Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
File: W71p2ZhITBOfrBJlpkV0XzMzzx0.mft (raw, json)
Hash identifier: Xn97RLBSxUAHLfDUizhn+CFKIF/ZBHeIb7qrNdn+/Xw=
Subject key identifier: 9C:5B:F2:81:EF:CE:45:1A:CC:D6:94:45:B9:29:79:0E:F2:2A:C3:0B
Authority key identifier: 5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
Certificate issuer: /CN=5bbd69d998484c139fac1265a645745f3333cf1d
Certificate serial: 01988EECF2B697B89CF9123630C5242A88F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 13:02:29 +0000
Manifest this update: Sat 09 Aug 2025 13:02:29 +0000
Manifest next update: Sun 10 Aug 2025 13:02:29 +0000
Files and hashes: 1: W71p2ZhITBOfrBJlpkV0XzMzzx0.crl (hash: JpL528qllC5YA3vb3jplIMJ9FO0g7qRh5iIhqAgmVyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:f2:b6:97:b8:9c:f9:12:36:30:c5:24:2a:88:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bbd69d998484c139fac1265a645745f3333cf1d
Validity
Not Before: Aug 9 13:02:29 2025 GMT
Not After : Aug 10 13:02:29 2025 GMT
Subject: CN=9c5bf281efce451accd69445b929790ef22ac30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:7c:4e:21:0e:f4:ee:76:bf:35:73:41:dd:
75:6c:5c:a7:e7:df:38:fc:de:c8:33:2f:4c:2f:c6:
7a:0b:8c:73:c3:f4:aa:f3:4a:76:68:9c:af:f7:a7:
b0:6e:f3:01:07:dc:26:fd:20:13:0a:b5:0c:4f:06:
9d:b8:26:bf:69:d7:6c:13:01:74:c3:8e:2a:28:7f:
df:f5:ba:df:17:d2:7a:b7:4a:46:9d:b0:2e:04:06:
e3:42:4b:25:9b:76:9c:7c:84:69:dc:f0:42:3d:82:
67:79:4c:d8:10:f0:cc:56:91:09:6d:73:11:55:c1:
39:71:52:be:68:93:82:87:5a:a5:20:fd:c3:bc:cc:
85:7b:34:37:c5:79:3f:c1:f3:78:ad:a8:4a:8c:7b:
fc:4b:9c:bc:a1:43:2a:6e:72:db:02:75:27:e1:e7:
72:1a:f7:a5:ea:1f:0c:c9:1d:37:e8:c3:81:85:e8:
3e:3d:88:4e:40:79:24:f4:75:04:71:ea:eb:8b:f7:
a6:e7:ee:d3:1e:d0:8b:0d:6d:be:0e:f9:03:cc:25:
9c:5c:78:69:00:94:51:2f:84:bf:61:ed:bb:f4:2d:
7c:5f:b2:29:f6:2a:e2:13:40:f1:21:ee:67:53:17:
16:a7:18:65:d4:20:22:f2:a7:61:58:37:12:b9:dc:
ac:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5B:F2:81:EF:CE:45:1A:CC:D6:94:45:B9:29:79:0E:F2:2A:C3:0B
X509v3 Authority Key Identifier:
keyid:5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:43:ab:96:ac:4c:19:1c:d7:6d:a9:26:8c:2c:2f:20:de:3e:
5b:fc:86:eb:f6:27:e4:59:da:83:8c:d4:8d:85:89:55:80:07:
51:e6:2a:cb:5c:83:57:a3:fe:e6:95:06:97:08:c5:3c:94:6d:
c2:21:b7:17:da:c7:72:45:84:bc:86:dc:89:b7:af:c1:b2:3a:
b8:18:ec:27:1a:b8:d0:86:58:0a:d7:34:e0:8f:07:c3:3a:65:
e8:a4:61:d2:bc:0a:0c:b4:3d:63:d9:f7:11:50:1f:77:59:2a:
98:89:bd:00:f1:01:6e:c2:b8:80:3b:18:3f:b7:34:85:a3:28:
00:51:9f:d7:fc:62:69:3d:46:56:75:2b:e3:56:8c:a8:86:3e:
9d:8d:28:7b:31:85:cb:0d:99:1c:2e:48:76:f1:5e:63:b0:d1:
0b:fb:c4:0d:19:eb:ba:9b:ee:06:fb:67:4e:df:65:35:76:90:
74:57:78:1b:ac:a5:e6:a7:db:57:bb:db:46:3a:24:a7:15:5a:
fd:65:6f:4c:57:61:96:a0:f6:73:be:c5:b7:7b:a0:07:04:da:
bd:70:02:89:5e:4a:26:cd:d6:e5:9e:17:bc:05:e3:b2:62:00:
a9:c3:c4:f2:8b:e1:53:f0:f4:2a:64:6b:b5:5f:54:7f:55:82:
17:ae:0c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:47:50 2025 by rpki-client