
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
File: qW_WWYUaNLt3wyE8pL93JRHghzQ.mft (raw, json)
Hash identifier: eRlgUV71x2NwwIjZfukvLxJaIxAwWee2xFxP82+HA50=
Subject key identifier: E4:2D:25:83:19:A6:DD:F6:00:20:FF:45:AD:7D:80:5B:7C:6F:43:23
Authority key identifier: A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34
Certificate issuer: /CN=a96fd659851a34bb77c3213ca4bf772511e08734
Certificate serial: 01974A0C7FE6D83BA7427B9E0466397B56DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
Manifest number: 023E
Signing time: Sat 07 Jun 2025 11:00:22 +0000
Manifest this update: Sat 07 Jun 2025 11:00:22 +0000
Manifest next update: Sun 08 Jun 2025 11:00:22 +0000
Files and hashes: 1: qW_WWYUaNLt3wyE8pL93JRHghzQ.crl (hash: Zp/fxHr1CTgUOdpb4B5jbjFGAZhJf1/uM8tdYa67dZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:7f:e6:d8:3b:a7:42:7b:9e:04:66:39:7b:56:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96fd659851a34bb77c3213ca4bf772511e08734
Validity
Not Before: Jun 7 11:00:22 2025 GMT
Not After : Jun 8 11:00:22 2025 GMT
Subject: CN=e42d258319a6ddf60020ff45ad7d805b7c6f4323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:09:f0:61:e9:92:c4:65:5e:65:c0:3b:9e:
05:a2:41:07:fb:11:ea:6b:9c:24:e8:f7:6c:2e:6a:
93:27:0e:20:78:72:16:f0:48:a7:ce:02:31:ab:11:
eb:de:63:a1:ab:93:56:c7:05:b1:8d:ff:dc:4b:52:
38:39:1b:88:f6:c1:3f:11:ac:93:6a:bf:27:8c:ec:
a1:22:cc:33:ac:6a:8d:40:b3:b9:e3:b7:6d:a3:d9:
03:2a:eb:1e:61:d3:21:df:13:45:ae:74:59:bf:2a:
09:aa:5f:de:94:6b:21:9c:ec:72:da:18:30:28:b4:
06:80:d2:1d:05:a3:91:9f:74:ba:1e:1e:a5:eb:ec:
51:dc:9e:e8:7f:0e:ac:df:35:0a:c4:c5:fc:5b:51:
68:67:e1:00:8e:48:83:bd:e9:23:b2:90:72:a1:d7:
90:72:8b:c2:42:3b:22:24:b5:4d:04:c4:1b:ed:db:
76:82:02:d2:14:d4:2d:d5:5c:50:3a:bd:a6:f2:c0:
8a:e7:e4:9b:b7:1b:96:ec:96:40:38:23:c1:84:ce:
25:c6:9c:0b:36:04:41:7d:4a:76:3a:37:13:87:94:
25:00:ab:d1:f0:6d:c1:5e:b6:d7:bd:ac:dc:46:7e:
c9:68:6c:d4:8c:9e:fc:2c:91:3b:79:b4:fe:95:6f:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2D:25:83:19:A6:DD:F6:00:20:FF:45:AD:7D:80:5B:7C:6F:43:23
X509v3 Authority Key Identifier:
keyid:A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1f:2f:38:0b:4e:ce:e6:3b:6d:73:22:5e:d3:2f:c7:e0:3b:
49:eb:1a:7f:2c:3a:51:4f:2c:30:d6:2c:b1:fc:3a:d5:e1:28:
b4:ec:54:d5:b7:db:e4:b5:bf:38:63:2a:40:71:f8:11:16:6d:
16:29:72:db:88:fa:9e:1d:80:14:4b:3c:1d:c5:41:42:13:e0:
57:5a:03:87:cf:3d:ec:6f:28:c0:65:fa:d0:ce:62:3a:91:11:
ce:f8:99:1e:e6:7c:f9:12:74:f8:68:bf:1d:f7:10:bc:58:a3:
7b:fd:a7:f3:e3:a4:1c:cc:9d:54:74:aa:83:f0:cf:30:57:e2:
76:44:0d:76:27:75:17:d9:c8:4e:22:b0:2e:f8:b3:88:a1:9f:
1d:0a:4d:d6:f3:13:b4:7f:55:33:b4:2f:5f:3f:95:f1:3d:cd:
10:08:59:a1:98:c3:c8:df:14:00:87:8d:f7:e1:9e:99:e8:e7:
5d:fb:c3:49:e5:c5:b7:02:2f:f5:3e:51:13:b3:b5:9b:54:e7:
89:e7:74:64:a4:67:4c:2d:df:bd:02:53:e3:c3:a4:a1:f6:0d:
93:c7:d5:55:b0:28:33:92:bd:b0:e4:d0:be:57:a4:73:21:59:
b0:b5:6a:e9:fc:20:bb:78:c7:b0:ce:b9:a7:0b:c8:db:69:88:
26:a2:e2:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDH/m2DunQnueBGY5e1bdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NmZkNjU5ODUxYTM0YmI3N2MzMjEzY2E0YmY3NzI1MTFl
MDg3MzQwHhcNMjUwNjA3MTEwMDIyWhcNMjUwNjA4MTEwMDIyWjAzMTEwLwYDVQQD
EyhlNDJkMjU4MzE5YTZkZGY2MDAyMGZmNDVhZDdkODA1YjdjNmY0MzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhgJ8GHpksRlXmXAO54FokEH+xHq
a5wk6PdsLmqTJw4geHIW8EinzgIxqxHr3mOhq5NWxwWxjf/cS1I4ORuI9sE/EayT
ar8njOyhIswzrGqNQLO547dto9kDKuseYdMh3xNFrnRZvyoJql/elGshnOxy2hgw
KLQGgNIdBaORn3S6Hh6l6+xR3J7ofw6s3zUKxMX8W1FoZ+EAjkiDvekjspByodeQ
covCQjsiJLVNBMQb7dt2ggLSFNQt1VxQOr2m8sCK5+SbtxuW7JZAOCPBhM4lxpwL
NgRBfUp2OjcTh5QlAKvR8G3BXrbXvazcRn7JaGzUjJ78LJE7ebT+lW/exQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQtJYMZpt32ACD/Ra19gFt8b0MjMB8GA1UdIwQY
MBaAFKlv1lmFGjS7d8MhPKS/dyUR4Ic0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVdfV1dZVWFOTHQzd3lFOHBMOTNKUkhnaHpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81YzZhMmEtYzBiNi00OWE0LTk5M2Ut
YzJjY2UzNWI3MDE1LzEvcVdfV1dZVWFOTHQzd3lFOHBMOTNKUkhnaHpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC81YzZhMmEtYzBiNi00OWE0LTk5M2UtYzJjY2UzNWI3MDE1
LzEvcVdfV1dZVWFOTHQzd3lFOHBMOTNKUkhnaHpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARB8vOAtO
zuY7bXMiXtMvx+A7Sesafyw6UU8sMNYssfw61eEotOxU1bfb5LW/OGMqQHH4ERZt
Fily24j6nh2AFEs8HcVBQhPgV1oDh8897G8owGX60M5iOpERzviZHuZ8+RJ0+Gi/
HfcQvFije/2n8+OkHMydVHSqg/DPMFfidkQNdid1F9nITiKwLviziKGfHQpN1vMT
tH9VM7QvXz+V8T3NEAhZoZjDyN8UAIeN9+GemejnXfvDSeXFtwIv9T5RE7O1m1Tn
ied0ZKRnTC3fvQJT48OkofYNk8fVVbAoM5K9sOTQvlekcyFZsLVq6fwgu3jHsM65
pwvI22mIJqLiHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:58:50 2025 by rpki-client