Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
File: wq8ZpG9azIz4_QNiSmG3koqBjNA.mft (raw, json)
Hash identifier: QNr4afMStCFKQic1Umsl45/hbFpRmrNoZpNcWZ+H3+k=
Subject key identifier: 39:D7:7A:BD:C1:0F:0A:F6:A5:28:F4:A8:0E:33:46:BF:AC:87:CB:BB
Authority key identifier: C2:AF:19:A4:6F:5A:CC:8C:F8:FD:03:62:4A:61:B7:92:8A:81:8C:D0
Certificate issuer: /CN=c2af19a46f5acc8cf8fd03624a61b7928a818cd0
Certificate serial: 019894B7F446FA0AE5EA506B3D4E1EF70F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
Manifest number: 1623
Signing time: Sun 10 Aug 2025 16:02:20 +0000
Manifest this update: Sun 10 Aug 2025 16:02:20 +0000
Manifest next update: Mon 11 Aug 2025 16:02:20 +0000
Files and hashes: 1: wq8ZpG9azIz4_QNiSmG3koqBjNA.crl (hash: wzpijnVwQIRYwgYUJHFFLo48JbtvKIEAzT8ICtzjvjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:f4:46:fa:0a:e5:ea:50:6b:3d:4e:1e:f7:0f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2af19a46f5acc8cf8fd03624a61b7928a818cd0
Validity
Not Before: Aug 10 16:02:20 2025 GMT
Not After : Aug 11 16:02:20 2025 GMT
Subject: CN=39d77abdc10f0af6a528f4a80e3346bfac87cbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:2b:6d:07:3c:4d:5d:96:6c:3b:14:ee:09:
7b:37:12:71:5b:49:59:04:30:8e:ac:db:57:e8:65:
05:5a:0a:d5:d9:3e:12:de:70:c8:8a:eb:29:2b:de:
14:ee:45:3c:ff:15:33:f4:27:3b:96:93:9c:ef:03:
77:f0:9a:43:1e:e1:a7:3c:25:c9:23:2f:6c:78:4b:
9f:ef:4f:1c:a8:64:16:b6:3b:26:c6:2b:fb:9f:43:
e9:b3:59:66:df:26:ee:da:d4:1b:6c:d8:c9:2e:90:
c9:c1:bc:39:2b:25:8b:d5:a3:1d:88:28:0c:ba:78:
82:c4:1b:03:94:9d:34:97:dd:ee:a4:7d:b9:b5:95:
09:86:0d:71:50:9d:ca:5c:2c:b5:81:f4:07:1a:ed:
14:b3:9d:1b:75:02:0e:58:45:82:74:08:65:24:cb:
52:c8:ac:27:20:33:6b:b9:cd:3b:b7:f0:09:7a:26:
d1:d6:c3:5e:ef:59:bb:68:dc:87:97:9e:0e:fe:da:
d1:5b:be:df:a7:3e:c4:32:61:0a:1d:45:c5:86:1d:
ac:b4:91:05:2f:de:f6:c1:05:08:92:da:53:27:eb:
e6:36:89:41:57:61:24:e9:b9:aa:d9:83:b2:cd:05:
b8:f8:c5:7d:2a:a2:ea:57:7d:a2:c8:e8:0d:89:87:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D7:7A:BD:C1:0F:0A:F6:A5:28:F4:A8:0E:33:46:BF:AC:87:CB:BB
X509v3 Authority Key Identifier:
keyid:C2:AF:19:A4:6F:5A:CC:8C:F8:FD:03:62:4A:61:B7:92:8A:81:8C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8e:5d:f5:f4:1d:3c:9a:eb:67:92:fd:6f:a6:36:e9:3a:7c:
d7:dc:d8:6e:33:bf:14:09:b5:8b:28:0c:c4:e9:eb:64:11:6e:
ea:69:4e:80:ae:3c:a7:da:ed:d9:99:9a:da:53:8f:d4:cd:75:
83:cd:a2:29:78:ba:f7:3f:04:89:7c:15:c4:aa:57:c2:d3:c3:
37:36:5d:6e:fe:2b:f8:b1:47:db:68:ef:f6:6b:6a:a5:8e:3e:
36:e4:6b:07:15:68:93:57:b0:ac:b1:62:0c:08:a2:21:ca:04:
73:40:a9:8c:67:de:9b:34:4c:c0:01:ff:31:00:1d:73:5a:aa:
15:f2:9b:6f:96:3b:1c:70:c6:97:74:a9:86:22:f3:b9:2e:dd:
21:6f:17:00:72:0f:19:32:84:60:8f:4a:3c:72:04:59:e8:47:
89:ab:78:df:20:18:9b:27:39:c0:1f:46:05:0c:ff:2e:50:ed:
13:a2:3f:80:b4:25:7f:b1:05:4a:2e:9e:0e:32:3c:83:34:3b:
90:90:cc:dc:6a:b5:19:78:c8:4b:7d:7f:07:92:aa:e8:9a:14:
07:4d:e5:b8:8e:21:24:a4:7f:36:09:8d:55:e1:4b:c7:78:0a:
1d:25:db:43:6b:3e:78:46:29:08:71:a6:7e:3a:5d:43:df:f1:
cb:49:8b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:16:04 2025 by rpki-client