Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
File: wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft (raw, json)
Hash identifier: WQy56GoEdupWgMChu021kCi1vLtGRoq7MmjzHl7azYs=
Subject key identifier: 21:E2:D2:61:47:BA:65:3D:31:E8:4C:57:D6:5C:E2:4D:52:FE:6D:0E
Authority key identifier: C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
Certificate issuer: /CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Certificate serial: 0198D6610307C54AEF5F4947766D6C2BF2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:02:18 +0000
Manifest this update: Sat 23 Aug 2025 10:02:18 +0000
Manifest next update: Sun 24 Aug 2025 10:02:18 +0000
Files and hashes: 1: wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl (hash: 4PyaZD51v5rt3vWREhV1Xe4RgxUieoTGOI15nPIDheA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:03:07:c5:4a:ef:5f:49:47:76:6d:6c:2b:f2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Validity
Not Before: Aug 23 10:02:18 2025 GMT
Not After : Aug 24 10:02:18 2025 GMT
Subject: CN=21e2d26147ba653d31e84c57d65ce24d52fe6d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:cb:59:c4:6a:19:24:ce:34:95:89:17:96:
98:e8:a9:79:cb:b3:78:3b:44:79:6b:89:08:a1:ab:
00:f6:16:9d:7c:98:e3:3d:12:1b:57:1b:44:b0:f3:
af:03:29:3a:f4:20:dc:47:9f:90:d3:4f:60:04:99:
02:de:b3:b1:b9:94:16:13:70:52:43:a1:33:72:0b:
ca:de:9b:b2:a3:d0:10:88:12:8f:df:05:36:52:b0:
aa:f5:e3:28:b7:98:0b:db:04:53:99:8c:7e:ac:76:
5a:e2:35:a8:1a:40:d8:c8:10:d8:10:77:52:2d:3a:
74:ea:ba:8e:d9:03:92:3c:ba:b2:f3:d0:1c:64:51:
0f:02:83:93:0d:b6:dd:9c:2b:12:de:ac:53:13:94:
88:c7:bb:8b:56:e6:f9:e9:bc:a4:7a:79:a5:2c:6d:
95:e0:4f:20:aa:1f:38:80:50:1c:19:9d:94:f5:b5:
5e:ca:06:9d:bc:ac:99:b3:94:20:3b:4c:1c:3f:f2:
64:8f:65:72:54:53:b7:74:d0:cc:ee:66:0c:ac:35:
77:7a:71:fb:d5:6c:7f:2f:8c:ef:f4:f2:a7:ee:25:
b5:98:85:34:3a:48:69:02:51:6a:92:4b:73:70:41:
64:5e:df:95:ec:9b:ee:6c:5f:53:0a:25:74:52:9c:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E2:D2:61:47:BA:65:3D:31:E8:4C:57:D6:5C:E2:4D:52:FE:6D:0E
X509v3 Authority Key Identifier:
keyid:C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:de:0d:b4:5a:d3:c5:e3:49:31:c9:4a:dc:e9:1b:e5:69:db:
c4:db:50:ec:b3:1a:a4:18:35:8c:73:77:22:9c:f7:7b:de:12:
8b:0c:30:92:91:24:bb:6f:ea:b4:56:35:a4:e6:9e:c8:28:74:
5c:35:7c:e4:c8:ba:4d:37:0c:19:4f:62:de:76:0c:99:39:a9:
39:57:e9:2d:10:8c:54:33:c9:b5:a5:dd:1a:b6:3d:a2:cb:85:
e5:4a:2f:22:6f:1d:35:1f:96:da:e7:ee:0b:97:79:e6:66:53:
d9:b2:3c:28:1f:3e:4c:97:76:d9:aa:5b:83:d3:26:e8:ab:73:
9e:60:64:43:80:6c:1c:ed:c4:7a:0d:7c:24:86:4e:31:99:13:
8f:a6:c7:9e:e2:79:07:40:c2:42:0c:40:6b:27:34:bb:ab:b3:
f1:89:dc:58:7a:b3:f6:2a:82:f6:7f:87:26:ca:f6:d3:33:e9:
48:e9:fb:cd:de:a2:36:d0:7a:03:3c:b7:ec:46:e1:4e:05:72:
19:b8:e9:9d:ad:b5:a9:a1:a1:09:4c:23:2a:d4:2d:a6:92:75:
b9:4e:13:df:4e:eb:fd:ab:15:40:a8:41:5c:39:bf:d9:e8:42:
c7:fd:79:79:4f:45:b3:6f:55:d9:1f:3a:d2:00:f7:86:46:da:
b1:5d:ad:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:16 2025 by rpki-client