Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
File: QWbAb_SeBTSAniNABbqlzKfhRqg.mft (raw, json)
Hash identifier: kkahNOCbiW3DGEcCVammRAFnG4lSJw3egd/GbETwMrc=
Subject key identifier: 32:51:92:19:75:82:8D:39:9B:3F:BB:41:D7:10:21:88:BF:66:1C:F6
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial: 0198537BA6FB2C744BDA521F0710E53160CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
Manifest number: 0116
Signing time: Tue 29 Jul 2025 00:01:09 +0000
Manifest this update: Tue 29 Jul 2025 00:01:09 +0000
Manifest next update: Wed 30 Jul 2025 00:01:09 +0000
Files and hashes: 1: 9W9gYghW6_iCN3HlIGpaoOJHZhk.roa (hash: /VOahTPt9Fh6RgLRa78P8pgoK/6N4p3sHujeTUCmYBc=)
2: QWbAb_SeBTSAniNABbqlzKfhRqg.crl (hash: 7qGqYqSzAjy4JapDEOhhkuNebGVBuDVbhEm4LAJzaFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:a6:fb:2c:74:4b:da:52:1f:07:10:e5:31:60:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
Validity
Not Before: Jul 29 00:01:09 2025 GMT
Not After : Jul 30 00:01:09 2025 GMT
Subject: CN=3251921975828d399b3fbb41d7102188bf661cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:8d:6b:9e:58:63:d1:4f:59:98:7b:95:22:
57:1e:e0:62:c1:fe:c4:f2:b0:61:6b:29:c3:b9:82:
ee:41:ed:ec:a6:c4:72:1a:fa:61:46:2d:8c:bc:11:
f3:fc:23:e9:28:0a:d9:6b:34:18:9e:da:43:d0:89:
14:ac:40:aa:8e:2b:e8:4c:25:3c:d1:05:c0:23:8f:
78:74:7c:1e:e4:2e:74:86:cb:b3:32:ce:1b:a2:ea:
29:c8:80:f3:e7:ad:39:d2:8c:89:69:53:26:6f:f0:
86:bd:bd:05:ad:8e:7c:c8:6c:26:0d:7e:a0:57:63:
24:38:95:a6:2b:b8:8e:51:b5:02:6c:a0:d8:51:38:
ac:c3:f6:a9:f8:72:c0:d5:d7:0b:68:8c:b9:7f:18:
b9:9c:6f:78:ac:ba:75:e3:5d:64:43:ed:6f:c7:54:
d8:14:4b:ad:87:5c:0d:30:04:62:53:d3:f7:d5:8b:
f7:8c:0a:11:66:e9:cb:ea:b4:b3:8c:d4:f3:ca:81:
ef:e4:b0:34:1b:8e:f4:4a:0f:22:dd:41:0f:e5:15:
9c:c3:9f:61:68:d6:2d:fb:06:5e:60:0f:b2:a0:80:
53:c0:b6:25:15:9f:aa:e4:60:8c:97:cc:ce:93:46:
38:47:4e:23:0c:e8:ed:a4:e5:86:a3:5f:5c:31:49:
a9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:51:92:19:75:82:8D:39:9B:3F:BB:41:D7:10:21:88:BF:66:1C:F6
X509v3 Authority Key Identifier:
keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:af:5b:26:8b:d6:e0:42:5a:34:bf:f9:b4:32:85:a5:9f:ad:
92:0b:22:b0:8b:c1:d2:bf:d0:83:6f:43:f6:f1:f8:ce:5f:c1:
61:d0:55:90:2b:2b:48:77:87:e5:cc:5d:2f:12:f6:10:c5:b6:
c9:a8:36:c1:c0:98:69:75:2b:93:19:02:f1:93:fd:a7:65:9d:
f2:d6:3b:d9:5b:4d:66:3f:be:99:e2:b2:55:79:7b:7c:17:1b:
78:46:13:7a:a4:93:39:86:2b:d6:72:71:7f:4a:a1:13:c3:a6:
ba:42:93:7e:ea:1b:bc:aa:ea:ae:b4:94:75:b1:c8:03:25:37:
51:6c:4c:5a:27:bd:cf:8a:39:df:c1:ea:ca:d4:15:8e:f4:0e:
4a:62:2d:f1:ce:a4:9e:b8:8e:fb:6a:cc:ef:6f:0b:68:c6:65:
06:fc:46:78:e3:fd:bc:a8:41:62:3b:ef:25:09:5e:ec:28:d0:
d4:87:e8:85:9e:09:8e:fb:65:24:11:28:44:9e:e7:39:40:02:
55:64:d2:3f:f2:fa:ab:eb:ae:2e:9a:ae:ef:07:76:c2:cf:13:
ea:27:77:5d:76:4e:71:55:2e:fa:f2:ff:b6:06:96:1f:5a:33:
13:83:45:51:79:3a:51:1c:de:60:8c:6a:b0:2a:bf:d5:89:c5:
5a:92:c9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:09:23 2025 by rpki-client