Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
File: WqKpJUebz8vBloipUqJDAfTnaDk.mft (raw, json)
Hash identifier: 1c2wIXzny04TUwffwgM/MzOWs7e5qiqdK2yPRLjho+Y=
Subject key identifier: 8F:1B:03:CD:39:69:A9:E0:6F:CF:6A:0C:3C:5F:A0:51:7C:F5:59:88
Authority key identifier: 5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39
Certificate issuer: /CN=5aa2a925479bcfcbc19688a952a24301f4e76839
Certificate serial: 019844E3CD3EA78F2545A40FAF25DA8F7CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
Manifest number: 0756
Signing time: Sat 26 Jul 2025 04:00:36 +0000
Manifest this update: Sat 26 Jul 2025 04:00:36 +0000
Manifest next update: Sun 27 Jul 2025 04:00:36 +0000
Files and hashes: 1: WqKpJUebz8vBloipUqJDAfTnaDk.crl (hash: Tr8gBq9BHamfSHI7ngQFz+OgLFoshNSKxPA1V/lIy+Y=)
2: jYQY-U25B3NSBy3Axt-DvgoJjdQ.roa (hash: zP4WnXpWxsW1++MaE9e5/n5ALBQb36qRJjvWEAaaUiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:cd:3e:a7:8f:25:45:a4:0f:af:25:da:8f:7c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa2a925479bcfcbc19688a952a24301f4e76839
Validity
Not Before: Jul 26 04:00:36 2025 GMT
Not After : Jul 27 04:00:36 2025 GMT
Subject: CN=8f1b03cd3969a9e06fcf6a0c3c5fa0517cf55988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:57:b4:1f:fb:92:ba:3c:15:7c:1f:13:b1:
4f:44:08:43:d9:95:da:05:04:dd:15:89:c8:50:bc:
13:9a:10:18:0c:9b:fc:88:cd:46:4b:d8:84:0a:cd:
eb:f6:3d:05:3b:cb:7b:d4:7a:2c:11:e7:85:66:bf:
3e:11:72:6a:c3:d2:7a:bc:cf:d9:c8:f9:4b:81:e0:
54:50:10:1a:08:2e:da:58:20:44:e3:0b:1a:58:7c:
f4:69:b0:6b:fc:ff:e8:ed:c0:db:b0:9e:96:79:b9:
2c:b9:a2:66:61:92:21:63:76:15:c0:b4:9a:e6:aa:
35:80:48:a1:60:e7:9d:26:25:67:98:68:1a:f9:cc:
ab:53:3a:40:c2:ff:7c:c4:ff:e8:48:3c:cd:b5:7a:
3a:b2:69:90:ad:6c:4c:d7:52:9b:15:da:ae:2e:73:
c3:da:26:22:a8:3a:6a:34:ad:fc:dc:13:26:c0:49:
2f:40:18:f4:d7:49:b4:6d:6a:e6:5c:aa:91:1d:81:
13:6f:a7:ba:3e:3d:82:ba:e3:ea:08:91:7c:cb:ef:
3f:23:c6:3c:6d:fd:1c:10:11:8b:ae:3b:6f:5d:63:
ea:13:e2:44:90:09:01:c4:73:ef:3a:49:0e:b5:db:
38:95:9f:42:88:53:f2:3d:79:70:a8:bf:2d:6e:bd:
15:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1B:03:CD:39:69:A9:E0:6F:CF:6A:0C:3C:5F:A0:51:7C:F5:59:88
X509v3 Authority Key Identifier:
keyid:5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:71:cb:28:3c:d0:48:d7:a5:4c:46:e8:3e:71:2d:74:c8:55:
15:6a:3a:f5:d1:c7:cb:95:83:d6:34:59:d6:87:93:eb:9e:3d:
a8:a5:29:e3:3e:d4:c5:1d:b3:07:af:55:76:f6:a1:5a:3e:f2:
1d:fa:be:25:46:02:5d:aa:87:51:c3:5f:90:90:08:bb:53:85:
e3:f2:1b:79:c1:a7:88:59:80:4b:b7:9e:b4:1a:af:a9:de:4f:
4f:ed:3c:87:ba:bd:0e:46:8d:c3:96:30:f4:c2:41:c1:62:97:
e9:9e:1d:98:30:af:6d:45:4a:1e:2e:c2:05:58:8d:20:81:fc:
c5:7d:95:41:4b:4a:87:f7:71:86:6b:75:49:0f:cd:11:7e:74:
3a:ef:a2:0a:57:c1:b6:8f:35:bf:db:dd:2a:1c:33:94:d3:b9:
b1:71:e9:36:b6:06:f5:92:4e:53:02:bc:51:fd:e7:76:8b:5c:
fb:e9:09:1f:61:51:5a:85:6c:b8:e7:fc:1f:5c:f5:5a:c3:f7:
0b:85:7e:ee:a4:6e:49:c6:5f:fc:cf:14:ae:d8:5a:13:fe:54:
6a:c0:b9:69:3e:b5:c1:c1:18:07:24:80:2f:40:75:48:59:3d:
98:b2:ec:15:57:b9:1b:15:27:28:ef:bc:45:74:b6:b5:50:13:
dd:99:fe:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:55:26 2025 by rpki-client