Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File: Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier: mz4EynLu8+cnzP1as+rYOh5iId5pbc/XjjRDe2Pi14c=
Subject key identifier: A0:34:2F:A4:AC:67:5C:7F:A9:59:77:53:71:CB:CA:E8:9E:CF:FD:FA
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer: /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial: 01987D89D00E4519853977B1EB4D50470B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number: 1617
Signing time: Wed 06 Aug 2025 04:00:40 +0000
Manifest this update: Wed 06 Aug 2025 04:00:40 +0000
Manifest next update: Thu 07 Aug 2025 04:00:40 +0000
Files and hashes: 1: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: Np64X/7xneIDVnjbZG4zvNTFKfaai8xEg6mj6xkjsec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:d0:0e:45:19:85:39:77:b1:eb:4d:50:47:0b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
Validity
Not Before: Aug 6 04:00:40 2025 GMT
Not After : Aug 7 04:00:40 2025 GMT
Subject: CN=a0342fa4ac675c7fa959775371cbcae89ecffdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:7f:9a:5f:c4:cb:c7:04:53:81:44:f9:51:
53:96:29:69:54:6c:0d:d2:78:b7:12:fc:27:cf:02:
c9:11:43:bf:8e:31:a8:50:e2:26:30:6b:a4:f3:5f:
01:da:8c:24:0b:36:ba:cc:26:d9:6a:90:7c:83:b5:
90:4c:4c:33:67:c5:79:9b:e9:ef:55:b4:a3:60:e4:
7c:89:e3:a6:e1:38:8c:10:3e:65:d2:aa:e8:a6:0c:
d3:cf:ff:2e:26:66:07:06:16:9b:ed:8e:a3:cc:58:
7d:91:4b:15:e1:3c:9b:7f:98:8e:2d:e0:87:33:ef:
7e:b6:29:00:b8:79:f3:24:0d:a8:30:1d:ee:30:c6:
95:1e:7a:59:e6:24:68:34:3b:41:fd:4e:62:78:12:
e7:46:09:17:a0:2b:5b:10:a5:fb:c5:bc:1e:6c:38:
4c:08:e7:e9:a3:7b:f9:a7:81:e3:c3:55:cb:3a:bb:
30:0f:12:d4:0f:0a:e5:41:b8:d0:16:be:76:35:50:
c2:69:ce:d0:f4:5b:29:a3:ea:ac:13:34:61:a1:77:
f3:23:fb:18:24:d8:f6:dc:e2:d4:88:55:89:5b:3b:
46:25:8d:25:3d:42:37:8c:7b:ba:d8:6f:87:c7:21:
3a:67:da:6e:52:2d:40:22:47:7e:34:20:a9:33:3d:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:34:2F:A4:AC:67:5C:7F:A9:59:77:53:71:CB:CA:E8:9E:CF:FD:FA
X509v3 Authority Key Identifier:
keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:19:11:3f:98:e7:e5:16:b6:48:26:e0:0d:1c:5f:69:74:93:
66:5e:e0:fc:c3:6a:e1:09:a2:02:3e:a1:0b:0e:72:ab:28:ee:
34:e4:f9:69:7c:1b:60:e0:2c:98:21:14:07:3f:43:fb:b6:e8:
b1:72:a9:6f:c9:e3:b6:34:a6:ac:76:4b:17:99:7c:a9:7e:b1:
3f:b2:64:04:15:f6:af:06:7b:4c:60:e8:ce:6f:be:0a:7c:d6:
cd:6c:cf:59:d0:f7:ed:a3:fb:7f:37:52:d0:c8:c1:7f:44:9b:
e7:ef:61:a8:31:91:c6:ae:23:c4:7e:a9:9d:83:2e:e3:d5:eb:
7c:17:65:36:3e:c8:10:20:3c:6e:28:00:23:d3:03:56:4e:46:
6c:6e:74:19:f7:25:91:0e:1d:03:42:17:c1:f2:fd:96:f3:1f:
49:a8:2a:6a:27:1f:b8:d6:ec:78:14:03:70:27:9b:7f:df:76:
79:bd:ad:8e:f5:04:58:3c:e2:d3:af:b2:98:04:06:74:68:66:
40:16:5b:46:41:e3:92:8c:e0:cf:45:73:41:57:f8:9d:8f:95:
22:4f:52:64:d3:41:c1:a5:3c:02:a2:63:af:0f:5a:b1:a0:b9:
4d:78:15:a2:7c:03:26:87:76:0e:0d:30:43:c3:88:af:83:53:
d3:45:aa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:33 2025 by rpki-client