Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
File: wtVzsWdwcfL9bUS4QBthISBZjM8.mft (raw, json)
Hash identifier: mfI7OhyZoBYbrjaGRiiLOc7d0K/ORq2YFsaxYElAqiw=
Subject key identifier: 65:5D:66:D7:61:A6:B5:65:90:BA:96:FA:C3:6F:0A:F3:CC:A9:C3:E8
Authority key identifier: C2:D5:73:B1:67:70:71:F2:FD:6D:44:B8:40:1B:61:21:20:59:8C:CF
Certificate issuer: /CN=c2d573b1677071f2fd6d44b8401b612120598ccf
Certificate serial: 0197B6A0D34814703FE91A4CD7302D7AB7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:22 +0000
Manifest this update: Sat 28 Jun 2025 13:01:22 +0000
Manifest next update: Sun 29 Jun 2025 13:01:22 +0000
Files and hashes: 1: wtVzsWdwcfL9bUS4QBthISBZjM8.crl (hash: MMlEtfa7Ajt4sp8zTXZQ57s15gwE8d+WXD11YWGJLC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d3:48:14:70:3f:e9:1a:4c:d7:30:2d:7a:b7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d573b1677071f2fd6d44b8401b612120598ccf
Validity
Not Before: Jun 28 13:01:22 2025 GMT
Not After : Jun 29 13:01:22 2025 GMT
Subject: CN=655d66d761a6b56590ba96fac36f0af3cca9c3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ef:70:26:4f:00:2e:a1:f3:80:24:c3:4e:68:
c4:a1:52:da:c3:dc:a6:c3:d2:b1:8e:08:d4:83:2d:
20:53:3f:37:08:1a:32:0e:2f:24:2f:31:aa:b6:e9:
4f:0a:42:68:1e:35:77:a6:a7:49:2d:d6:8d:b0:7f:
cb:0a:4e:12:9d:6b:34:0d:7e:dd:4e:3c:f3:45:90:
6f:ca:d6:b3:32:94:6f:85:a3:6c:0d:14:5e:8a:4c:
ad:8d:c6:54:e9:4b:3f:7b:ed:ba:59:a6:3b:2c:05:
88:84:28:53:f1:09:e1:2e:53:ed:fb:94:5f:b4:b3:
00:6e:02:65:25:b6:d1:75:ff:a3:5d:ab:df:25:7d:
b7:80:57:51:47:8b:7c:c0:b5:5a:da:dd:86:6e:dc:
27:55:bb:9f:56:12:12:fe:6d:dc:e3:0e:30:6d:f0:
36:d2:3c:74:00:aa:30:36:ac:76:df:64:0e:03:f2:
39:eb:6d:6c:95:78:70:a3:a4:38:da:85:d7:9c:cc:
ea:23:88:ff:fc:1a:c2:42:69:fd:79:78:a2:e6:c1:
c5:c3:06:0f:9f:a1:fd:91:71:90:25:1d:68:4e:92:
90:cb:d6:8c:b6:21:c0:a9:82:44:76:9b:e7:8f:e6:
43:7a:1f:c2:90:08:7d:58:bf:24:51:17:90:01:b1:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5D:66:D7:61:A6:B5:65:90:BA:96:FA:C3:6F:0A:F3:CC:A9:C3:E8
X509v3 Authority Key Identifier:
keyid:C2:D5:73:B1:67:70:71:F2:FD:6D:44:B8:40:1B:61:21:20:59:8C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ff:3c:76:9e:9c:c7:3f:32:21:64:22:22:15:60:7d:57:e9:
85:27:6c:4e:b9:4b:ec:9a:a3:22:81:84:e8:7e:5d:ca:63:9b:
2e:e0:33:60:4d:a7:0c:0c:ca:74:e3:72:6f:51:71:1a:bf:fb:
62:29:bf:a5:90:45:a7:67:21:ae:4e:73:09:ab:78:1e:a8:e3:
2b:11:4d:42:fd:6e:00:d2:a4:a4:d4:bb:de:65:55:35:2f:fa:
24:45:5e:a6:18:29:52:d7:50:c9:f8:ac:9b:77:78:e8:41:68:
c8:c1:93:54:7f:c7:50:1e:de:a3:ef:92:95:4d:40:cb:72:43:
58:7e:1e:a8:fd:af:5e:aa:66:3e:35:ea:87:3a:3b:3a:27:b0:
0b:d4:0d:ff:9d:70:30:10:cb:44:5b:fb:f9:15:aa:13:81:c6:
9c:6f:db:43:df:ec:45:9c:ff:00:f8:fd:08:7e:7b:e5:df:d1:
cc:87:78:96:e4:f3:58:9e:2e:c8:6b:72:10:bb:76:83:f2:d0:
d3:b4:14:3c:c0:84:d0:15:e1:6d:83:b0:85:2d:3e:f7:cd:b2:
55:13:ca:9e:95:1f:44:7a:4e:db:0f:83:27:b1:d1:0b:a9:2c:
59:2a:4b:ad:9a:53:b8:bd:68:c8:ce:ec:fa:b1:54:5d:c0:9c:
22:14:21:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:55 2025 by rpki-client