Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
File: WtYwth0ucpL5zviTu21xJCpfS-0.mft (raw, json)
Hash identifier: 7rlecRke3gO3W/a25PA8zg929IPp4V6VKXn4M+ZCUUI=
Subject key identifier: D8:BC:53:56:0C:91:98:BD:AE:FD:37:C7:E6:D6:83:08:B3:6B:E0:43
Authority key identifier: 5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
Certificate issuer: /CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Certificate serial: 0199FAD85C1C73652707490C806AB4B5DFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
Manifest number: 13EE
Signing time: Sun 19 Oct 2025 05:01:47 +0000
Manifest this update: Sun 19 Oct 2025 05:01:47 +0000
Manifest next update: Mon 20 Oct 2025 05:01:47 +0000
Files and hashes: 1: WtYwth0ucpL5zviTu21xJCpfS-0.crl (hash: 9jks87d7QCqx6pCDGOZEzOExUDPVdXk9QtubK0Vlar8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:5c:1c:73:65:27:07:49:0c:80:6a:b4:b5:df:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Validity
Not Before: Oct 19 05:01:47 2025 GMT
Not After : Oct 20 05:01:47 2025 GMT
Subject: CN=d8bc53560c9198bdaefd37c7e6d68308b36be043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3f:68:52:f7:53:78:7d:ca:77:74:05:27:76:
f9:a5:c4:44:c2:b4:b8:c0:35:7b:c1:7b:82:36:c4:
98:8c:0f:b0:e2:5a:5b:16:67:9e:fb:3d:a5:cd:ca:
99:72:61:57:97:3e:84:57:d9:d8:54:c5:4e:12:11:
9e:2d:83:dd:1d:a5:00:05:d7:f7:61:0c:ee:b0:d0:
5a:af:7e:b5:a1:cf:e1:5c:d6:58:78:4f:eb:f4:8f:
d5:b2:0a:9f:a9:32:0f:0e:47:28:0a:f8:17:ac:bd:
bc:b3:e0:a6:a9:f5:a8:89:a3:38:1e:97:86:8d:90:
c0:8c:bb:da:39:e9:d8:7f:59:da:31:41:64:c3:b2:
1c:74:70:96:15:cc:15:0c:ad:b2:ad:76:3d:58:a5:
88:b3:93:80:32:fe:3a:23:9f:a5:12:e5:2e:0c:fe:
2b:86:51:ac:42:d9:b6:9f:56:43:77:2f:b9:8d:ed:
79:b0:17:c7:13:28:c9:31:f8:c2:f0:6e:fc:7b:0d:
ec:a7:24:e1:10:81:60:77:a1:19:40:9a:31:5a:ee:
0e:7b:e4:01:ab:3a:87:50:ad:be:75:a3:f3:77:8d:
64:1d:d0:ae:16:9b:1b:5e:40:d7:ff:23:74:38:39:
d3:80:7c:68:c8:20:56:7f:f7:6d:bd:b3:18:c2:20:
d8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BC:53:56:0C:91:98:BD:AE:FD:37:C7:E6:D6:83:08:B3:6B:E0:43
X509v3 Authority Key Identifier:
keyid:5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6c:49:fa:eb:5e:bf:0f:72:04:48:aa:2e:dd:6c:cf:35:fc:
b0:2b:83:c0:2f:71:45:c2:2c:b3:08:84:58:2c:26:99:a4:27:
29:6c:9e:59:1c:46:e2:66:63:2e:ad:f8:5b:5b:d1:86:8b:58:
87:dc:46:e0:db:7b:eb:a1:6e:11:e4:1d:c5:ec:7c:07:85:46:
24:ad:e9:c0:7e:a8:98:d5:17:82:7d:b6:b5:21:ca:35:4d:6c:
ce:88:dd:e7:54:89:d5:64:f7:94:4f:c9:e8:47:62:f1:1e:d0:
4c:64:ea:f8:14:8c:18:2f:cc:64:ca:77:ad:f5:bc:35:17:23:
b9:a2:cf:40:22:4c:10:a1:cc:c0:ac:6e:b9:fd:e3:bb:8f:56:
61:56:ab:80:da:44:d5:b6:ea:b1:28:c2:c2:61:2c:8a:0b:7e:
2d:b7:06:bd:ff:25:3b:a9:e7:4e:57:67:e9:8e:58:20:bb:d3:
49:a5:fd:30:e1:fa:b7:86:bb:f2:b4:0e:75:09:25:9e:3a:f3:
e4:e7:85:69:8d:ad:da:bf:a4:d0:7c:94:3a:79:ee:bc:ba:5c:
c9:4b:02:ee:b2:c4:66:46:18:4d:19:5e:51:18:a8:7a:d4:c8:
ce:2a:9d:18:a5:7e:3e:37:e0:89:bb:d2:60:bf:7f:f3:cf:60:
a7:39:34:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:40 2025 by rpki-client