Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File: Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier: ZxFtYaeaTP7RSxz4YnYLRzgkJuXvTC3YIK+lMI6oNjM=
Subject key identifier: 91:28:07:D1:4A:C5:67:8C:22:7F:93:7B:38:2D:C3:CC:C5:56:B2:14
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer: /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial: 0196AA3104AB2DF85F3B052C302EB77E5F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number: 1525
Signing time: Wed 07 May 2025 10:01:01 +0000
Manifest this update: Wed 07 May 2025 10:01:01 +0000
Manifest next update: Thu 08 May 2025 10:01:01 +0000
Files and hashes: 1: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: yFzDGHhhrS7MrTFc/3xnzZJ22hJNXZzH6cifeYYrLHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:31:04:ab:2d:f8:5f:3b:05:2c:30:2e:b7:7e:5f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
Validity
Not Before: May 7 10:01:01 2025 GMT
Not After : May 8 10:01:01 2025 GMT
Subject: CN=912807d14ac5678c227f937b382dc3ccc556b214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:ff:99:13:dd:b8:f1:b2:21:af:2a:b3:ec:
d9:ff:88:69:91:2e:23:5b:4e:08:11:c4:f8:7e:9d:
1c:34:05:d3:8e:7d:57:e0:dd:e9:be:8d:af:b9:d7:
76:df:68:36:a9:31:95:29:b4:5a:74:e9:54:3d:e6:
c3:61:76:f6:d8:f6:a4:c6:00:80:b5:d1:4f:78:81:
15:73:a0:c1:ed:bc:0c:64:5c:27:97:fc:1e:3e:90:
fd:53:ed:5d:dc:ce:c2:4d:5f:11:7c:87:6b:4a:d0:
d8:72:cc:d8:c1:84:b3:dd:36:87:fa:a3:e4:c5:38:
f5:9d:72:88:8d:4a:ee:62:d0:59:3a:cc:d7:75:6d:
60:99:7a:13:5b:2b:e5:f3:21:69:cf:46:18:b0:ba:
bb:2a:e4:e3:10:ef:67:7c:be:87:58:73:76:ea:6b:
61:30:8c:9e:44:9d:9d:17:98:b2:1a:03:33:6d:b2:
d7:6a:4f:b2:ba:1f:4e:dc:7c:f5:96:e3:8b:b3:47:
a6:4f:99:fb:55:29:08:6b:14:54:59:98:40:4f:e0:
50:3d:79:7b:3b:f1:5d:ad:aa:87:4c:60:3e:fd:c4:
8e:79:02:cb:3e:c6:2b:be:0e:7a:49:67:fa:22:da:
03:c3:87:54:20:1b:fe:5b:cc:d3:21:8f:00:34:8d:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:28:07:D1:4A:C5:67:8C:22:7F:93:7B:38:2D:C3:CC:C5:56:B2:14
X509v3 Authority Key Identifier:
keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:05:43:a0:54:fa:9f:1a:5b:ef:eb:9f:12:fe:ec:2b:30:61:
3a:06:8d:18:3c:e9:70:57:cd:2b:cb:ef:33:0b:63:76:d8:d0:
8c:28:6d:d5:c9:72:19:16:dc:3e:19:f2:1f:90:f7:f1:5f:65:
20:8e:cd:b6:c4:0b:4c:cc:48:bd:ef:04:5d:e2:55:e1:48:ee:
a4:2e:38:78:fc:3d:21:a1:6d:98:f2:93:4b:dd:9b:2a:29:44:
5d:a2:d0:4c:88:dc:26:e6:c2:e6:5a:92:29:6e:a0:ae:cf:57:
26:c6:17:c0:19:98:cb:f1:ae:ab:85:f6:85:16:60:18:94:9c:
48:0a:d1:48:ab:d2:0e:f3:8f:93:65:eb:e0:c6:ed:82:66:54:
ae:27:3a:d9:60:d3:d6:a0:59:5f:06:77:e1:3e:d3:d6:55:ec:
74:8d:88:e6:c8:22:f1:43:d3:7e:62:9e:da:bb:6e:14:be:07:
4f:51:c7:f6:96:c2:a8:fc:bd:73:78:c6:aa:ca:4d:c1:bf:7c:
f9:69:82:95:b1:c3:23:9c:8a:88:db:ab:2b:76:14:97:c2:ca:
1a:b3:3f:b4:00:76:44:fd:d9:75:51:83:42:1d:de:70:a3:68:
16:42:5a:06:ce:b7:ff:d8:e5:ae:49:5f:5e:2c:5c:64:35:3f:
a2:05:e5:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaqMQSrLfhfOwUsMC63fl+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhY2Y5MDJjNjI4MGViNWZlYWY2NzVjOTg5ODlkMDVjZDE1
NzQ0MTEwHhcNMjUwNTA3MTAwMTAxWhcNMjUwNTA4MTAwMTAxWjAzMTEwLwYDVQQD
Eyg5MTI4MDdkMTRhYzU2NzhjMjI3ZjkzN2IzODJkYzNjY2M1NTZiMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqD/mRPduPGyIa8qs+zZ/4hpkS4j
W04IEcT4fp0cNAXTjn1X4N3pvo2vudd232g2qTGVKbRadOlUPebDYXb22PakxgCA
tdFPeIEVc6DB7bwMZFwnl/wePpD9U+1d3M7CTV8RfIdrStDYcszYwYSz3TaH+qPk
xTj1nXKIjUruYtBZOszXdW1gmXoTWyvl8yFpz0YYsLq7KuTjEO9nfL6HWHN26mth
MIyeRJ2dF5iyGgMzbbLXak+yuh9O3Hz1luOLs0emT5n7VSkIaxRUWZhAT+BQPXl7
O/FdraqHTGA+/cSOeQLLPsYrvg56SWf6ItoDw4dUIBv+W8zTIY8ANI2wpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEoB9FKxWeMIn+Tezgtw8zFVrIUMB8GA1UdIwQY
MBaAFFrPkCxigOtf6vZ1yYmJ0FzRV0QRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iYWNhYzAtNTdkYi00MzQ3LThjODct
ODliNWI2N2I3MjM0LzEvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iYWNhYzAtNTdkYi00MzQ3LThjODctODliNWI2N2I3MjM0
LzEvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAVDoFT6
nxpb7+ufEv7sKzBhOgaNGDzpcFfNK8vvMwtjdtjQjCht1clyGRbcPhnyH5D38V9l
II7NtsQLTMxIve8EXeJV4UjupC44ePw9IaFtmPKTS92bKilEXaLQTIjcJubC5lqS
KW6grs9XJsYXwBmYy/Guq4X2hRZgGJScSArRSKvSDvOPk2Xr4MbtgmZUric62WDT
1qBZXwZ34T7T1lXsdI2I5sgi8UPTfmKe2rtuFL4HT1HH9pbCqPy9c3jGqspNwb98
+WmClbHDI5yKiNurK3YUl8LKGrM/tAB2RP3ZdVGDQh3ecKNoFkJaBs63/9jlrklf
XixcZDU/ogXlTw==
-----END CERTIFICATE-----
Generated at Wed May 7 12:41:54 2025 by rpki-client