Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
File: wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft (raw, json)
Hash identifier: IeoiqzsqPwtC76q0HelLsSrVJQrJs0R7nyfBg1LMHKk=
Subject key identifier: 9D:8B:D1:3E:2F:F8:C9:0D:D5:A5:8D:A1:4F:2C:D5:0E:C7:AF:AB:32
Authority key identifier: C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
Certificate issuer: /CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Certificate serial: 019A71B79F01637E13720FD678F09A269A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:00:50 +0000
Manifest this update: Tue 11 Nov 2025 07:00:50 +0000
Manifest next update: Wed 12 Nov 2025 07:00:50 +0000
Files and hashes: 1: wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl (hash: dYngdAM6Ike4uXM9KW+X+Z9Q72/w9gIzTokA2lWCAzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9f:01:63:7e:13:72:0f:d6:78:f0:9a:26:9a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Validity
Not Before: Nov 11 07:00:50 2025 GMT
Not After : Nov 12 07:00:50 2025 GMT
Subject: CN=9d8bd13e2ff8c90dd5a58da14f2cd50ec7afab32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d8:13:c7:5a:03:1b:db:59:dc:53:6d:5a:7d:
f1:50:db:70:9e:2e:c1:e1:e3:37:5f:67:87:0d:b7:
4d:5b:e1:ca:65:f6:fe:85:d4:ff:17:de:84:1b:bd:
77:9a:6a:29:63:4d:73:6d:c9:85:d3:53:e6:6c:0b:
da:03:58:2f:bf:19:dc:4f:3b:4d:7c:1a:3b:6a:ba:
6b:48:57:57:de:33:a9:03:d2:72:75:33:66:d9:ef:
85:d7:28:f6:0e:98:53:67:b3:46:7e:2e:8d:13:23:
a7:21:66:ab:31:f8:0a:7f:5b:3e:7b:17:a4:fe:10:
30:95:84:94:40:ef:e3:40:62:0e:3f:56:58:94:e8:
11:03:04:cb:4c:cf:45:59:e4:d4:c6:e2:30:08:64:
16:0f:f0:69:83:04:60:6e:60:51:68:c9:38:84:d5:
86:68:ae:78:a0:e8:c6:15:9d:47:b7:04:ad:43:fa:
28:ba:0c:1c:f5:83:37:61:c0:eb:95:73:2c:ad:ca:
e1:bb:9d:ef:f4:c6:4e:be:18:e1:29:0f:29:19:83:
2e:f5:01:5e:5c:30:80:77:92:b9:fa:8f:1e:0d:2e:
eb:81:a8:58:2a:bb:7c:f8:f3:53:95:9f:cb:6b:31:
0e:54:3b:49:68:f6:dc:b2:ed:65:dd:46:f6:20:e9:
8e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8B:D1:3E:2F:F8:C9:0D:D5:A5:8D:A1:4F:2C:D5:0E:C7:AF:AB:32
X509v3 Authority Key Identifier:
keyid:C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:45:ac:6b:48:94:34:53:ba:a6:a6:f9:32:94:55:4c:4b:58:
b8:e2:24:fd:dd:29:76:cb:b2:7e:31:ee:c8:ae:ec:3d:dd:76:
c2:c1:30:f2:81:73:94:a1:72:f6:7b:43:9d:38:09:6b:27:9a:
c3:74:47:22:29:c4:c5:e3:09:bd:b2:b5:36:61:1e:66:57:f2:
3c:48:b1:80:5d:b3:26:e8:1a:84:5d:94:31:92:c7:74:e0:c4:
3d:55:f4:30:a1:1e:98:0a:ce:36:6d:de:00:09:9b:9f:55:40:
70:d2:c9:3e:94:0a:f0:0e:23:bf:a2:7d:8f:96:43:21:51:68:
47:d4:4e:e9:e6:00:cf:55:69:67:4e:9c:f0:2d:80:df:db:7a:
46:94:cf:0f:d0:61:9a:b4:43:be:10:ee:b2:b1:09:f6:33:3c:
32:e7:9f:46:ed:c2:b5:65:9b:63:c0:9d:c6:23:68:ad:8b:80:
fd:95:66:c4:4d:dd:3d:38:1d:91:5c:37:76:ce:e0:fc:3f:9a:
7e:16:a4:41:98:c9:86:69:a6:c0:4b:ab:0c:80:24:56:b3:8f:
5b:46:60:51:a5:5e:14:69:34:53:34:2c:cb:39:39:4f:2a:fd:
3c:67:bf:8f:32:e2:2f:8b:d4:84:0f:67:5e:7e:23:d7:1c:b1:
56:2b:39:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:30 2025 by rpki-client