Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
File: qW_WWYUaNLt3wyE8pL93JRHghzQ.mft (raw, json)
Hash identifier: um/yCmawv4FVa4kDZterp6O5GVy6AhmI6z9yFENOqO8=
Subject key identifier: C9:8A:16:02:9F:8A:FA:8D:5A:02:74:1E:DF:19:87:22:54:D1:8B:4C
Authority key identifier: A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34
Certificate issuer: /CN=a96fd659851a34bb77c3213ca4bf772511e08734
Certificate serial: 01989FDEB3BDC221D9799E4EEAB94D84BDA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
Manifest number: 02EF
Signing time: Tue 12 Aug 2025 20:00:28 +0000
Manifest this update: Tue 12 Aug 2025 20:00:28 +0000
Manifest next update: Wed 13 Aug 2025 20:00:28 +0000
Files and hashes: 1: qW_WWYUaNLt3wyE8pL93JRHghzQ.crl (hash: SF7Vw6ftDXRXR2R3jpokYa4Pzs5lT+0YzSvcjqP46mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:b3:bd:c2:21:d9:79:9e:4e:ea:b9:4d:84:bd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96fd659851a34bb77c3213ca4bf772511e08734
Validity
Not Before: Aug 12 20:00:28 2025 GMT
Not After : Aug 13 20:00:28 2025 GMT
Subject: CN=c98a16029f8afa8d5a02741edf19872254d18b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:8f:57:53:97:4e:ad:8a:e9:54:1e:cd:56:
78:f0:d1:02:4a:21:21:50:bc:ea:af:ff:ba:f6:16:
1e:5b:a0:fb:72:37:69:d2:78:da:ab:92:63:c9:6b:
d6:ca:d4:4b:fa:94:b0:2d:db:90:cb:f7:db:13:26:
95:8c:73:d3:aa:71:46:50:ee:2a:06:4f:e8:04:b1:
a8:2e:aa:be:b8:09:a6:2c:ae:a0:89:8e:e1:a5:22:
7a:5f:df:cc:09:d5:3f:58:d8:19:4c:3c:86:90:10:
96:59:91:7f:9e:de:fa:51:93:4a:32:e8:15:d8:03:
4a:84:6c:b2:52:8b:ec:4b:54:58:b4:50:0a:ac:c3:
64:d4:a8:8b:08:f3:9b:86:11:db:bc:63:3d:91:44:
da:d8:ef:cb:0b:b7:8b:75:b2:4f:c5:f1:da:11:62:
6b:47:4f:c7:b5:6b:32:11:f9:85:e9:ac:70:01:96:
27:5c:e5:25:4a:45:e3:33:09:0e:81:a7:44:cf:d2:
34:e0:fd:f3:bd:4d:9a:72:2c:c7:c7:94:51:c1:e8:
ec:85:85:f1:72:19:7b:6f:ca:2f:72:77:8b:54:b6:
40:9e:03:92:08:06:82:af:3d:01:4f:e0:38:55:fd:
23:3b:12:33:e1:8b:ce:e6:7f:f0:52:65:fe:24:2f:
a9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8A:16:02:9F:8A:FA:8D:5A:02:74:1E:DF:19:87:22:54:D1:8B:4C
X509v3 Authority Key Identifier:
keyid:A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9e:32:17:1a:4a:62:d9:34:f0:b2:49:d3:ab:f0:4f:3a:5f:
18:13:d3:32:17:24:ec:f0:15:57:32:ac:35:22:05:8c:5d:59:
61:15:dc:4e:41:c7:6b:fb:0c:a0:3e:2a:9d:b9:ea:a5:6a:ff:
51:54:90:66:57:aa:96:8c:22:22:b5:5d:1a:0b:05:35:ae:91:
41:9b:34:17:92:d3:9e:78:f1:3e:70:31:da:97:18:88:5a:eb:
f6:ca:ea:4e:f5:a8:31:60:54:7d:49:e9:cb:c6:5d:44:9d:7e:
5e:16:9e:5a:e2:eb:78:53:57:06:ff:3d:51:1e:f6:27:05:a9:
4b:d8:8b:4a:b8:e3:65:52:53:d9:ef:91:78:37:ca:31:47:9f:
05:05:64:07:a8:59:0c:a5:e5:2a:67:96:b7:3c:3b:c0:38:ba:
13:e0:f5:ca:cf:f7:49:a1:13:2c:36:7d:3a:eb:00:30:56:d8:
7f:bb:08:c3:35:ce:63:22:f3:a0:e0:03:38:fb:c7:b3:91:f4:
ad:55:19:95:f0:6f:36:91:5b:07:cc:9c:8b:16:9e:83:f5:92:
91:f1:a2:27:64:37:00:fb:1b:ee:7e:28:a7:64:cb:68:6a:9e:
a4:97:10:76:b9:fa:e9:5e:77:40:9a:f3:31:cc:78:56:e5:01:
c9:82:cc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:31 2025 by rpki-client