Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File: Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier: /HMCSSsB34lRgEgbgd/CjeFsoETnZwPuapaLZca3Fec=
Subject key identifier: B4:62:00:5B:53:92:64:BE:4C:B5:90:F4:49:8C:73:A5:C7:79:E6:85
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer: /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial: 019A71B8E83FADC9316CF1B68CDF4456CF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 07:02:14 +0000
Manifest this update: Tue 11 Nov 2025 07:02:14 +0000
Manifest next update: Wed 12 Nov 2025 07:02:14 +0000
Files and hashes: 1: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: UjoCvNFB1oOpXQusR0COBACHejfk7UU81gLA1rKx0Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e8:3f:ad:c9:31:6c:f1:b6:8c:df:44:56:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
Validity
Not Before: Nov 11 07:02:14 2025 GMT
Not After : Nov 12 07:02:14 2025 GMT
Subject: CN=b462005b539264be4cb590f4498c73a5c779e685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:2e:f4:c3:87:1b:ce:7d:ff:4a:b8:80:c0:
89:ca:80:c9:2d:fd:fd:4b:80:65:d2:90:11:55:ad:
fa:d9:ef:03:75:a7:72:42:91:1a:26:d6:b4:8d:5a:
4a:48:5f:71:2e:e2:b5:35:95:ee:5d:be:ba:fe:5a:
56:e8:8e:52:3d:62:7a:3b:fe:90:47:c7:84:f0:5c:
c3:9f:2a:d1:bc:2f:65:fd:97:3d:f6:12:73:ee:18:
f1:40:6c:2c:4c:a4:da:ec:68:7b:22:6a:c0:20:2e:
a7:62:40:a3:a3:1e:d9:a0:c2:15:2c:4c:d9:80:60:
ef:cc:9b:2c:10:dc:2a:22:4f:86:dc:e8:6d:be:82:
b0:98:e0:b2:78:60:a5:6b:50:10:83:98:30:28:f5:
fd:e9:67:07:2c:d2:6e:83:5d:1f:ae:cf:a9:d8:e6:
b0:bf:5d:1e:0a:33:80:29:bc:6f:e7:1f:79:2e:9a:
c3:cb:f4:59:4d:5d:25:39:38:96:5f:46:f7:b3:3b:
a1:56:e4:3b:bf:f5:c5:e3:84:6a:e0:14:28:71:79:
e5:6c:ed:70:85:d7:23:a5:3a:ca:d9:7b:7d:70:b4:
17:db:05:59:aa:bc:8f:6d:ec:b6:25:46:57:0a:57:
b4:5a:a7:a1:7d:43:7f:79:cb:ef:59:e6:1c:19:cd:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:62:00:5B:53:92:64:BE:4C:B5:90:F4:49:8C:73:A5:C7:79:E6:85
X509v3 Authority Key Identifier:
keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c7:f3:de:d5:8a:01:eb:1b:67:e8:9b:67:7b:12:b4:e0:7e:
66:94:55:7e:84:9c:aa:80:36:9d:de:48:91:4a:18:65:3e:d3:
1e:3d:6a:05:c7:97:b8:85:4c:8a:4d:e2:60:ab:50:0c:68:fa:
c6:d3:a6:f7:3e:68:14:98:1c:98:cb:f2:4d:12:c5:2c:bb:c3:
30:11:a8:9a:91:bf:82:9a:8b:32:c1:cc:e1:47:b8:96:bb:a9:
9c:04:07:1a:f6:ed:4f:e6:65:f6:11:46:56:c9:48:19:cc:49:
a0:90:bb:3c:f2:1e:57:b9:a7:10:28:82:71:b9:98:6d:ac:c1:
81:ce:45:d0:83:18:34:ae:75:45:ec:f5:bf:75:a9:4a:6e:fc:
bc:f9:f0:31:62:3b:f0:e2:ec:62:16:f7:c2:c9:66:f4:20:b3:
34:d7:5c:7f:5e:1d:77:dc:01:09:61:04:09:6f:4a:6e:9f:70:
fd:10:13:89:39:44:94:5f:ef:8d:01:8d:04:13:b1:aa:d6:2d:
d5:01:87:c1:88:d0:2d:90:f1:26:66:64:86:13:86:bd:97:0d:
c2:49:7d:ac:74:89:9c:9c:bf:75:3c:60:08:df:77:3b:b4:4e:
06:77:6a:6e:52:29:ad:91:da:bd:f5:89:f9:bb:37:c1:bd:31:
26:8a:9b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:15 2025 by rpki-client