Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
File: wqmG2jXxcQTosRZSb4BjFXoW25c.mft (raw, json)
Hash identifier: pQmvHubAOrfZW94b/qXRF25EyQC/z7byeOhUGGlVqVU=
Subject key identifier: F3:AC:31:D2:DE:B2:9B:D8:E8:7B:A7:13:9A:2D:78:88:AD:CB:42:4C
Authority key identifier: C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97
Certificate issuer: /CN=c2a986da35f17104e8b116526f8063157a16db97
Certificate serial: 0198D5BC19577261C7371C1018D1A9263D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
Manifest number: 10E2
Signing time: Sat 23 Aug 2025 07:02:10 +0000
Manifest this update: Sat 23 Aug 2025 07:02:10 +0000
Manifest next update: Sun 24 Aug 2025 07:02:10 +0000
Files and hashes: 1: wqmG2jXxcQTosRZSb4BjFXoW25c.crl (hash: XDqWtRuz1j39+i92Rh599bbuNkTseE63yWiaHggiKts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:19:57:72:61:c7:37:1c:10:18:d1:a9:26:3d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a986da35f17104e8b116526f8063157a16db97
Validity
Not Before: Aug 23 07:02:10 2025 GMT
Not After : Aug 24 07:02:10 2025 GMT
Subject: CN=f3ac31d2deb29bd8e87ba7139a2d7888adcb424c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:ce:e1:c9:c7:f4:09:72:a6:f1:16:04:ba:
35:10:17:6e:e5:8a:22:e8:51:0b:7f:18:dc:bb:2e:
08:a9:53:b2:bf:c5:3d:33:7a:cb:33:e8:cd:f7:8c:
09:78:40:82:b5:29:9b:d0:bc:67:57:a6:7d:60:7d:
2c:3f:ae:8a:a9:a1:84:9d:8c:64:25:1f:29:e0:bd:
57:ff:e9:7c:9e:37:80:4a:24:ce:5a:48:7b:97:93:
50:1b:4d:95:ee:00:82:fe:47:9e:be:6d:19:96:6b:
dd:4a:70:d4:d2:55:80:7b:d9:48:a2:65:82:e6:b8:
e6:ec:70:b0:c6:00:c6:2d:08:df:67:45:b7:79:e8:
bf:9e:13:f7:32:fe:9e:a8:5a:5b:fa:ba:7b:0a:bd:
31:8b:62:73:72:de:68:49:b4:b5:ae:a4:5c:ce:cd:
68:5a:90:08:e2:71:c8:a2:51:26:d3:ec:b2:66:81:
b1:19:cf:a6:e1:34:ca:81:81:25:fe:10:2b:44:48:
6a:ca:2b:bb:60:95:ea:e7:b6:4e:4a:fd:ad:34:1c:
e5:a1:fa:a8:be:07:3d:6e:9a:6c:65:4e:94:67:b5:
5c:fb:2a:e1:02:19:e8:68:89:f5:c6:11:32:d4:17:
4d:9d:86:fa:7a:92:25:56:e2:80:61:8f:17:b8:ed:
9c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AC:31:D2:DE:B2:9B:D8:E8:7B:A7:13:9A:2D:78:88:AD:CB:42:4C
X509v3 Authority Key Identifier:
keyid:C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6b:e2:96:d2:18:45:e9:66:7a:b3:79:a8:28:91:54:05:be:
ea:3f:42:48:d5:bc:5d:0a:23:cf:07:4c:5d:9e:89:44:bb:33:
0f:30:26:5a:54:e2:85:b8:13:a4:00:29:21:68:2e:8f:d2:de:
1b:bd:a4:1f:da:04:fd:54:cb:a1:d3:ed:d5:14:55:9b:03:12:
b8:c0:7a:1f:ec:0e:8f:a5:13:f0:8e:a4:70:7a:aa:c0:c6:e8:
e0:72:c6:81:c4:ff:b4:2e:07:fb:0f:da:85:aa:ef:83:b0:86:
5e:da:c9:f4:6b:31:4d:9e:fc:93:73:e7:49:07:8c:fe:20:14:
4c:46:47:3c:44:b3:ec:0c:08:35:4a:b2:b7:6b:18:b9:82:4c:
18:53:04:55:94:30:8e:bf:fa:6e:e8:02:fd:f5:9d:a1:8a:53:
1f:25:4c:55:50:fc:78:1c:ce:00:68:69:68:ab:c9:28:71:84:
6b:b7:cc:70:46:fd:32:6b:5f:b2:ba:b5:28:00:6e:c6:e6:66:
71:81:9f:79:49:67:9e:1e:d6:40:06:c4:29:d0:e2:7c:e7:93:
ed:31:ba:6a:5c:dc:ed:46:37:37:bc:cb:20:a1:00:a6:d6:5f:
1c:eb:ae:d4:e0:77:2c:6e:c1:50:f0:ac:b3:1a:81:76:bc:00:
bd:13:9b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:48 2025 by rpki-client