Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
File: wqmG2jXxcQTosRZSb4BjFXoW25c.mft (raw, json)
Hash identifier: 8/b5Ee/Xub6YiwVQJKyXYcBGXMEXj+JKea6ahsIBY2A=
Subject key identifier: 37:56:0A:C9:47:76:D0:04:33:60:79:5A:3C:24:3F:F4:92:F9:22:50
Authority key identifier: C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97
Certificate issuer: /CN=c2a986da35f17104e8b116526f8063157a16db97
Certificate serial: 0197C56F06EE657C8D6CB8B6505BB4B89DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
Manifest number: 1055
Signing time: Tue 01 Jul 2025 10:01:17 +0000
Manifest this update: Tue 01 Jul 2025 10:01:17 +0000
Manifest next update: Wed 02 Jul 2025 10:01:17 +0000
Files and hashes: 1: wqmG2jXxcQTosRZSb4BjFXoW25c.crl (hash: xZj3iDFYW+GFhCVpmzifnEQvfyQkn/lziOpYOzZAlPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6f:06:ee:65:7c:8d:6c:b8:b6:50:5b:b4:b8:9d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a986da35f17104e8b116526f8063157a16db97
Validity
Not Before: Jul 1 10:01:17 2025 GMT
Not After : Jul 2 10:01:17 2025 GMT
Subject: CN=37560ac94776d0043360795a3c243ff492f92250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:b4:04:16:1e:85:df:50:a6:a8:f5:ab:b7:
7a:a6:5b:82:87:42:ab:96:0c:c3:61:17:d8:75:a3:
7a:83:c5:cd:54:51:98:ee:97:94:ac:3c:9d:50:67:
91:1c:8b:3f:b7:cb:0f:cf:e8:42:00:10:60:a7:4b:
58:7c:3f:6d:80:9a:9e:2a:49:03:a0:cf:0a:ba:4a:
61:9f:be:2e:9e:02:26:5b:ea:dd:63:b4:ef:de:8d:
dc:56:e4:40:c7:82:9c:f9:2d:58:e4:31:18:c3:df:
d7:09:4d:0b:64:e0:9c:e4:28:2c:98:77:f9:28:87:
48:60:55:fb:f4:e5:4f:05:08:0e:a4:76:dc:55:10:
4a:66:ea:b2:58:1d:6b:b5:41:5b:a5:ef:82:ae:40:
e1:6f:83:43:ea:6c:15:55:90:44:85:17:83:e6:f7:
4b:9f:46:2f:31:5c:be:91:14:a2:20:25:a8:b3:f3:
bc:68:91:4f:7b:1a:f7:e4:b0:9f:21:cb:d0:7b:39:
a2:67:27:be:53:d0:07:26:e0:05:6a:19:8e:97:bf:
70:a9:3b:4c:38:4b:00:f7:80:d0:6a:12:2e:11:59:
45:78:96:0a:d3:f7:cb:6d:c1:b0:f6:94:c4:0c:63:
40:00:40:96:f2:a1:91:19:52:a4:ec:c7:c9:d4:7f:
bc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:56:0A:C9:47:76:D0:04:33:60:79:5A:3C:24:3F:F4:92:F9:22:50
X509v3 Authority Key Identifier:
keyid:C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:23:6d:ff:2e:c6:54:76:e4:da:e4:0a:5b:51:42:10:fc:29:
3f:56:d9:43:5d:49:c8:7f:6e:b1:da:e9:20:8f:6e:7a:fe:91:
d5:47:dc:12:75:23:12:c7:e9:7a:f0:cb:4a:44:6d:6c:54:1d:
d6:8a:df:c5:b9:ad:a2:b3:00:9c:bd:cd:fc:3f:96:92:6d:77:
7c:05:73:bd:a9:b8:0d:31:70:bb:81:c3:47:02:2f:5a:55:87:
fa:84:28:c2:e1:90:3f:6e:74:5f:57:2e:01:72:d6:36:d0:64:
af:6a:11:3f:ac:2b:0f:37:bc:cc:c3:1e:de:f8:39:2b:6e:91:
f6:a7:04:47:48:41:53:66:3d:82:e8:61:86:73:b6:aa:57:86:
43:40:ac:9d:1b:d1:fd:9c:73:fe:9d:3c:b0:e4:50:0f:52:e8:
da:b5:25:6a:df:5f:db:62:ae:fc:79:51:25:07:c1:c7:37:8c:
9b:6f:fe:93:ab:d3:79:2f:8c:84:a3:7e:a0:76:f0:10:a1:31:
f1:e6:82:a8:e8:6c:20:81:8d:a5:9f:ce:07:4d:6e:bc:88:ec:
e8:bb:c4:63:9a:64:57:8a:18:59:64:24:c2:50:5d:f8:da:73:
ee:c7:15:6e:fe:22:54:83:a8:3f:ca:89:6a:43:31:d2:72:65:
aa:b0:63:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:20:23 2025 by rpki-client