Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File: Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier: oOSGH+MgjgPQCf057kwrtlmfyGXzkBi2nmZGjW65ncg=
Subject key identifier: 73:00:A6:7F:78:C7:FD:61:46:AC:8E:84:7F:55:5D:22:11:1F:95:30
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer: /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial: 0197B6A1296AA1CDC299BEC149B243838D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 13:01:44 +0000
Manifest this update: Sat 28 Jun 2025 13:01:44 +0000
Manifest next update: Sun 29 Jun 2025 13:01:44 +0000
Files and hashes: 1: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: xCAkg5D9QV+YnYhkVZTHPSKUymgbRQcHi2bRXrcfVPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:29:6a:a1:cd:c2:99:be:c1:49:b2:43:83:8d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
Validity
Not Before: Jun 28 13:01:44 2025 GMT
Not After : Jun 29 13:01:44 2025 GMT
Subject: CN=7300a67f78c7fd6146ac8e847f555d22111f9530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:84:b7:5c:d2:ca:b0:51:01:eb:5b:5c:40:
ac:f0:01:c9:4b:9b:c4:b4:32:c1:a6:a9:ef:02:4b:
97:cd:a2:74:f9:8d:82:1b:50:30:3f:11:9e:d7:cb:
0a:4d:e5:81:15:8d:9c:c4:64:da:62:ae:24:41:1a:
e0:26:07:1c:45:c5:87:0e:fd:32:31:3e:6c:64:ee:
06:9d:c0:c0:71:61:45:85:b6:38:b8:55:d2:7b:eb:
8c:17:01:a8:0b:dc:cc:b0:96:81:4e:5b:c8:6d:17:
58:54:bc:1e:51:64:ad:cb:92:3c:d8:d2:0c:ce:99:
20:bb:69:9d:1c:df:f1:8c:bd:1d:39:b2:7a:b2:28:
2e:12:7e:a5:25:2a:2b:27:ab:f9:82:b9:d6:66:cb:
9f:be:65:bf:cc:90:d4:e0:87:b5:8b:ba:dc:30:2e:
31:9d:2d:a4:4e:e0:2e:45:f0:b7:ff:3a:84:ff:32:
75:3e:da:6e:74:6f:70:68:c9:98:e6:4f:08:53:f4:
66:e1:1d:59:ab:e8:1a:31:eb:a3:7c:71:71:79:ad:
42:e4:68:39:24:b0:90:85:f8:21:75:9f:9a:00:0c:
ce:36:3e:43:bb:53:f3:28:b0:10:29:d1:60:57:c6:
29:35:7a:a0:ef:a5:87:0a:30:25:29:49:23:81:28:
68:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:00:A6:7F:78:C7:FD:61:46:AC:8E:84:7F:55:5D:22:11:1F:95:30
X509v3 Authority Key Identifier:
keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b3:ac:4e:f5:2f:f1:38:bd:55:39:ba:69:df:e9:9a:0a:8f:
6e:e0:e6:91:b0:50:a8:7c:bf:a1:9f:c9:47:2a:19:71:8a:9f:
49:fd:71:85:b1:f4:c8:04:16:17:c3:e2:e4:d7:68:72:1a:46:
b7:89:a8:b3:70:b0:a3:02:16:21:e6:3d:a6:d1:18:0b:d8:68:
3f:d7:f7:56:31:e0:9b:e4:16:d2:bf:4e:70:7c:90:5c:35:37:
9a:4d:39:f8:76:14:45:8b:d6:f0:c6:07:40:46:5c:50:15:d1:
e8:32:7f:9f:ca:70:05:27:d3:93:f5:e9:39:06:1d:d8:f2:50:
16:71:e4:84:b0:8f:c3:fd:9e:ff:71:72:90:38:a5:05:f7:73:
e0:77:16:14:d9:0f:2f:84:6e:4b:b0:5c:62:d6:74:be:c3:0e:
43:5f:44:b9:d4:ec:f2:42:e6:63:6c:40:07:6c:87:99:b2:82:
b6:33:a4:cd:d6:e5:01:76:9a:c7:4a:48:6d:ea:3e:d7:d0:67:
68:37:b7:44:2c:30:e8:49:98:2c:31:0c:34:c8:b9:3a:97:a1:
73:fc:08:9d:3f:cd:89:e6:77:6f:82:a6:c8:45:8b:c9:b5:ce:
4d:11:39:ef:ff:94:9c:d8:05:a7:7a:d3:30:cb:ce:20:bf:e1:
02:a5:98:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oSlqoc3Cmb7BSbJDg41aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhY2Y5MDJjNjI4MGViNWZlYWY2NzVjOTg5ODlkMDVjZDE1
NzQ0MTEwHhcNMjUwNjI4MTMwMTQ0WhcNMjUwNjI5MTMwMTQ0WjAzMTEwLwYDVQQD
Eyg3MzAwYTY3Zjc4YzdmZDYxNDZhYzhlODQ3ZjU1NWQyMjExMWY5NTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHmEt1zSyrBRAetbXECs8AHJS5vE
tDLBpqnvAkuXzaJ0+Y2CG1AwPxGe18sKTeWBFY2cxGTaYq4kQRrgJgccRcWHDv0y
MT5sZO4GncDAcWFFhbY4uFXSe+uMFwGoC9zMsJaBTlvIbRdYVLweUWSty5I82NIM
zpkgu2mdHN/xjL0dObJ6siguEn6lJSorJ6v5grnWZsufvmW/zJDU4Ie1i7rcMC4x
nS2kTuAuRfC3/zqE/zJ1PtpudG9waMmY5k8IU/Rm4R1Zq+gaMeujfHFxea1C5Gg5
JLCQhfghdZ+aAAzONj5Du1PzKLAQKdFgV8YpNXqg76WHCjAlKUkjgShorQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMApn94x/1hRqyOhH9VXSIRH5UwMB8GA1UdIwQY
MBaAFFrPkCxigOtf6vZ1yYmJ0FzRV0QRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iYWNhYzAtNTdkYi00MzQ3LThjODct
ODliNWI2N2I3MjM0LzEvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iYWNhYzAtNTdkYi00MzQ3LThjODctODliNWI2N2I3MjM0
LzEvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLOsTvUv
8Ti9VTm6ad/pmgqPbuDmkbBQqHy/oZ/JRyoZcYqfSf1xhbH0yAQWF8Pi5NdochpG
t4mos3CwowIWIeY9ptEYC9hoP9f3VjHgm+QW0r9OcHyQXDU3mk05+HYURYvW8MYH
QEZcUBXR6DJ/n8pwBSfTk/XpOQYd2PJQFnHkhLCPw/2e/3FykDilBfdz4HcWFNkP
L4RuS7BcYtZ0vsMOQ19EudTs8kLmY2xAB2yHmbKCtjOkzdblAXaax0pIbeo+19Bn
aDe3RCww6EmYLDEMNMi5Opehc/wInT/NieZ3b4KmyEWLybXOTRE57/+UnNgFp3rT
MMvOIL/hAqWYPA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:24 2025 by rpki-client