Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
File: wqkR1pxPZFehCd53scdSSdxTDhc.mft (raw, json)
Hash identifier: iUk/5HeFVnS4P0mLPMjPVBL4Nh5EvKZxmKA8haf7wLk=
Subject key identifier: 03:51:0D:E7:0E:01:5C:7E:7C:B4:A8:03:BA:70:30:43:FC:28:BF:82
Authority key identifier: C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
Certificate issuer: /CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Certificate serial: 019893DB29E2C7B04E6376D82ED9EAF54DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
Manifest number: 089A
Signing time: Sun 10 Aug 2025 12:01:10 +0000
Manifest this update: Sun 10 Aug 2025 12:01:10 +0000
Manifest next update: Mon 11 Aug 2025 12:01:10 +0000
Files and hashes: 1: JlMTszQ0SriAWERqlr9FMnp6WvU.roa (hash: M6WDGwhPPqHvkOqSI6cVPu36gkAbrulfoDxAqaGV7po=)
2: wqkR1pxPZFehCd53scdSSdxTDhc.crl (hash: kIZbeiNvqr5uP6iSLQpVHffCU7S2HFEJit6A9lv7pd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:db:29:e2:c7:b0:4e:63:76:d8:2e:d9:ea:f5:4d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Validity
Not Before: Aug 10 12:01:10 2025 GMT
Not After : Aug 11 12:01:10 2025 GMT
Subject: CN=03510de70e015c7e7cb4a803ba703043fc28bf82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:40:7e:1f:5c:12:e3:0c:6c:02:44:1a:bd:04:
82:1c:4a:43:7b:cb:27:b0:2f:78:ec:56:65:cb:fd:
74:48:bc:4f:a8:c1:86:c5:55:05:ca:24:23:37:8c:
42:3d:16:f4:fe:d0:9d:0f:9c:f1:af:19:1c:09:de:
f8:6d:57:7f:cf:7c:55:8d:a3:fe:47:02:31:8f:0d:
bd:8e:1a:64:e6:08:f8:0b:90:cd:2b:6b:f1:b2:6a:
0d:57:6e:0a:5b:69:65:3b:eb:43:52:23:31:09:ad:
b8:81:8b:3f:2b:80:a7:be:9e:47:b6:a5:f1:bd:91:
d5:65:79:30:0e:81:79:80:13:30:09:57:12:1f:d2:
ca:8f:22:d4:0e:ee:34:d6:51:29:40:55:bb:e6:b7:
d9:07:73:0c:b8:5f:3a:8e:1b:df:89:49:26:f9:02:
3f:94:ea:24:67:e9:0f:05:83:9c:3f:53:6a:a2:eb:
17:35:58:1a:7e:85:02:62:3c:0e:4b:fe:26:19:ea:
5c:59:8b:ff:3d:8d:5b:4d:e8:a5:76:94:40:95:9d:
07:ed:ef:16:09:b4:3a:3b:7c:12:d3:a7:ad:1e:29:
2f:f2:b9:49:43:d2:63:0e:32:ea:c6:a6:88:37:00:
b7:a1:f5:11:36:20:48:83:20:47:3e:ee:6d:23:94:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:51:0D:E7:0E:01:5C:7E:7C:B4:A8:03:BA:70:30:43:FC:28:BF:82
X509v3 Authority Key Identifier:
keyid:C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d3:f2:7c:2b:1a:9a:50:16:a2:ad:4d:0c:6e:36:79:95:a1:
ce:1b:18:1a:fe:be:45:c4:4d:b0:30:9e:15:ff:44:65:be:c1:
9f:9e:72:8b:93:71:36:94:97:54:b4:b7:1d:03:6e:cc:84:26:
0a:a0:af:c6:8d:a1:a9:f6:45:a8:40:60:50:31:d5:66:43:39:
25:5c:a4:0b:9a:ea:c9:f5:cb:87:b0:6f:18:28:0b:c2:e3:f8:
48:db:d9:bc:11:4a:87:e5:f2:93:7a:45:96:ae:cd:3e:c2:11:
55:ec:5c:e4:ac:67:f4:82:dc:32:90:5c:be:6d:a0:8c:e3:c9:
34:d8:56:1d:57:d9:55:f3:e3:69:75:ed:01:86:25:8c:f9:07:
5d:67:5b:14:ff:c0:b6:60:d3:85:3d:12:fc:32:c9:8a:93:4d:
67:c0:a5:65:be:46:35:99:9f:49:e5:f5:4e:54:bd:d0:f2:ad:
ba:37:b0:3b:7e:fb:c1:ed:19:af:08:22:b2:9c:de:c0:45:9a:
a5:a0:30:63:fe:43:bd:5e:bb:35:f8:52:54:8f:1d:97:50:4e:
72:d2:e7:7b:72:72:e1:88:57:53:d4:0b:09:9d:1c:ff:33:40:
36:9d:6c:db:ca:1e:8c:2b:d4:6c:61:f3:d6:0f:c6:ed:72:23:
e2:8b:cf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:15 2025 by rpki-client