Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File: Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier: ELlj1TDQZtI4+q2eUjMdgWqgQtkAmeJFKK7lXiONJtY=
Subject key identifier: 26:3B:61:18:C9:2D:33:4E:E0:93:24:8D:70:0D:03:F5:BB:F6:BE:6D
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer: /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial: 01984588A60FCA692A06624A02ADA538D734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number: 15FA
Signing time: Sat 26 Jul 2025 07:00:39 +0000
Manifest this update: Sat 26 Jul 2025 07:00:39 +0000
Manifest next update: Sun 27 Jul 2025 07:00:39 +0000
Files and hashes: 1: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: 9Wl9lddIfJ9LuJ0ngl3lHm94Lo4JHNYyquqqoYa1TC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:a6:0f:ca:69:2a:06:62:4a:02:ad:a5:38:d7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
Validity
Not Before: Jul 26 07:00:39 2025 GMT
Not After : Jul 27 07:00:39 2025 GMT
Subject: CN=263b6118c92d334ee093248d700d03f5bbf6be6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:41:0a:c6:cb:72:d9:5c:8c:7b:30:05:ce:
07:d9:bd:5b:b2:9b:13:a9:f4:0b:a8:5c:58:63:90:
ec:15:77:c4:5a:5b:9e:9b:8c:9e:45:67:bc:0b:81:
fa:dd:16:4f:e5:22:66:25:38:70:02:70:1e:25:36:
3c:3a:a5:2f:ef:e2:1c:7e:c6:25:dc:91:fc:2b:79:
2f:c0:e6:28:b4:89:22:f5:15:1b:6a:78:91:85:9f:
fa:ad:4b:c9:89:94:3d:0a:6a:67:e1:df:48:4d:b9:
d5:61:5b:90:e8:0a:49:a4:c6:3d:7a:c4:0b:ab:66:
07:5f:24:11:54:6b:ba:e0:f2:d2:93:78:40:5c:27:
57:b3:cc:c0:81:3f:6b:e3:0c:3c:ba:52:0d:ba:17:
73:df:f0:8e:06:05:cf:8f:12:c5:46:a7:a3:90:51:
05:21:35:ed:73:60:8f:dc:ba:24:7a:57:b4:ad:28:
7d:da:85:40:27:cd:13:fa:d9:a1:63:97:fa:47:80:
77:dd:eb:93:8a:2b:5e:4c:63:15:b9:be:25:49:72:
10:6c:5f:6c:59:c6:9a:7b:68:3c:66:2b:16:c2:b9:
68:0d:49:4c:f2:dc:a5:71:6f:fb:b3:8f:db:62:a0:
c9:d4:09:62:11:cc:01:57:cc:f6:40:a3:82:4b:4d:
d9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3B:61:18:C9:2D:33:4E:E0:93:24:8D:70:0D:03:F5:BB:F6:BE:6D
X509v3 Authority Key Identifier:
keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:42:c6:95:88:7b:3d:e4:8b:56:54:bf:f0:80:fa:db:33:05:
da:41:d0:54:03:3d:7a:ad:86:fd:e6:13:ae:ad:05:30:3d:59:
4f:8a:dd:93:e9:12:92:10:50:7b:9e:b7:2f:5d:b5:a6:9e:b3:
40:a1:59:40:f8:64:b3:10:79:84:ef:83:80:70:f1:ba:bb:13:
73:0f:14:bd:59:e0:33:ab:3e:71:9a:ab:cd:7c:f8:31:42:a0:
48:e0:08:25:8a:38:56:e6:b5:83:10:6d:17:b8:1f:80:d5:43:
11:3f:6a:68:1f:71:55:5b:82:67:0c:2d:82:74:6e:57:56:fb:
74:82:45:fc:66:7b:9e:a6:4e:52:55:2e:21:49:3e:d9:12:ee:
1a:6c:61:4d:ba:27:ca:0f:b4:bd:d5:e6:cc:8b:62:37:6a:45:
2f:c3:55:25:d9:45:d7:3b:97:24:9d:04:5a:91:24:6c:be:93:
36:21:1c:bb:ef:d0:d6:f2:fd:4b:39:a1:ac:ba:fd:8c:a8:2c:
7e:22:5b:40:a9:67:70:88:7a:c8:00:6d:57:14:12:a7:b9:ed:
9e:ca:22:c5:3b:7d:9d:6b:1f:be:bf:85:0a:56:46:47:1d:db:
1c:2d:69:68:7b:65:fb:ac:b2:a2:9c:e6:59:38:23:28:a9:23:
17:6f:b8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:05:17 2025 by rpki-client