Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
File: WtYwth0ucpL5zviTu21xJCpfS-0.mft (raw, json)
Hash identifier: S+X7MwI/KvFv29+ksFb9hlbpCmLobbZEakxuBbgIC5g=
Subject key identifier: 22:9A:10:A8:7F:73:10:93:DA:9C:F6:3B:B3:D6:53:4A:29:71:2B:13
Authority key identifier: 5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
Certificate issuer: /CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Certificate serial: 019A70A5889B28834A7BAA99896629F976A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
Manifest number: 142B
Signing time: Tue 11 Nov 2025 02:01:27 +0000
Manifest this update: Tue 11 Nov 2025 02:01:27 +0000
Manifest next update: Wed 12 Nov 2025 02:01:27 +0000
Files and hashes: 1: WtYwth0ucpL5zviTu21xJCpfS-0.crl (hash: +0fnSsANDidqGngmcWxpD6cVot1f7dtCluGqe1rUbSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:88:9b:28:83:4a:7b:aa:99:89:66:29:f9:76:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Validity
Not Before: Nov 11 02:01:27 2025 GMT
Not After : Nov 12 02:01:27 2025 GMT
Subject: CN=229a10a87f731093da9cf63bb3d6534a29712b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:63:06:ea:91:75:19:2f:c9:37:29:54:96:
5d:bd:88:33:ab:cb:d6:a0:79:b5:e0:95:21:db:60:
6a:65:7c:22:ee:f2:83:10:67:60:be:cd:33:c3:56:
b0:4c:dc:46:87:25:c9:fc:6b:1f:2d:66:3a:98:35:
0f:a0:f5:32:23:d6:49:86:9c:5a:53:5b:df:c0:61:
78:fd:6a:7a:59:37:c8:19:ba:08:b3:9a:4e:fd:52:
29:29:61:1e:98:2c:05:06:c2:9b:e5:7b:69:55:1e:
e3:22:11:f3:23:54:07:f1:de:f6:74:13:15:07:9b:
67:6e:a1:b5:bc:f1:a5:51:05:d9:ca:d5:2f:5d:4b:
9b:b6:38:7a:34:6d:9b:c7:70:45:96:a6:11:4d:14:
d9:41:f8:78:3e:23:7a:b8:06:a3:46:8e:37:63:af:
8b:54:49:db:1c:cf:35:7d:02:ea:71:48:8e:26:80:
fe:c2:f5:7f:ed:0b:6c:08:97:01:24:a9:03:14:d8:
dc:2c:b0:f2:d3:2e:e5:76:00:ce:00:5c:fb:54:3c:
fb:94:f6:48:67:c0:42:1b:c5:64:74:03:74:a0:68:
88:8f:1f:35:67:28:7d:09:bc:45:e3:f3:e1:36:78:
02:cd:36:d4:a3:c5:20:d6:40:c8:e4:31:2a:be:04:
0a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9A:10:A8:7F:73:10:93:DA:9C:F6:3B:B3:D6:53:4A:29:71:2B:13
X509v3 Authority Key Identifier:
keyid:5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6e:40:07:f7:c9:de:8e:52:bc:f6:92:29:70:14:61:29:e2:
1a:34:a4:9d:f0:2c:e3:61:fd:c7:90:44:c2:48:6f:96:02:98:
d7:84:e6:db:ba:86:5a:eb:6a:f2:8a:db:8e:86:fc:bd:9f:90:
00:56:4d:8e:26:5d:7c:92:6c:da:47:fc:e5:63:60:d3:d2:02:
27:48:40:ee:2e:8a:1b:58:88:93:2d:17:ba:ec:15:dc:0b:91:
2e:93:29:5e:fe:99:b5:bf:0b:6d:e2:f8:07:d7:b9:f8:84:69:
25:0e:6a:32:cf:a3:98:a4:a2:b9:13:97:f9:ac:0c:72:7f:1e:
be:48:ea:1c:80:5a:45:b3:a7:00:05:cc:e0:90:f6:c4:2e:a9:
a8:38:cd:4c:5d:9d:7f:db:8c:38:f5:ea:04:9c:76:fd:9a:38:
44:17:ba:aa:0c:bd:ae:e9:a5:6e:3a:00:eb:ce:5a:f7:c3:7c:
72:7b:79:ae:4a:e4:bf:d9:c5:47:66:56:88:c2:2a:e5:38:32:
7e:b7:28:33:a0:c3:60:fc:57:ad:1d:f6:3c:48:b2:0d:7f:7f:
73:40:3a:f8:97:4b:c5:04:9f:a1:a6:90:16:61:c9:a8:55:0e:
86:6d:10:d7:08:c9:3b:3c:d3:0a:aa:bc:00:21:89:4d:c7:15:
58:20:83:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:17 2025 by rpki-client