Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
File: QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft (raw, json)
Hash identifier: zO84wwDXDHjXUskqdAhZcNPx3eDJDqDQVVx7bHasW58=
Subject key identifier: 3F:29:72:52:88:AA:9E:2B:A2:5A:DB:26:8B:16:2B:85:1C:D4:46:15
Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Certificate issuer: /CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Certificate serial: 01991809A762284DC488C0F587FAE4202EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
Manifest number: 0D42
Signing time: Fri 05 Sep 2025 04:01:49 +0000
Manifest this update: Fri 05 Sep 2025 04:01:49 +0000
Manifest next update: Sat 06 Sep 2025 04:01:49 +0000
Files and hashes: 1: QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl (hash: AEPCBtz+uQD7wX2aWNt9SYNz8xJD7Ve6+l0UFBGvyxU=)
2: W0mc7WeTNbvVyKRZnKoY5IklP-A.roa (hash: BnijXL5FMZmk2zWfbqgaQXF8ehYBDzpPQFPkyywiPoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:a7:62:28:4d:c4:88:c0:f5:87:fa:e4:20:2e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Validity
Not Before: Sep 5 04:01:49 2025 GMT
Not After : Sep 6 04:01:49 2025 GMT
Subject: CN=3f29725288aa9e2ba25adb268b162b851cd44615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:91:d1:0c:1e:9b:a0:97:fa:b8:dc:2b:41:
62:0f:9d:6a:09:a9:55:91:a9:61:ba:3a:ad:7e:ea:
63:03:c0:e8:50:b7:93:2e:38:3a:95:21:ee:49:3d:
24:60:24:1b:05:10:d4:68:6a:27:70:15:b9:a8:3d:
c8:f4:e8:4a:9a:c2:83:06:e9:87:3a:f1:96:a5:1e:
59:7f:53:92:e5:af:21:fe:db:5e:ee:ed:6d:1b:00:
39:ab:be:ed:e3:11:48:09:5e:b5:b5:2d:a7:f9:dd:
94:2f:3c:40:75:95:dd:74:85:bd:c8:8a:71:eb:ca:
a6:88:10:dd:3a:3a:32:71:d7:3b:8a:6a:27:96:fd:
02:ea:84:a8:f2:9f:f3:5c:51:bd:f4:0e:ae:58:03:
8f:cc:14:7f:4d:42:eb:a4:9d:fd:c0:1c:a5:62:c0:
ad:56:af:c7:d3:3b:67:6b:32:ca:c6:36:a3:34:4c:
97:b6:59:89:9f:35:18:ff:26:ea:51:b4:c6:7d:4c:
66:24:4c:02:03:f5:15:4e:9f:99:48:25:75:ba:e5:
bd:3c:98:ab:36:8d:9a:e3:b8:8b:5a:54:fb:14:1a:
bb:e8:8e:40:3c:f6:fe:bc:c5:4e:d3:77:24:46:cd:
b4:c2:b6:b1:b1:d7:f1:31:c9:b8:c9:0e:fd:4a:7c:
a8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:29:72:52:88:AA:9E:2B:A2:5A:DB:26:8B:16:2B:85:1C:D4:46:15
X509v3 Authority Key Identifier:
keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a4:30:18:66:c9:52:e6:81:39:4a:a8:0c:cf:fe:1a:78:6d:
a8:dc:88:54:33:5b:d8:5e:b8:e9:14:d0:a9:89:82:12:e2:cd:
5e:f3:46:a8:ad:47:cb:fd:f3:f4:59:94:da:2d:b5:be:66:70:
de:11:21:c5:a5:dc:56:4f:de:21:5a:af:81:a9:e3:29:5d:8c:
97:78:12:a4:7a:f4:55:33:41:27:85:53:42:d4:db:b8:46:40:
bb:50:bb:42:93:52:4d:87:f6:48:5e:d4:b7:19:85:bf:5e:33:
92:de:58:1a:6d:7b:1a:ea:e8:9f:b3:ab:92:23:4c:f9:ab:a6:
23:1a:48:ee:2e:f7:76:cc:a6:b4:42:82:0a:36:4f:00:a2:23:
c9:32:d9:a2:6c:cd:c0:97:3d:a6:38:38:46:dc:45:cb:c1:e6:
ea:ff:aa:6f:0b:fe:58:2a:65:8e:b4:4b:50:80:f3:bc:0e:23:
4e:30:08:a4:39:99:ea:d8:fa:41:9e:7a:ad:c0:9a:de:cf:bb:
bf:09:12:0f:37:e9:5f:3c:8d:79:4b:1d:3c:2e:13:1f:fe:d2:
fd:8b:03:f4:03:ce:bb:0d:c1:ef:b6:59:fe:55:96:6b:1c:96:
43:fb:bf:9e:15:a6:3b:d4:05:0e:60:5d:cf:ec:4c:01:0a:a8:
dc:01:a2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:20:21 2025 by rpki-client