Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json)
Hash identifier: XXMqA69BiZUnmGWAVHKJAZyiyM/U9Epr0UzP0fhe5h4=
Subject key identifier: 2B:0E:39:46:DF:7A:01:C5:11:7A:DA:F4:43:9C:7F:11:B8:9F:F9:29
Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Certificate serial: 0199228CC0CD699693727227F993A892058C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 05:01:13 +0000
Manifest this update: Sun 07 Sep 2025 05:01:13 +0000
Manifest next update: Mon 08 Sep 2025 05:01:13 +0000
Files and hashes: 1: Se8jY-LoM2MVsZ37wmyygWUdZqw.roa (hash: 460xRSiSARjue5TmuazrIkrxiYolcj28Woj0bWcIVJo=)
2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: oXq3b0EG93jLDDkInUvzMFeOYaFomdkWPI/ji6g1IiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:c0:cd:69:96:93:72:72:27:f9:93:a8:92:05:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Validity
Not Before: Sep 7 05:01:13 2025 GMT
Not After : Sep 8 05:01:13 2025 GMT
Subject: CN=2b0e3946df7a01c5117adaf4439c7f11b89ff929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:50:1a:97:24:be:4c:c6:09:2b:6b:ec:9d:28:
24:2e:5f:ee:b0:7f:c4:9f:91:ff:8d:e5:b2:b5:87:
4b:38:8b:d5:8c:b6:7a:8f:51:ab:06:89:e0:b8:7e:
82:e8:d3:70:80:c0:e8:11:39:c6:7b:8b:35:66:1b:
99:46:67:fd:50:e7:00:49:ff:c4:56:b3:bc:ee:7b:
f9:a6:7a:e4:fd:e8:9d:be:d6:e2:32:2c:46:ca:8a:
6a:ba:64:1a:2a:c1:86:a1:75:7f:69:e0:1f:d5:ea:
ae:00:ee:11:c8:de:d9:70:0b:68:cf:92:f1:b1:ee:
04:0a:41:cc:3e:1a:8d:df:90:2f:f6:6b:36:2d:cd:
60:27:5b:33:77:b5:57:4b:0d:ac:f2:38:bc:04:c5:
22:9d:7f:e6:9a:16:b0:e2:57:7e:13:72:ea:a1:f2:
bf:1c:96:41:6b:09:33:f5:f7:07:60:18:25:47:5e:
e8:1b:92:0d:c7:8f:4b:d0:e9:b1:6a:6c:74:f1:77:
cc:ee:26:70:12:b5:37:08:d9:c3:b0:25:ec:66:7d:
5e:45:72:23:5d:53:34:55:87:a0:96:9e:db:b7:75:
0f:52:4b:63:d7:97:f4:41:d2:7a:21:20:71:aa:3b:
65:21:e2:9d:04:45:66:02:28:29:d2:a2:b3:5a:2c:
2c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0E:39:46:DF:7A:01:C5:11:7A:DA:F4:43:9C:7F:11:B8:9F:F9:29
X509v3 Authority Key Identifier:
keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6b:5f:73:3a:32:e1:83:aa:90:ed:02:b5:88:8a:b6:16:36:
35:c8:00:92:f3:3c:59:9c:64:2d:bd:34:03:bd:61:7e:6e:8b:
95:8b:fe:42:13:8e:e9:78:f6:79:a5:aa:50:3c:fd:40:3a:bc:
a1:05:b1:17:27:11:e1:e5:4a:23:43:31:68:0f:9d:7f:94:40:
9f:64:6a:12:52:08:77:4e:16:d2:1a:bd:25:eb:84:ed:fb:a7:
da:5d:d9:8a:8f:27:8e:e9:1c:8f:d8:e6:ad:33:da:cd:c8:a6:
23:6e:1f:de:c4:7d:95:4e:85:9e:d0:05:10:68:0e:2a:c7:79:
56:45:65:3a:9b:0e:7a:fc:12:a6:1f:97:bc:ed:8d:60:72:73:
4b:a8:34:6a:5a:28:10:16:53:69:5a:ce:91:3b:b8:9b:ce:06:
46:07:65:f4:1b:ae:d1:0c:66:b5:3d:e0:c6:d2:e1:32:d4:38:
0d:7a:96:c8:95:c0:0f:67:8a:89:74:72:22:11:9b:b5:db:5e:
59:ae:52:3a:bf:1b:c9:59:0d:9e:7d:55:61:6a:18:01:19:7c:
db:4b:b7:e8:6c:b2:bc:2a:58:a1:89:9b:5b:4e:08:67:af:7d:
63:c6:5a:e4:cb:97:b7:ce:48:ea:78:b2:fe:13:c5:a4:de:91:
d1:11:43:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:30 2025 by rpki-client