Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
File: QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft (raw, json)
Hash identifier: Sar7ZPROO2B+SgVwpXupVo+/2xfZbcjKvAgIuYGubN0=
Subject key identifier: F7:CF:A1:85:51:B7:62:1F:03:99:B9:FA:35:FD:31:29:A5:D3:21:60
Authority key identifier: 41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
Certificate issuer: /CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Certificate serial: 0199239FE65036B1FB8EC352B9FE2F6A07D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
Manifest number: 055D
Signing time: Sun 07 Sep 2025 10:01:45 +0000
Manifest this update: Sun 07 Sep 2025 10:01:45 +0000
Manifest next update: Mon 08 Sep 2025 10:01:45 +0000
Files and hashes: 1: QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl (hash: KbrL5uZkZ2RLtqRvtQjXjmUsMxidbYJD1iXFUyuCF6E=)
2: Z6Wkv7AZrSmiWgbMuz5hZVggR7E.roa (hash: MRaF6vDhyEMplwKKtwCPw92vpK44c5JniyQIX+roRzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:e6:50:36:b1:fb:8e:c3:52:b9:fe:2f:6a:07:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Validity
Not Before: Sep 7 10:01:45 2025 GMT
Not After : Sep 8 10:01:45 2025 GMT
Subject: CN=f7cfa18551b7621f0399b9fa35fd3129a5d32160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bc:53:10:65:a5:a1:a5:42:14:4b:21:35:5b:
15:5c:87:d5:64:27:28:eb:96:54:66:96:09:ab:56:
47:ea:f8:69:ab:50:61:f9:34:bb:41:61:ad:80:e6:
f8:13:b1:a6:bb:bf:b1:31:8a:f3:eb:72:c4:d7:59:
d2:39:08:8c:44:c1:94:e3:34:ab:da:cc:81:88:5f:
b4:ad:2c:46:1d:51:6a:e4:8d:53:17:8e:be:4b:41:
9d:9f:b0:40:65:fe:00:32:8a:4b:c0:8d:37:e0:fa:
f4:de:db:6e:3c:c4:6d:bd:bd:78:fe:24:dd:79:a2:
ad:20:8c:6e:47:bd:90:2d:5b:a4:67:f6:4d:01:a2:
86:73:af:59:c5:43:af:c6:06:e9:4b:1a:25:cc:8f:
d2:7f:dc:30:5b:e3:81:73:c6:47:18:c8:8d:e7:f6:
28:b2:b6:12:91:da:aa:f2:67:7d:0f:4b:7d:91:85:
94:cf:73:cb:3a:02:85:5b:5e:fa:65:c3:55:b8:64:
bb:77:f5:4c:b0:95:bd:df:bf:3e:7d:90:af:cf:68:
17:31:4c:87:6f:ff:36:cb:96:67:bc:3c:bc:31:5c:
22:fe:87:3c:a0:d3:02:cc:9f:e2:a3:e5:22:00:76:
c5:6a:4e:6a:2c:4d:c6:3d:b7:e8:fc:6e:ad:52:85:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CF:A1:85:51:B7:62:1F:03:99:B9:FA:35:FD:31:29:A5:D3:21:60
X509v3 Authority Key Identifier:
keyid:41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4a:9b:78:dc:02:61:a8:85:6d:9b:35:e0:3b:29:b0:f5:e2:
be:da:52:21:d2:36:33:89:b6:12:37:7b:60:b5:bb:b6:e7:42:
d0:f9:b0:27:b1:ef:fe:ee:54:b7:13:e7:ec:12:d4:39:85:04:
be:8e:5a:91:6f:66:e8:05:bc:c2:af:92:fa:fd:c2:e1:1c:9b:
fa:2c:ae:22:65:22:8e:e2:f1:4d:3d:10:17:67:57:55:c4:1f:
55:b6:60:17:de:85:e0:4a:52:2f:30:4c:00:6e:00:ae:f7:88:
2a:71:e6:31:43:a5:1a:63:b6:cf:5f:a3:ac:a1:1f:79:c0:f3:
3f:19:0d:84:02:1c:8e:79:d4:57:e9:a6:37:c5:e2:cf:8a:3a:
a3:3b:4f:3e:87:81:9e:38:cc:cf:65:5f:83:1a:c4:bb:24:d4:
9f:31:63:85:ab:b0:d6:97:03:47:28:40:cf:bb:25:42:1d:56:
fc:8f:f3:9c:a0:31:41:d3:7d:80:ed:13:60:23:14:a0:47:77:
c7:d7:c2:03:fc:05:96:2f:77:ca:22:87:7c:cd:11:ea:f6:f4:
d8:31:fc:88:e5:d7:b9:22:19:e9:85:59:a9:fb:4e:88:ff:30:
b1:62:0d:f3:a2:46:26:ea:be:32:0e:95:9b:b2:39:e0:88:90:
ca:66:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:43 2025 by rpki-client