Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
File: wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft (raw, json)
Hash identifier: 1KwhcXdb6x9NWIN3pp2B2NC+h5Cw6y1NPJ3ayqQGLCw=
Subject key identifier: 6C:71:92:D5:14:36:C5:97:72:FA:3B:23:02:82:19:88:5F:E9:05:19
Authority key identifier: C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
Certificate issuer: /CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Certificate serial: 019A4EF5ADDCFBB3CD06A192EA85921B056E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:54 +0000
Manifest this update: Tue 04 Nov 2025 13:01:54 +0000
Manifest next update: Wed 05 Nov 2025 13:01:54 +0000
Files and hashes: 1: wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl (hash: 7D+jDiS3NOO4b4z/CvEIj8M3+VY19x9h1qHMa1LdKXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ad:dc:fb:b3:cd:06:a1:92:ea:85:92:1b:05:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Validity
Not Before: Nov 4 13:01:54 2025 GMT
Not After : Nov 5 13:01:54 2025 GMT
Subject: CN=6c7192d51436c59772fa3b23028219885fe90519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ee:73:96:b3:8d:9b:e5:9c:f9:8f:bf:e2:7e:
ac:e7:7e:9a:57:81:6b:6c:d1:96:bf:a3:54:aa:6f:
4f:9b:59:28:d9:b0:fb:dd:d7:ee:b9:76:4f:f6:67:
aa:d7:7a:65:6d:09:e1:fe:38:17:e2:73:a2:f5:ba:
e6:e7:d8:ea:a0:c4:6b:1b:f7:19:1e:61:1a:4d:4a:
ce:67:15:5f:31:60:d4:49:a6:f2:13:85:91:c9:21:
01:1a:66:99:59:00:38:2f:9c:e4:bb:59:0d:96:c3:
ef:ba:66:31:a0:e7:a6:51:75:a9:f9:af:6e:92:e3:
0a:a7:c3:7b:8b:25:a4:e1:c2:c8:d2:11:bf:cb:14:
50:9f:db:1d:ab:3f:49:2c:4a:e3:ce:0e:71:f6:12:
e2:15:3b:bb:92:db:fd:29:ab:29:4f:65:d0:15:ff:
79:0c:45:b5:49:89:27:1c:39:f9:38:84:be:ab:0a:
b1:5c:4b:59:75:c4:c4:82:8a:cd:c6:39:e2:27:0b:
f3:2e:3e:b5:2a:de:18:ec:d6:d8:f3:c1:2f:0b:cd:
b7:b5:bb:fa:a2:fc:2a:45:fd:c3:15:5b:e4:2b:58:
c5:2f:fa:37:5a:b9:ce:7f:79:06:7a:7c:f6:25:6f:
85:07:28:46:1f:9d:87:93:25:4d:b5:a8:7d:3c:ff:
25:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:71:92:D5:14:36:C5:97:72:FA:3B:23:02:82:19:88:5F:E9:05:19
X509v3 Authority Key Identifier:
keyid:C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6f:55:62:b3:f4:e3:ce:2e:50:d0:5e:b3:25:e6:b8:50:80:
14:d9:08:11:13:ce:2c:86:db:09:46:5b:37:87:41:90:83:ef:
73:ed:0a:29:96:df:36:dc:df:36:0f:38:52:1e:43:5f:41:38:
29:41:b4:4c:7f:fa:a3:c3:d2:2e:5f:e1:53:a0:5d:00:84:02:
c6:87:5a:f1:9b:55:b6:7b:a9:17:ad:59:46:eb:e4:72:00:e6:
9e:fe:61:9c:18:4f:7b:be:d7:b3:9c:2f:98:ee:aa:aa:69:b9:
cf:5d:9b:51:f2:3c:6c:97:78:85:ba:c1:db:90:e2:9d:c6:33:
f0:f0:f9:a9:68:f4:e2:91:7f:35:7b:ef:f1:eb:20:37:99:a6:
1d:74:f2:ce:63:b6:a0:c0:6e:dc:29:00:01:03:92:8c:da:9e:
12:bd:82:45:37:43:85:33:7a:2d:4f:d2:ce:d5:ee:de:8b:0b:
df:ac:7e:3f:58:86:14:5f:08:6d:70:70:23:db:d8:e8:90:4f:
6f:a1:22:0f:20:aa:1a:f7:a6:e9:7c:56:28:cf:8e:8d:53:f1:
e9:17:53:23:f3:0c:02:56:65:b7:d4:c4:68:d4:98:8e:8f:ec:
32:67:61:ff:0d:ce:a8:a1:05:8b:ab:27:dc:df:53:70:14:ac:
8c:c7:61:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:21 2025 by rpki-client