Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
File: WtYwth0ucpL5zviTu21xJCpfS-0.mft (raw, json)
Hash identifier: yvZaYQsrk6VyJn/XYcbtuGGdQjuVQLkedckwL1RNNV0=
Subject key identifier: 1D:F5:3A:96:A2:3E:5E:B9:12:9A:49:8A:3D:D0:3B:8C:9E:12:E8:53
Authority key identifier: 5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
Certificate issuer: /CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Certificate serial: 0199247A8DBB3D3CBE873209D1D1972168EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
Manifest number: 137F
Signing time: Sun 07 Sep 2025 14:00:35 +0000
Manifest this update: Sun 07 Sep 2025 14:00:35 +0000
Manifest next update: Mon 08 Sep 2025 14:00:35 +0000
Files and hashes: 1: WtYwth0ucpL5zviTu21xJCpfS-0.crl (hash: Bdw6bp+49hIaKJwtT/JsMGO3c5UxfCKgxkCghEL1cyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:7a:8d:bb:3d:3c:be:87:32:09:d1:d1:97:21:68:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Validity
Not Before: Sep 7 14:00:35 2025 GMT
Not After : Sep 8 14:00:35 2025 GMT
Subject: CN=1df53a96a23e5eb9129a498a3dd03b8c9e12e853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:9f:be:ba:5f:9e:55:b1:02:43:16:92:92:
9f:99:86:9e:1d:fd:d9:9f:30:d8:ec:23:5d:ca:98:
6d:02:75:da:0b:63:46:ed:1b:67:1a:c9:17:c8:4f:
ac:2c:ab:7a:83:08:8c:38:12:22:9b:a4:cf:d4:4e:
47:10:3e:99:2f:11:24:91:27:c0:06:39:28:f8:09:
95:31:ab:66:3d:f7:1e:92:79:12:b0:33:b7:d7:b9:
1e:c1:79:8a:62:c9:f7:54:13:1c:ea:a2:ec:b3:46:
d3:42:30:ec:1d:3b:d8:99:f0:a9:c9:a7:6a:0d:da:
5d:48:ca:40:90:cc:97:2c:f0:ed:e3:a6:25:de:65:
97:70:a3:b7:ff:f3:97:47:c4:6b:cf:d8:69:a5:a2:
60:96:01:15:8a:1c:ce:2b:13:69:f9:ee:67:1f:5d:
36:c2:be:95:a3:fc:e5:f6:b0:23:86:95:85:35:00:
4d:30:f2:4f:2c:fd:d1:0d:08:58:f0:e2:70:88:9c:
40:f5:ec:1b:0d:89:5e:af:5f:55:19:90:75:62:be:
5e:67:08:8f:aa:89:88:c5:c8:ec:84:e4:5c:ec:8c:
ee:db:b7:60:a9:16:bd:fe:d5:65:c5:90:a5:70:ce:
91:1b:8e:81:39:8e:51:08:26:b2:45:c9:f0:9d:6f:
67:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F5:3A:96:A2:3E:5E:B9:12:9A:49:8A:3D:D0:3B:8C:9E:12:E8:53
X509v3 Authority Key Identifier:
keyid:5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:08:e4:bc:22:db:28:0b:40:5b:2c:ff:9a:e7:e4:81:20:01:
74:e2:fb:a5:d6:7c:1e:1b:af:a0:26:3f:ba:3d:b4:83:69:25:
a9:71:f3:60:75:6a:65:5e:ba:dd:1d:e7:a3:79:f0:ab:e9:df:
58:8e:b7:5d:0a:ee:c5:b0:82:5a:57:e5:89:1b:39:c9:ac:0f:
ef:27:cb:0e:6c:7e:19:48:86:bd:93:4a:6d:f0:bc:17:dc:65:
c7:5c:9a:0b:58:63:c4:8d:9f:61:9b:28:24:82:5c:2b:b6:b8:
71:ff:13:33:e7:b3:fb:bc:10:fd:26:2f:75:82:60:70:8d:da:
c1:b4:cf:8e:27:1e:44:c8:29:4f:ea:27:7c:23:bb:9b:9a:66:
f2:14:8b:01:08:7e:7f:d5:8b:b7:27:e5:84:aa:0b:22:98:91:
16:e2:ec:66:a0:f9:f5:fb:1f:5c:55:99:2f:2a:e3:b3:85:7e:
dd:eb:a4:53:df:01:d3:94:f5:cc:0b:c2:25:76:e0:ff:04:8b:
f2:e3:8b:7a:d8:6a:7d:1c:e9:ab:e6:22:d7:30:dc:5c:bf:0f:
94:55:00:46:18:d0:8d:a8:10:ea:10:74:b7:55:ce:95:cf:ed:
05:8e:c3:48:8f:9d:34:7b:c0:56:15:19:b4:19:d3:04:ad:55:
ae:5e:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:08:42 2025 by rpki-client