
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
File: wtVzsWdwcfL9bUS4QBthISBZjM8.mft (raw, json)
Hash identifier: zsdnzInkfcXcFLUF8/3K+bKY2y81jdMT5rYEY4Ylkmo=
Subject key identifier: 79:82:3E:08:2C:D5:0E:D3:7B:2A:D6:2A:10:5C:89:22:DA:48:19:9B
Authority key identifier: C2:D5:73:B1:67:70:71:F2:FD:6D:44:B8:40:1B:61:21:20:59:8C:CF
Certificate issuer: /CN=c2d573b1677071f2fd6d44b8401b612120598ccf
Certificate serial: 0199FBEAF145C874772F95E2C6E6305530FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:01:42 +0000
Manifest this update: Sun 19 Oct 2025 10:01:42 +0000
Manifest next update: Mon 20 Oct 2025 10:01:42 +0000
Files and hashes: 1: wtVzsWdwcfL9bUS4QBthISBZjM8.crl (hash: 9QYMS9vgqy/XKpo64Pr9u5jfaAG+4EN8yeHdCoA/f4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f1:45:c8:74:77:2f:95:e2:c6:e6:30:55:30:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d573b1677071f2fd6d44b8401b612120598ccf
Validity
Not Before: Oct 19 10:01:42 2025 GMT
Not After : Oct 20 10:01:42 2025 GMT
Subject: CN=79823e082cd50ed37b2ad62a105c8922da48199b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:f2:79:06:6b:0f:56:de:25:85:cf:29:79:
36:74:cb:11:a0:94:9d:cb:6c:5e:f9:a0:25:ef:45:
a4:62:81:cb:3f:21:fd:e9:69:ba:43:4b:63:9b:1f:
b2:3f:77:42:53:56:61:9d:66:44:a6:73:a3:89:48:
17:44:e7:65:f5:10:9f:13:55:b5:f5:2b:3c:75:12:
ef:96:db:a6:8d:e3:6d:4b:89:23:87:01:dd:15:32:
fc:70:eb:36:1c:28:b1:a6:fc:a8:98:b8:79:81:4d:
08:79:4a:40:1c:d5:91:27:d1:ea:79:11:0e:09:fd:
a0:97:2b:92:23:fc:2e:66:ef:63:ea:c8:5d:e2:6e:
f4:20:b1:2b:41:d4:fc:cf:4b:5e:92:f1:03:0f:b4:
18:18:01:1e:38:b0:5a:24:38:9a:96:ec:65:ba:f3:
37:6b:45:66:91:85:50:bf:b5:c4:ac:b4:57:d6:32:
cc:d1:43:bc:f3:b4:06:d9:7d:2b:bd:47:5d:45:eb:
f0:09:ad:b4:71:dd:c2:1c:82:03:60:82:39:cd:d3:
6c:89:5e:30:7e:17:18:c5:7a:93:ec:12:d1:f6:e2:
21:84:e5:91:52:65:a1:c0:1d:1b:a8:05:90:92:80:
2d:a9:75:36:5b:54:1f:52:d5:de:e6:53:f9:fd:b5:
54:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:82:3E:08:2C:D5:0E:D3:7B:2A:D6:2A:10:5C:89:22:DA:48:19:9B
X509v3 Authority Key Identifier:
keyid:C2:D5:73:B1:67:70:71:F2:FD:6D:44:B8:40:1B:61:21:20:59:8C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:1c:7b:2b:1e:76:ef:ac:59:55:c6:b1:f7:f3:23:da:28:bb:
f1:d0:65:41:3d:17:28:9c:b4:dd:8e:6a:29:9f:dd:76:43:57:
c6:50:80:4d:88:f2:6b:1b:ab:4b:31:bc:f4:76:6d:c7:1d:8a:
66:a1:8e:62:b9:b8:5e:f7:ad:14:5f:03:a3:01:d8:9a:24:63:
dd:fb:41:7e:6e:10:43:1f:ff:4c:0c:c0:d5:05:17:89:64:bf:
97:cd:13:d6:58:84:cf:a2:54:f4:a2:e7:f2:ac:e6:6c:9c:45:
de:d0:5f:cb:a8:ac:0c:de:c6:36:55:4d:bb:03:4f:63:3e:85:
95:d2:b2:3f:dd:61:15:ab:24:2a:6e:2f:78:59:97:db:ec:d2:
86:13:f4:75:30:4c:ff:00:3a:1d:c4:34:38:86:34:93:72:9a:
57:a8:0f:f5:68:95:11:e7:1e:5e:4b:4d:fa:8b:d3:d2:b3:35:
bc:f5:ec:cd:e1:37:a0:2f:ad:b5:5c:65:35:e7:ce:e3:31:72:
a2:c4:69:46:8b:ea:69:39:75:32:6b:b0:3b:f4:27:ba:7c:a0:
23:cb:56:b5:ca:5a:4c:3f:0a:ea:94:72:98:93:74:e1:f4:3a:
ab:ca:2c:35:86:f7:44:98:c2:92:02:4d:68:53:44:dc:5d:ab:
a1:e3:40:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:15 2025 by rpki-client