Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
File: qW_WWYUaNLt3wyE8pL93JRHghzQ.mft (raw, json)
Hash identifier: gFFOry6MunZ4kCgCbkP0UHmcdzJGXk8uoIk1ZioSEG0=
Subject key identifier: DE:7A:05:92:F3:56:BF:F2:EB:11:1F:C0:2E:0C:FC:AB:B5:2D:B1:A1
Authority key identifier: A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34
Certificate issuer: /CN=a96fd659851a34bb77c3213ca4bf772511e08734
Certificate serial: 0199233166D592687FEC2D7DF8CB19EABCE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
Manifest number: 0333
Signing time: Sun 07 Sep 2025 08:01:04 +0000
Manifest this update: Sun 07 Sep 2025 08:01:04 +0000
Manifest next update: Mon 08 Sep 2025 08:01:04 +0000
Files and hashes: 1: qW_WWYUaNLt3wyE8pL93JRHghzQ.crl (hash: 6H01raI65TkTKhbUOmILg/puwYdUsvU8z4/KnvdOxAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:66:d5:92:68:7f:ec:2d:7d:f8:cb:19:ea:bc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96fd659851a34bb77c3213ca4bf772511e08734
Validity
Not Before: Sep 7 08:01:04 2025 GMT
Not After : Sep 8 08:01:04 2025 GMT
Subject: CN=de7a0592f356bff2eb111fc02e0cfcabb52db1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:b8:40:f2:04:00:86:89:f5:f5:c1:ed:00:
d5:25:9a:63:ea:e9:82:f2:79:7b:a5:5c:11:19:3d:
91:c9:0d:d8:92:4d:13:d8:67:c8:ea:38:af:ed:de:
9c:40:dc:93:27:ea:2c:88:d2:ac:23:7f:2d:3d:dd:
75:e0:d6:a2:40:3f:f2:be:69:1c:9a:c5:53:46:f4:
d1:f5:b5:ed:67:a9:ee:d5:21:3a:5c:79:fd:b7:6d:
64:ed:17:73:72:df:8d:1d:52:d9:e8:03:a3:66:9b:
25:a1:e1:51:9d:78:46:4e:a5:09:ac:b0:4f:12:0d:
b4:59:b3:53:1a:44:44:d8:1e:e4:1d:24:be:f5:34:
69:e9:44:45:af:73:98:bb:5c:3c:68:32:25:81:f2:
4b:bf:d9:6b:70:75:47:a8:bc:5a:b7:1a:b1:83:d1:
71:a7:5d:b0:a5:93:10:f0:e1:d2:69:71:47:d1:94:
d4:76:3a:1b:eb:53:02:eb:43:8e:27:f9:a1:88:35:
bd:71:8d:4f:36:59:27:8b:7f:91:c2:b2:ab:0e:9a:
d5:dc:99:b9:13:d1:1d:fc:90:ae:b3:56:42:a9:bc:
01:e4:68:a9:19:e6:1b:f0:ab:3f:27:ea:15:ba:fa:
f0:d0:0d:05:19:b0:d0:66:89:50:57:f6:9e:cd:29:
bb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7A:05:92:F3:56:BF:F2:EB:11:1F:C0:2E:0C:FC:AB:B5:2D:B1:A1
X509v3 Authority Key Identifier:
keyid:A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1b:b4:ab:aa:17:78:16:6b:9e:db:fc:1f:98:8b:e7:9a:6b:
67:48:41:23:85:6e:97:25:d7:fc:1a:29:a9:46:1d:47:1f:c7:
4f:00:9e:b7:87:e7:46:40:61:92:d6:9d:0d:8f:40:76:50:16:
e0:aa:80:cb:2f:c8:84:56:73:05:93:3e:f3:67:6e:02:95:67:
34:50:6a:64:57:57:c9:55:0d:b9:64:cb:8e:f3:53:0d:ac:85:
b7:40:94:1c:55:f8:9d:e3:d4:c7:52:4a:e9:b5:23:6d:8d:fc:
ca:50:09:dc:eb:3f:cf:da:e0:1a:e3:2d:bc:43:a4:c4:90:22:
71:40:6b:7a:86:ed:fc:88:43:e3:81:2d:72:a5:de:41:72:51:
0c:ea:1b:4c:b2:87:6d:0f:c2:16:81:ae:1d:2c:83:55:3a:5f:
b1:ea:17:4d:fa:f8:6a:c1:63:27:00:0c:aa:b4:90:5d:57:e5:
ba:0f:b7:5e:44:45:68:a5:45:8e:78:b2:4e:d4:b0:df:34:3a:
6a:e4:96:44:df:29:78:c1:29:20:5b:d6:71:60:40:0e:57:59:
aa:e2:5a:f0:d0:db:f2:2a:39:d5:86:34:cf:d8:c9:86:fc:e5:
64:27:f0:08:ad:90:c2:90:e9:9b:40:b8:6a:40:65:cf:d6:f6:
15:78:fa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:12 2025 by rpki-client