Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
File: WqKpJUebz8vBloipUqJDAfTnaDk.mft (raw, json)
Hash identifier: qT6KCkZKYge75zi6pbvJCIfGegxgSTG9PNT2aqu7+gw=
Subject key identifier: 40:14:EF:1A:12:B9:CE:43:5D:36:F5:39:CB:95:1B:66:0A:51:62:3F
Authority key identifier: 5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39
Certificate issuer: /CN=5aa2a925479bcfcbc19688a952a24301f4e76839
Certificate serial: 01976C98A626B1EFB2D5D0603F7617E12930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
Manifest number: 06E6
Signing time: Sat 14 Jun 2025 04:00:32 +0000
Manifest this update: Sat 14 Jun 2025 04:00:32 +0000
Manifest next update: Sun 15 Jun 2025 04:00:32 +0000
Files and hashes: 1: WqKpJUebz8vBloipUqJDAfTnaDk.crl (hash: VEDSrKx4skieZRcb+lFwO0SOyu9vrfxpyaiERSXTs34=)
2: jYQY-U25B3NSBy3Axt-DvgoJjdQ.roa (hash: zP4WnXpWxsW1++MaE9e5/n5ALBQb36qRJjvWEAaaUiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:a6:26:b1:ef:b2:d5:d0:60:3f:76:17:e1:29:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa2a925479bcfcbc19688a952a24301f4e76839
Validity
Not Before: Jun 14 04:00:32 2025 GMT
Not After : Jun 15 04:00:32 2025 GMT
Subject: CN=4014ef1a12b9ce435d36f539cb951b660a51623f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:19:66:92:23:c1:6c:4c:76:19:36:ec:11:6b:
5d:a9:b4:d5:e0:fe:be:7b:35:26:f7:ef:1b:04:b0:
a4:7e:d3:03:1c:8b:31:67:d3:e9:bc:22:7f:fa:dc:
34:b7:a0:ed:fd:79:3e:a2:23:65:04:dc:92:f6:cd:
ac:66:ff:b9:ec:91:56:fa:af:93:b6:e0:46:78:3b:
86:0d:1c:02:39:51:f1:9c:b1:80:4c:62:f9:e0:be:
9a:a6:2e:f8:01:70:1b:fa:3c:c3:2a:09:b4:90:78:
6c:91:f9:43:91:6c:dd:5c:12:e1:1b:b8:8d:97:75:
18:70:1c:e5:39:6e:8c:14:00:f4:6c:c2:ce:39:b5:
bf:07:88:78:97:b6:a1:01:64:c6:28:4c:69:47:4c:
e3:2a:1d:bf:35:0a:11:03:55:c9:54:64:bb:f2:ea:
fc:19:b1:36:30:3a:69:4e:12:43:e5:77:da:b1:bf:
d5:40:98:ea:b0:bb:d0:e3:ef:b3:70:c8:58:2e:62:
88:b7:be:68:0a:5a:b8:04:a6:53:1d:03:cd:fb:b1:
63:2f:d4:5a:d4:6b:ed:ee:b3:ff:5b:50:d3:e0:a4:
fd:3a:f1:e1:49:05:ef:73:71:a6:04:54:c2:61:97:
04:12:a8:36:57:65:bb:23:38:85:05:b6:fa:e3:32:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:14:EF:1A:12:B9:CE:43:5D:36:F5:39:CB:95:1B:66:0A:51:62:3F
X509v3 Authority Key Identifier:
keyid:5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:45:59:e1:67:b7:83:49:a2:68:68:8e:c0:34:a4:52:52:bf:
06:02:89:6c:6f:31:2f:bb:c3:ea:50:e8:7f:a8:07:1b:00:c3:
bf:bf:49:49:ad:d6:c1:39:71:ab:4a:60:90:33:ee:d7:f2:c3:
57:47:91:b7:14:eb:50:63:d3:1e:ff:ff:7d:81:b6:0c:40:4e:
b2:06:c4:eb:77:d3:a2:92:18:d7:21:a4:7f:fa:13:71:3d:db:
60:7c:35:d4:fe:3d:76:18:67:e5:c5:81:c0:ba:ab:dc:d3:6e:
33:65:1c:47:04:9d:93:81:f7:f9:e5:3c:c4:9a:50:93:50:17:
ce:66:41:98:08:7d:ae:80:ae:27:d9:23:d7:2c:e6:f5:f2:4b:
f7:ce:a9:9c:0e:be:06:a5:15:db:94:41:76:94:be:28:50:fe:
75:50:f1:7c:59:4e:bf:73:67:fe:04:21:84:7c:48:9b:04:ce:
13:7d:19:32:1b:9e:86:99:46:3f:41:40:1d:8c:61:4a:0d:99:
e0:e7:20:53:c4:57:26:06:5c:be:8e:d4:db:4c:3f:d8:51:2d:
6b:94:1e:77:21:4f:55:18:45:00:df:48:14:ec:c5:b3:78:e6:
02:55:7b:a4:fd:67:85:fc:55:42:87:46:be:22:f7:4d:47:79:
8f:42:55:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:33 2025 by rpki-client