Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
File: wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft (raw, json)
Hash identifier: Kj+eEEVMyVyfxvVHv/B9AEmZFlYCzZHOum9bU0E+eUA=
Subject key identifier: 6F:8C:95:F5:89:DB:43:57:04:D1:7B:8D:83:CA:2A:BB:5D:D7:3A:38
Authority key identifier: C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
Certificate issuer: /CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Certificate serial: 01969E9A293A1346D9555FCC06ACA303A2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 04:00:25 +0000
Manifest this update: Mon 05 May 2025 04:00:25 +0000
Manifest next update: Tue 06 May 2025 04:00:25 +0000
Files and hashes: 1: wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl (hash: 4KGm3/tZ0TD6ksMkLsldRalm052DydXyzonShM4Obsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:29:3a:13:46:d9:55:5f:cc:06:ac:a3:03:a2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Validity
Not Before: May 5 04:00:25 2025 GMT
Not After : May 6 04:00:25 2025 GMT
Subject: CN=6f8c95f589db435704d17b8d83ca2abb5dd73a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a5:71:6c:a1:ea:a1:7c:e9:b3:0d:8e:36:58:
0b:01:9b:2a:d8:71:d8:d3:d2:ff:14:1b:b4:c8:27:
b8:47:6a:4e:7f:77:0c:92:88:29:cc:f4:d0:9d:1b:
4c:2b:f4:ef:1e:d3:4e:e2:e7:87:31:ea:fc:2a:b2:
09:01:84:05:24:b4:16:35:8d:01:c7:3f:f4:2c:53:
5d:58:8b:ca:26:e8:aa:2d:be:e4:35:6c:20:dc:ce:
45:22:46:d6:f7:a9:ca:8a:a3:36:e0:aa:4c:6f:fb:
5c:6c:e6:86:38:84:b3:16:57:bf:8e:5d:8c:ed:63:
c3:dc:02:d2:67:8c:16:2e:40:ef:a4:28:cd:6c:a6:
1f:3a:f4:ea:e4:90:64:58:ca:fe:8c:b0:c3:9c:04:
26:a6:87:8a:21:87:cd:70:69:b7:b8:34:15:ef:da:
00:94:f1:75:11:1f:cd:bb:f7:bd:3a:ee:b8:90:8a:
43:75:8f:cc:68:d8:4e:ff:bd:66:d0:b2:07:2e:54:
0b:23:2f:79:e6:f6:9b:20:5a:1b:5a:49:7f:dd:7f:
3b:f0:d8:91:3b:58:d3:cc:ea:d2:ff:8f:e0:2b:cb:
5a:a4:bd:1a:17:20:fd:b8:48:13:a7:79:7f:8e:f1:
04:c1:10:f0:c8:a7:f1:d5:e0:e3:aa:15:50:aa:d7:
89:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8C:95:F5:89:DB:43:57:04:D1:7B:8D:83:CA:2A:BB:5D:D7:3A:38
X509v3 Authority Key Identifier:
keyid:C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:70:e9:6f:6f:78:7a:f2:21:9e:34:ed:dc:4d:6b:76:5b:fb:
53:79:4f:aa:7b:61:80:7f:75:ee:80:2a:28:e5:4f:ea:a9:54:
89:09:5a:81:2c:fc:73:de:7f:60:c5:8a:06:85:ed:81:67:71:
e9:e5:2e:2a:81:97:5c:dc:f0:fe:dd:c4:47:43:a5:5d:85:c3:
e6:7b:4c:b6:93:e3:5f:4a:3e:ce:b1:b9:fa:44:e8:20:ff:dd:
7f:61:06:90:8f:c7:19:22:af:8a:2c:f4:ca:0e:fa:cf:eb:23:
6d:02:a4:d4:a4:f6:3a:a0:22:f0:aa:2b:57:8c:b2:2d:2d:44:
24:70:09:e3:6e:98:18:e4:df:5b:0d:35:6f:4f:f9:ce:6f:77:
9e:de:d0:68:bb:ae:26:ec:5c:fa:8b:86:94:77:c1:b5:2a:8a:
a2:13:4b:63:d2:7d:ba:39:39:d7:08:b7:5d:9e:ab:b4:0e:b0:
20:b2:59:71:57:e1:83:8c:61:e4:6d:e1:be:73:4e:25:6b:59:
e9:98:1c:f3:fe:e6:30:c9:bb:28:71:2b:5b:91:f6:84:0c:59:
a1:ca:08:40:6a:92:c0:b0:55:70:9a:b1:7b:2d:97:67:9d:37:
7d:f5:b0:80:1d:af:9a:da:0b:56:b8:c8:1b:92:13:3c:de:c8:
76:f3:eb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:31:40 2025 by rpki-client