Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
File: QwTYaLC50dQ2eOtGeufD-jv_4vg.mft (raw, json)
Hash identifier: 0rPqq/6Smqb0L8VVcGKMO3M3IZQ9wtuqReW2r1HgyjI=
Subject key identifier: 11:A1:9A:C2:7F:79:C3:D3:F2:B1:D7:E7:E7:FB:95:44:D8:B8:8F:76
Authority key identifier: 43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
Certificate issuer: /CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Certificate serial: 0199228CA080D49620CB534B11E1B956AA17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
Manifest number: 0D1B
Signing time: Sun 07 Sep 2025 05:01:05 +0000
Manifest this update: Sun 07 Sep 2025 05:01:05 +0000
Manifest next update: Mon 08 Sep 2025 05:01:05 +0000
Files and hashes: 1: 0sfAJDOKEgD2Tzsu1RWmyLUySdU.roa (hash: VH3wSYokwNKbdRdlo/plfnhiJKHB8F9C3/JbEz05f7k=)
2: QwTYaLC50dQ2eOtGeufD-jv_4vg.crl (hash: nUh1im54gG8mYaLatIZgAlByFMjp1bR94gAt8gzESTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:a0:80:d4:96:20:cb:53:4b:11:e1:b9:56:aa:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Validity
Not Before: Sep 7 05:01:05 2025 GMT
Not After : Sep 8 05:01:05 2025 GMT
Subject: CN=11a19ac27f79c3d3f2b1d7e7e7fb9544d8b88f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:5e:43:44:32:a6:31:5f:7e:56:2a:96:bb:
b0:de:51:43:c1:ab:9f:56:a9:7d:51:21:9f:d5:99:
f3:e7:d9:1f:a4:1e:0d:9b:82:c9:d3:70:b8:89:b6:
bc:fc:fb:b5:a9:e9:7d:ff:aa:23:5e:db:d0:fa:79:
45:10:0d:5e:9c:04:ee:12:59:61:a1:c8:aa:46:1f:
89:df:a7:1b:70:bb:86:bc:6c:b0:5b:81:2b:af:a4:
50:94:06:b9:aa:33:13:19:1f:cc:8e:ae:0f:a0:e8:
22:03:b1:84:9d:8e:f4:08:7a:72:0d:f0:16:17:0f:
99:17:b9:4a:dd:d2:1d:7c:45:e0:af:d6:78:f7:00:
c9:dc:53:a0:69:a3:d9:29:3e:49:0a:98:71:bc:ed:
a3:0a:2a:96:8c:2a:d3:ec:45:d7:99:ef:ac:39:a4:
5a:d8:72:a1:08:3a:78:0d:64:90:d9:be:f4:d7:93:
7f:90:5f:05:d7:9d:19:ea:d8:9c:1c:da:c4:9e:71:
76:45:e1:6f:2e:55:27:d9:15:a9:33:63:6b:5a:c1:
23:cf:cf:ec:c3:52:f9:94:b8:73:b8:06:ff:dc:27:
6f:b4:0e:df:13:8f:8f:08:5c:31:fe:da:7d:f4:dd:
03:b8:ce:83:a7:a9:e7:ee:09:e1:5d:1c:c3:13:85:
f7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A1:9A:C2:7F:79:C3:D3:F2:B1:D7:E7:E7:FB:95:44:D8:B8:8F:76
X509v3 Authority Key Identifier:
keyid:43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:10:4b:7b:47:a8:d0:21:b0:7c:b8:f5:99:1f:3f:fa:8c:b3:
3a:db:12:24:f7:6c:9d:47:a0:1b:d8:c9:05:30:d2:e3:43:1f:
b0:38:c8:2d:2f:e5:ca:7e:bc:1a:b6:51:f1:6b:34:89:a0:61:
20:82:df:cb:79:69:08:65:04:cf:ad:e5:61:02:ff:b4:8f:41:
ed:e7:a6:17:f3:98:7e:a3:1e:e6:85:70:14:85:de:e0:1b:b4:
93:ab:cc:a8:86:a7:7f:71:5e:e7:03:46:25:ac:99:f9:49:f6:
25:64:e7:02:a9:6e:1d:07:47:a2:38:a4:97:8b:59:aa:9a:33:
96:a6:06:af:c3:c5:89:26:5d:26:3f:e4:2b:1a:b4:04:14:3c:
d0:d8:55:c5:c2:3b:60:26:af:fd:0c:5d:f1:49:94:5e:eb:b1:
e5:f2:8a:35:ff:b8:e3:dc:3d:cf:ca:48:07:75:48:3b:15:d3:
48:72:a4:19:77:dd:c4:94:aa:f2:e2:2c:90:92:3e:03:f0:42:
1f:a3:39:c7:4a:cb:c6:c7:bd:a6:98:a0:71:e2:49:42:b4:6e:
f2:0c:dd:04:20:dd:1b:3a:05:07:47:e3:49:4a:fc:8e:3c:81:
f4:93:38:f9:db:1f:8e:c6:5e:e2:ca:fb:d7:3c:9d:2f:ae:be:
4c:92:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:19 2025 by rpki-client