Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
File: wqmG2jXxcQTosRZSb4BjFXoW25c.mft (raw, json)
Hash identifier: JeJoPn3GfS5kOuvhnB02W/0DEF6sf8ebf2hw/5lkuIw=
Subject key identifier: 3B:D7:D4:DA:A7:69:E1:CB:CE:21:A5:72:35:A3:A7:5B:DA:DC:F0:A7
Authority key identifier: C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97
Certificate issuer: /CN=c2a986da35f17104e8b116526f8063157a16db97
Certificate serial: 01987ED3E3CBFAE7D2FA3776C0B25E5EDD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
Manifest number: 10B5
Signing time: Wed 06 Aug 2025 10:01:12 +0000
Manifest this update: Wed 06 Aug 2025 10:01:12 +0000
Manifest next update: Thu 07 Aug 2025 10:01:12 +0000
Files and hashes: 1: wqmG2jXxcQTosRZSb4BjFXoW25c.crl (hash: rbsz3lCZC40XkSGEevbWtSq2CxKJIL/i5/DJntbQ55E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:e3:cb:fa:e7:d2:fa:37:76:c0:b2:5e:5e:dd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a986da35f17104e8b116526f8063157a16db97
Validity
Not Before: Aug 6 10:01:12 2025 GMT
Not After : Aug 7 10:01:12 2025 GMT
Subject: CN=3bd7d4daa769e1cbce21a57235a3a75bdadcf0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bd:be:1e:0a:9f:d8:ce:63:01:77:3a:d9:2b:
a7:82:bb:30:c2:a2:5a:1e:b7:44:cb:3e:9a:39:98:
05:8d:76:a6:4a:01:5c:43:5f:e2:c1:2d:4d:77:11:
75:a8:82:c1:1f:8c:eb:03:e2:64:59:c6:de:40:8e:
5e:0e:ac:cf:4e:44:ce:09:ee:98:aa:61:29:14:9a:
24:e7:d0:0c:e7:fd:31:cf:d9:77:80:11:0c:ae:92:
6b:97:c8:d7:d7:76:3f:3b:f5:21:1d:84:f6:3d:de:
10:96:94:7f:47:24:f8:46:0c:9f:e7:2c:d8:39:44:
e8:dc:9a:8d:5e:4f:5a:44:88:1c:af:11:78:a9:61:
bd:51:1e:52:33:19:c4:0d:cf:36:38:bf:12:27:db:
93:64:c6:b3:67:55:c3:33:f9:45:d4:99:53:d9:40:
58:3d:70:60:c7:21:b7:ca:aa:f5:01:71:5c:f7:ff:
de:ff:3a:be:b1:35:89:16:f2:a5:23:0d:af:5a:a0:
64:02:ab:cd:de:3b:fe:31:17:ec:cd:28:b9:93:26:
cc:23:a3:89:92:df:03:04:d9:40:a3:85:5f:41:3a:
ed:1b:ac:fd:af:c1:74:53:24:7c:47:af:94:2d:ce:
32:1d:3f:63:6f:5a:fb:56:ad:3c:95:85:75:54:43:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D7:D4:DA:A7:69:E1:CB:CE:21:A5:72:35:A3:A7:5B:DA:DC:F0:A7
X509v3 Authority Key Identifier:
keyid:C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a1:b6:f7:7b:a6:1b:5d:ed:eb:dc:ad:41:13:67:7d:d2:b7:
2c:96:cf:03:31:b3:12:49:a9:9f:1b:6e:80:66:7f:32:8c:dc:
66:80:5b:8b:e0:a8:e5:79:ae:cf:ed:43:89:ae:d2:d4:13:89:
7c:db:dd:4a:22:12:46:13:d8:e9:e1:47:fb:62:13:89:b4:5d:
29:a1:ff:d5:c3:98:78:0b:60:e2:e4:a7:fb:72:7a:69:6e:a6:
ec:d0:c1:02:20:b9:1b:20:30:6e:2f:05:48:2a:19:8d:31:cc:
f5:0d:9d:5d:08:19:df:2b:85:bf:d7:40:d0:41:90:6a:54:f1:
b4:41:fd:1d:83:51:b4:03:b7:83:eb:c4:14:6d:1a:14:27:a7:
59:72:d7:cb:dc:6f:89:80:9a:23:62:22:b1:bc:7c:80:db:27:
6d:90:90:a9:bf:12:c8:5d:b3:68:23:b6:2d:8f:1b:ab:7d:dc:
5a:ae:c0:d5:24:51:74:c1:62:cf:f6:2c:b5:06:57:c9:1b:1b:
8e:85:0a:96:b6:ca:41:ea:9a:68:36:32:e9:e4:04:76:e6:c9:
42:de:fe:9d:f3:3e:6d:52:2e:90:ff:c1:6c:9e:cd:5a:75:14:
18:dc:af:bf:f9:fa:f7:9e:39:a9:e6:34:09:fc:6f:d6:5b:f4:
4c:50:25:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:21:57 2025 by rpki-client