Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
File: wqkR1pxPZFehCd53scdSSdxTDhc.mft (raw, json)
Hash identifier: fmu7fXBh208z+XBXvqQPcXUvVwj730NZt+PJLZJclOY=
Subject key identifier: AA:7A:18:52:BC:C4:B8:BB:47:01:CB:C5:36:6B:87:7D:9B:38:E2:F5
Authority key identifier: C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
Certificate issuer: /CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Certificate serial: 0199FEEBD4563EA55047C5CA85340E6C2ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
Manifest number: 0956
Signing time: Mon 20 Oct 2025 00:01:32 +0000
Manifest this update: Mon 20 Oct 2025 00:01:32 +0000
Manifest next update: Tue 21 Oct 2025 00:01:32 +0000
Files and hashes: 1: JlMTszQ0SriAWERqlr9FMnp6WvU.roa (hash: M6WDGwhPPqHvkOqSI6cVPu36gkAbrulfoDxAqaGV7po=)
2: wqkR1pxPZFehCd53scdSSdxTDhc.crl (hash: D5+/AKmPgCJa6Gm/FNDoeG5hmYNu1eIUS1EwtLTSbBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:d4:56:3e:a5:50:47:c5:ca:85:34:0e:6c:2a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Validity
Not Before: Oct 20 00:01:32 2025 GMT
Not After : Oct 21 00:01:32 2025 GMT
Subject: CN=aa7a1852bcc4b8bb4701cbc5366b877d9b38e2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:5b:47:8c:16:95:fd:e4:9b:d2:e0:a7:75:
63:be:cb:d6:0c:83:ef:0a:c5:6e:dc:3d:ab:6e:a6:
04:79:02:9d:98:f9:c7:05:80:56:e2:55:75:70:f0:
bf:22:8a:06:05:7a:6a:55:e1:53:af:45:d4:93:68:
fb:d4:dc:c1:17:cb:23:98:ba:42:13:1f:32:b2:6a:
92:ed:a6:04:52:99:ca:5d:c8:b4:c4:b6:25:8f:d2:
34:7f:12:56:e5:66:8a:4b:7b:09:bf:24:f1:56:3a:
fc:84:fe:6b:d0:8c:b1:37:b7:17:7d:8c:bc:46:14:
a7:18:8f:32:93:94:12:48:6c:5d:27:69:f3:08:02:
8b:02:db:f5:0e:77:3b:fc:51:06:c1:e0:48:b5:05:
21:78:0d:87:4d:b7:d6:98:6d:5e:ac:12:f8:8c:ac:
21:39:36:ae:9d:b2:c6:cf:34:30:77:71:f3:51:b9:
f6:a1:d2:0a:76:2a:fa:0e:63:45:bd:60:83:e1:58:
41:17:d7:0d:6a:2b:61:37:0c:61:c9:6a:41:11:7d:
13:19:36:35:f6:a1:39:85:64:5f:98:6c:62:0c:6e:
5e:4b:b8:47:30:1a:96:b1:1c:ea:38:63:8d:1a:bf:
55:5c:fd:08:ee:60:e6:7b:19:bf:21:19:e6:aa:e8:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7A:18:52:BC:C4:B8:BB:47:01:CB:C5:36:6B:87:7D:9B:38:E2:F5
X509v3 Authority Key Identifier:
keyid:C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:6e:2c:d2:ee:70:2e:72:b3:21:07:78:00:7b:76:90:6b:3a:
16:42:e2:b5:8e:77:f1:30:6a:86:c2:fe:79:de:5a:aa:73:71:
0a:fc:29:4b:89:06:4d:13:94:99:e1:d9:a8:7a:c1:08:a7:33:
7a:73:95:d6:6e:2d:a5:9c:fb:d4:8a:7f:03:44:74:55:92:3e:
84:06:c6:7c:81:c2:ad:93:f0:fd:2b:33:b9:eb:02:b5:8f:ba:
5d:ae:76:cc:57:b3:49:ef:f6:f8:f7:fb:43:92:8e:7e:8c:ef:
c1:49:0f:01:02:f0:75:5c:c6:e9:52:ab:f7:0c:b1:b9:0f:92:
07:8a:af:93:40:9e:8a:e3:b4:d5:f6:e4:6e:8a:6d:ff:6a:fd:
49:fa:5c:93:42:93:83:ab:6e:14:df:90:f3:4f:e9:06:7c:7f:
da:7e:6f:2c:1b:ed:e0:ba:7a:7d:5c:3b:1d:dd:32:a1:84:97:
bf:ca:49:29:98:32:02:ba:f5:b3:0a:30:3f:65:56:69:33:13:
34:dc:d1:66:29:af:a7:3b:f1:e5:59:13:2b:9a:73:a7:af:9c:
66:70:87:42:ae:d0:38:1f:c1:78:f7:c8:c3:6b:f8:1e:58:b8:
88:f6:11:fb:2d:76:71:8c:dc:cb:3c:36:8f:d8:d6:fb:5e:e8:
5c:6d:22:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:24:26 2025 by rpki-client