:dd:69:50:3a:4e:
e1:f2:af:a4:01:3b:e4:8c:9e:00:35:6c:2c:5f:15:7c:50:4e:
86:65:1b:19:13:c9:79:47:23:7e:0d:0b:d1:a3:cd:96:03:be:
ab:c8:35:9b:7b:17:db:f8:f4:9c:2f:fc:57:43:ce:24:df:60:
50:e7:80:f3:af:e0:cd:d3:b8:cc:20:0a:b2:65:44:66:6c:66:
47:d3:07:6f:72:14:97:a5:d9:a8:60:fc:e6:73:0a:de:95:5f:
79:25:1f:9f:3b:20:3e:91:27:4b:32:96:04:52:c8:2b:0c:51:
46:83:30:14:36:9a:4b:f0:75:50:6b:e9:56:a6:83:17:97:1f:
20:09:51:54:7c:87:8a:03:33:49:80:b4:db:0d:b6:ff:6e:11:
7e:fd:a9:15:24:1a:f8:e5:0d:f5:be:38:4c:9c:a3:1a:bb:04:
9b:22:77:6d:ad:67:c3:5b:50:f5:7c:cd:49:81:44:64:6a:75:
df:6f:f5:30:7a:70:12:2c:38:ec:0b:4a:b8:0e:ca:01:71:05:
fe:3c:73:a4:70:0e:eb:3b:44:9e:c8:6e:35:30:ae:9c:24:48:
2d:d6:a5:7a:68:28:57:e1:57:99:b6:74:0a:f0:bd:bf:66:d9:
80:dc:0e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:21:18 2025 by rpki-client