Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
File: wTyftZyZzftKbYQpzYNwWQYBKxE.mft (raw, json)
Hash identifier: AVqN2fNSfHG4YK1MgLUn8dFSBgvA8AcK9h1mdgqFtqY=
Subject key identifier: 45:AD:53:77:25:0D:97:32:C0:30:6D:66:9E:E1:4F:BD:F0:67:C6:FE
Authority key identifier: C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
Certificate issuer: /CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Certificate serial: 0199221EED8BD4D8E4F010DF0BD49C056D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
Manifest number: 13E6
Signing time: Sun 07 Sep 2025 03:01:16 +0000
Manifest this update: Sun 07 Sep 2025 03:01:16 +0000
Manifest next update: Mon 08 Sep 2025 03:01:16 +0000
Files and hashes: 1: wTyftZyZzftKbYQpzYNwWQYBKxE.crl (hash: iLO18fT2BHDZFnnr+YO2bC/sh8Es9sTYnZn+uyPi//Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:ed:8b:d4:d8:e4:f0:10:df:0b:d4:9c:05:6d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Validity
Not Before: Sep 7 03:01:16 2025 GMT
Not After : Sep 8 03:01:16 2025 GMT
Subject: CN=45ad5377250d9732c0306d669ee14fbdf067c6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:da:b6:e0:50:09:21:16:9f:5f:95:4c:3a:
97:2a:ef:26:e2:9f:0e:f6:cc:e9:e1:7e:c6:f2:2c:
83:4b:9a:ec:fe:02:bc:c5:71:27:e8:ca:00:20:14:
97:48:11:37:84:88:e0:97:16:9d:12:96:08:de:fb:
70:fc:97:12:71:56:0d:9a:44:ba:24:80:70:b7:de:
4c:2a:79:b9:33:c4:d9:b3:01:3a:ab:e2:9d:65:a2:
b2:51:76:93:13:03:bc:4f:e0:a9:8d:4e:d6:f8:b9:
2c:0d:9f:79:95:fd:32:a0:45:b6:6d:17:77:e1:1a:
aa:56:b3:bb:d6:64:b0:df:6b:c0:70:9e:67:a5:64:
9e:80:5d:b6:61:b9:61:36:75:fa:62:50:6b:98:f6:
8b:85:a3:1e:44:b0:a2:ff:b6:58:67:36:bd:f7:c8:
4a:fd:4b:17:db:50:ff:08:e9:74:c1:c2:a9:18:a4:
c1:14:9b:0a:08:cd:f4:b6:6c:af:24:6f:21:eb:70:
58:ca:02:b0:cc:bb:90:6a:b6:42:34:4f:c1:eb:cc:
fd:d6:8d:cc:9b:fb:12:03:9b:b9:6b:01:fb:80:0d:
bc:0b:69:f1:42:71:de:b8:f6:dc:ac:a2:e0:bc:c9:
54:45:fd:73:80:28:f8:4b:09:e1:9f:f8:d6:1c:b7:
d2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AD:53:77:25:0D:97:32:C0:30:6D:66:9E:E1:4F:BD:F0:67:C6:FE
X509v3 Authority Key Identifier:
keyid:C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ea:e0:26:71:85:19:52:0e:58:66:bf:dc:66:47:3f:5a:45:
9e:7d:33:63:97:31:1d:59:73:cd:76:cf:21:7a:b6:7e:51:b8:
e7:cc:8e:ee:d0:0d:3a:45:fe:ff:3c:6f:19:de:4a:3f:bf:bc:
45:96:92:82:d3:3e:96:2f:a5:c5:47:80:e6:7e:d5:a6:e1:a8:
3d:33:b5:01:6e:98:eb:ab:1f:3a:9b:a4:30:ac:de:97:8d:48:
0a:44:f7:7b:3a:33:be:74:31:b8:a9:77:dd:c4:81:c9:68:a4:
9d:d1:90:31:bb:e7:30:a2:3f:62:ee:ef:02:58:e0:85:98:8f:
13:54:90:79:ad:5b:f6:e7:39:e0:b0:85:df:3d:9f:e1:13:9c:
3d:6f:a3:94:9e:c6:df:fd:9f:58:a8:d3:13:b1:d9:9b:1d:93:
98:ef:2f:71:8e:19:1c:47:e6:3f:ca:87:67:f0:9a:db:3b:47:
86:bc:db:39:fb:3a:64:80:1e:f1:7a:f6:64:5e:32:62:f3:ca:
ae:d7:ad:ed:b1:1b:15:99:06:0c:5b:a8:7a:49:99:c9:2d:4c:
a3:b4:5f:15:6b:2a:d0:51:a5:99:11:87:7c:7b:71:4e:fe:f7:
8a:a8:60:e2:fb:20:cf:10:29:6e:08:65:e2:6f:78:af:a5:7d:
e3:e5:71:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:22 2025 by rpki-client