Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
File: WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft (raw, json)
Hash identifier: nVO/1L5H1DQAAKU2HbBnPeW0GF05qjy33DGEfoVVk7Y=
Subject key identifier: EA:A9:EF:2C:82:B4:D2:37:73:3C:89:6E:F0:53:D7:B0:DC:42:8A:10
Authority key identifier: 59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A
Certificate issuer: /CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
Certificate serial: 019A03A3B56C51243210008A7B06CAA98FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
Manifest number: 1017
Signing time: Mon 20 Oct 2025 22:00:51 +0000
Manifest this update: Mon 20 Oct 2025 22:00:51 +0000
Manifest next update: Tue 21 Oct 2025 22:00:51 +0000
Files and hashes: 1: WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl (hash: iCH5uM0XfO4wtSH0x905dcJktuwskVyyfujKGuciRco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a3:b5:6c:51:24:32:10:00:8a:7b:06:ca:a9:8f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
Validity
Not Before: Oct 20 22:00:51 2025 GMT
Not After : Oct 21 22:00:51 2025 GMT
Subject: CN=eaa9ef2c82b4d237733c896ef053d7b0dc428a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:da:a3:45:24:00:9f:20:87:b2:65:60:cd:
9a:47:0c:41:05:ad:6d:63:e6:6f:53:02:0f:f4:32:
f8:16:1e:08:fd:46:46:a1:a0:9d:de:d8:4f:ca:15:
4d:22:db:18:f8:e3:75:4d:bb:80:13:19:72:a5:aa:
2b:8e:bb:d4:16:44:a4:0e:19:d9:3a:b4:4b:36:ac:
54:d2:3e:cd:2c:7b:28:6b:9b:ca:54:5a:1c:2b:e5:
e8:3f:98:8c:22:b7:ec:0d:9e:a9:d2:3c:ae:58:57:
5e:0c:24:96:0d:2f:a8:59:6a:11:8a:64:75:b0:67:
f6:b4:7d:04:2f:63:02:e5:b7:d5:1a:38:29:8e:b4:
59:83:e1:85:8c:ec:c6:01:16:e1:40:70:17:19:e5:
1b:8a:15:8c:e0:9e:32:94:d0:ef:df:1f:a2:c4:3c:
3d:0b:14:75:ea:7c:22:b5:34:bc:40:cf:46:17:7e:
ef:70:0a:f5:a3:65:c1:d1:3c:74:ca:58:c5:19:1a:
4f:5a:05:42:84:80:51:d4:7c:f9:e4:ff:5c:73:3c:
d7:4a:cf:36:35:38:3d:7f:36:b0:8f:90:c1:47:c2:
6e:09:13:0d:93:fb:ed:66:39:ac:cf:2c:be:fb:47:
62:ff:90:fc:ff:6b:55:ec:cd:91:36:8d:48:59:5a:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A9:EF:2C:82:B4:D2:37:73:3C:89:6E:F0:53:D7:B0:DC:42:8A:10
X509v3 Authority Key Identifier:
keyid:59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:96:94:75:2b:b2:b4:53:ab:d3:cc:01:3d:0c:a4:92:59:1a:
36:80:12:dd:20:5d:3b:a4:40:fb:61:36:aa:03:81:5b:c6:f7:
96:47:8c:28:59:0e:c5:a7:81:ce:de:52:01:cd:53:1a:a0:2d:
ae:22:c4:07:40:bf:b0:6e:3b:79:d9:a6:ec:d8:24:a9:80:7f:
69:bc:31:9b:7d:03:d8:c5:18:b8:84:22:1f:eb:d3:7f:83:4e:
95:2a:b6:ee:cc:d4:34:e5:da:ce:2b:7e:22:2a:c4:0c:d3:51:
2e:02:46:ee:ed:b9:37:cc:15:87:32:af:d4:88:83:04:c3:0e:
85:a5:9a:60:45:32:1e:90:b4:18:23:05:37:d7:4c:0c:3e:58:
3f:06:88:eb:b3:d8:cb:44:91:88:e5:1d:05:d1:12:d6:d9:79:
86:60:f4:13:22:90:b5:10:66:61:c3:94:c2:24:57:bb:55:b9:
52:76:f2:26:98:82:17:6f:35:4a:ac:46:ee:12:a9:91:72:51:
6e:48:cd:1b:1d:c5:45:b6:e0:f3:b1:49:a8:0f:02:d1:6d:f9:
3a:02:35:b6:3f:dd:fe:50:c9:6e:a4:e0:9c:bc:18:48:4e:1a:
05:18:85:f4:17:f1:db:c6:25:5c:67:dc:19:45:b9:bc:fe:ab:
2d:95:c0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:41:20 2025 by rpki-client