Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File: Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier: 33/3twmDJCDMSM14EzZpM3vlcFnN2x1JxPF7ay5scOo=
Subject key identifier: B9:DB:86:C5:9A:98:AC:78:79:FA:03:7A:C7:19:A7:2D:CC:E2:12:45
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer: /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial: 01976D3E1433BD1EBB8FA03688409A518EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number: 158A
Signing time: Sat 14 Jun 2025 07:01:14 +0000
Manifest this update: Sat 14 Jun 2025 07:01:14 +0000
Manifest next update: Sun 15 Jun 2025 07:01:14 +0000
Files and hashes: 1: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: yWv73PnnXWud1jP0SN6rgZj/Vds+uISdIbG/pQAa87Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:14:33:bd:1e:bb:8f:a0:36:88:40:9a:51:8e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
Validity
Not Before: Jun 14 07:01:14 2025 GMT
Not After : Jun 15 07:01:14 2025 GMT
Subject: CN=b9db86c59a98ac7879fa037ac719a72dcce21245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:32:c2:09:ef:aa:45:cd:86:72:31:d0:fc:
d1:33:5c:33:9f:46:22:00:1c:01:d1:f6:28:73:c5:
54:75:8a:55:ef:da:b1:1f:41:b8:fb:59:e0:f5:d9:
eb:66:1d:c5:b0:98:14:c9:da:13:fd:6d:67:53:f4:
85:4c:0b:87:a8:bd:5a:9a:ba:80:e0:27:cf:72:f2:
99:6a:ff:bb:ba:7d:b7:01:f6:c0:97:66:c7:e7:c1:
1d:73:b1:ee:3a:ac:3f:99:b0:2f:7b:89:42:22:83:
2d:74:2c:13:b1:a5:8d:f9:44:30:d7:29:d4:5e:e2:
b0:2b:d5:b0:8c:a6:6c:8f:85:1d:ae:02:b8:8c:3c:
d1:fd:fa:b5:90:55:b6:37:de:77:f9:32:5e:5f:c4:
db:22:40:cb:29:bf:6d:0e:d4:cb:b0:3f:a4:46:58:
7f:3b:b3:e1:4c:0e:e7:d5:b2:72:6f:c3:41:b0:62:
ee:f1:2e:a6:6a:75:0c:1b:ff:72:32:03:f1:bb:99:
33:3e:07:97:4c:27:ba:40:62:ad:0a:48:a7:ad:2b:
97:66:6c:37:de:cd:78:62:05:9a:01:36:13:35:e0:
f5:b3:55:3c:1e:08:ad:dc:f4:0f:09:94:d0:db:e9:
a1:08:ff:92:ab:e9:24:5b:f9:02:4d:45:68:56:d2:
44:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DB:86:C5:9A:98:AC:78:79:FA:03:7A:C7:19:A7:2D:CC:E2:12:45
X509v3 Authority Key Identifier:
keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a6:1a:5d:16:a9:06:da:76:94:1e:34:91:04:02:48:bd:5d:
b5:12:7f:61:2c:bf:c7:1a:f5:bc:27:8e:69:27:49:a6:ec:43:
91:7f:9f:38:e4:1d:94:d2:d4:64:37:da:4c:e3:b1:7a:e0:a9:
3a:b7:12:7c:c1:bc:e8:56:1e:31:d6:ae:90:13:69:71:d2:02:
3b:b4:99:7f:56:d8:16:2b:c9:cf:88:eb:92:0d:fc:57:ee:c9:
b4:d6:88:7e:1c:8e:be:4d:66:27:d3:b4:01:a4:5c:95:ed:3c:
ae:14:93:48:1d:66:aa:2c:87:61:bb:9b:1d:f8:16:d5:75:b0:
9d:04:a8:d7:00:39:3b:4c:ee:3a:31:20:ba:2e:3f:bb:85:a2:
12:a1:f7:ba:e7:f4:ac:75:7d:91:3d:19:54:f1:59:c8:de:f5:
a2:d4:6f:f7:fb:14:8c:c3:8e:84:4b:99:17:3b:d4:c2:ca:ab:
8b:a2:c7:cc:30:e4:f2:e6:96:16:a7:6a:c8:6a:9e:20:a6:2b:
d1:ea:e9:2b:f5:e8:9b:a9:41:f3:16:30:24:a3:d1:ed:cb:d7:
c3:96:01:42:f1:90:78:e1:83:bb:b5:2d:a2:3d:60:8d:1e:83:
01:eb:53:fb:a5:5c:13:cc:a1:df:d7:fa:97:86:04:32:f0:e0:
51:ce:dc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:17:44 2025 by rpki-client