Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
File: wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft (raw, json)
Hash identifier: CdoXHLgVeFWIC4sVvslwyOqq3K/Mf3mf0oCyPNeaQsQ=
Subject key identifier: D5:26:78:14:0A:DF:63:CF:58:19:85:B7:D4:2F:CE:E3:0F:52:C2:20
Authority key identifier: C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
Certificate issuer: /CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Certificate serial: 0197B6A13F6F211F0281E4D4EAF7806F7E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:01:49 +0000
Manifest this update: Sat 28 Jun 2025 13:01:49 +0000
Manifest next update: Sun 29 Jun 2025 13:01:49 +0000
Files and hashes: 1: wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl (hash: SOBYh3zDttcL+ASWcliBhuYAdGzybvRConzuqCkPIss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:3f:6f:21:1f:02:81:e4:d4:ea:f7:80:6f:7e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Validity
Not Before: Jun 28 13:01:49 2025 GMT
Not After : Jun 29 13:01:49 2025 GMT
Subject: CN=d52678140adf63cf581985b7d42fcee30f52c220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:6b:02:41:c3:3e:ec:3e:e1:3c:3d:b1:b6:
21:ac:d2:48:5e:f4:cb:91:d0:3d:a2:49:6c:e0:50:
bb:5b:80:da:44:8a:33:00:20:5c:8a:fd:67:81:fd:
a2:dc:bf:05:d0:48:52:c4:1d:81:c9:1a:58:84:6c:
e3:ca:a2:27:d6:26:2f:5f:25:ab:99:8e:53:6f:1a:
d4:90:eb:af:c5:e7:c1:fc:b3:8a:e5:ac:6d:e3:ab:
39:cf:f3:47:74:3b:f9:94:3e:47:a3:2c:64:4f:3a:
7f:56:1b:15:8f:0c:b6:5b:6a:c1:43:79:48:0d:28:
d1:83:b1:72:e8:09:a5:67:67:ec:f8:68:6f:e9:1e:
c1:cd:f0:5d:79:99:f5:d5:1f:ac:eb:07:0c:39:c0:
4f:a6:e2:4f:ae:96:b4:af:24:ba:28:04:d6:fb:ec:
4e:8d:1f:9b:4b:bd:7d:82:b3:c3:43:02:bf:b4:99:
9f:9b:4e:74:d5:b1:e7:73:ec:32:7c:81:52:80:74:
26:0f:3e:7d:34:ed:8c:b7:14:b5:f2:71:8e:76:fd:
3c:8a:91:c3:40:95:80:1f:d0:96:2b:c8:d8:24:43:
98:3c:74:4e:b0:5b:cf:99:52:a2:f7:09:c1:13:2f:
a3:75:a1:7c:a8:f7:a8:38:a9:b5:38:0e:65:0d:44:
64:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:26:78:14:0A:DF:63:CF:58:19:85:B7:D4:2F:CE:E3:0F:52:C2:20
X509v3 Authority Key Identifier:
keyid:C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:21:68:49:c6:a7:b3:c2:e1:1b:59:ce:80:19:1e:c4:89:fc:
f9:70:35:09:9b:03:91:0a:47:74:ae:68:79:3e:e6:b8:fb:3b:
23:00:2e:29:e1:ef:f7:9d:ce:39:0d:3d:29:db:ce:84:f9:7b:
21:2c:58:b6:2a:92:71:c7:ba:75:f1:3c:87:09:cf:0d:e9:9b:
d4:c5:ae:5c:1a:57:58:bf:bd:dc:58:f0:0a:d3:a1:88:67:18:
9b:10:a8:41:ba:bd:81:1c:b2:c8:d2:55:ba:aa:2c:78:d1:91:
63:ec:64:22:0b:4f:9a:5a:38:a3:38:9b:41:37:50:b4:f0:de:
89:3d:e8:59:bc:c6:7d:d3:16:34:a0:51:91:e4:84:2c:53:04:
b8:93:11:1a:f3:dc:09:09:0c:92:07:b2:a1:84:c7:05:04:34:
a0:06:76:db:a7:64:f5:b5:1c:b5:25:02:17:c3:7c:92:9d:b7:
49:d4:8c:ed:1e:76:40:88:fc:88:9b:11:38:6b:f8:17:f2:ad:
d2:ef:bb:a5:93:d1:5a:5b:cf:ad:37:e1:fa:d8:72:ad:46:7b:
d4:1f:50:bd:e6:ff:8e:47:15:b9:80:c8:84:ce:72:86:07:73:
e9:90:c4:10:a8:3b:f8:5a:1a:82:b9:c0:5e:73:42:5e:23:64:
b9:1e:93:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:18 2025 by rpki-client