Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
File: QiW1cPRt5cbosrZO0JCtE4XatzE.mft (raw, json)
Hash identifier: bZ8mLq4OFjeqmKB0niKUGxkcDCjklJBKGO4pIY6GU/k=
Subject key identifier: A5:A9:86:E2:A9:33:F0:C8:89:4A:B4:E7:DE:EB:7D:46:53:46:35:E9
Authority key identifier: 42:25:B5:70:F4:6D:E5:C6:E8:B2:B6:4E:D0:90:AD:13:85:DA:B7:31
Certificate issuer: /CN=4225b570f46de5c6e8b2b64ed090ad1385dab731
Certificate serial: 019916F6316572DA4483A094A55896E02F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
Manifest number: 166B
Signing time: Thu 04 Sep 2025 23:00:57 +0000
Manifest this update: Thu 04 Sep 2025 23:00:57 +0000
Manifest next update: Fri 05 Sep 2025 23:00:57 +0000
Files and hashes: 1: Ad__4Mw9qH40aKjCCd6U7wn1LE8.roa (hash: XmUspE3wSTnFZCF/0+RPTjtSL/Xtm1GMKSxL+nI/8po=)
2: QiW1cPRt5cbosrZO0JCtE4XatzE.crl (hash: nai8aiTkI1XVwv2BHXVnk1aoUveXuktUbYTKeumPPA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:31:65:72:da:44:83:a0:94:a5:58:96:e0:2f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4225b570f46de5c6e8b2b64ed090ad1385dab731
Validity
Not Before: Sep 4 23:00:57 2025 GMT
Not After : Sep 5 23:00:57 2025 GMT
Subject: CN=a5a986e2a933f0c8894ab4e7deeb7d46534635e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:83:c1:37:a8:64:d5:c7:5b:d4:19:ad:2e:
69:f6:a5:6a:f0:7e:77:94:7f:10:35:0a:a3:40:01:
b7:b0:2c:b2:5b:60:8b:85:51:39:50:b2:f3:ab:b1:
a2:88:44:b3:60:ce:aa:81:47:19:f9:e0:57:6e:b1:
4e:ae:7a:22:3c:79:be:24:81:7f:47:21:63:a6:21:
e6:cf:f7:75:93:46:6f:f8:63:ee:c8:01:12:65:c2:
de:7e:9f:e8:69:5d:83:16:89:34:11:87:b3:13:9d:
b2:f6:11:ad:03:88:45:5c:8b:8f:c7:79:7f:5a:d5:
6b:39:71:23:2a:05:cc:33:36:50:11:f7:3f:84:89:
12:86:3b:4f:b5:6f:4f:4a:7e:b1:10:e4:f4:5f:c2:
0c:f6:fd:1a:a2:cf:f7:d7:4d:8c:a7:55:31:e9:8b:
1d:01:94:43:6f:04:2d:03:ae:30:d4:e0:5e:30:08:
c8:62:cf:04:46:27:17:c0:e6:46:17:89:cb:e9:0d:
e2:7a:df:bb:74:8b:4e:89:68:21:bb:e3:f5:1b:41:
dd:80:c6:da:55:e4:26:ec:18:5b:0a:98:07:f6:b7:
9a:3a:96:a6:c7:3b:c5:28:d2:9d:60:71:48:fe:56:
54:b1:0b:a1:f4:e8:80:d6:64:4a:cc:78:28:52:6c:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A9:86:E2:A9:33:F0:C8:89:4A:B4:E7:DE:EB:7D:46:53:46:35:E9
X509v3 Authority Key Identifier:
keyid:42:25:B5:70:F4:6D:E5:C6:E8:B2:B6:4E:D0:90:AD:13:85:DA:B7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1a:03:2a:70:b0:04:65:d5:1b:04:f5:d3:75:2c:7a:ea:f8:
e6:b2:f8:24:0e:7b:3f:8f:97:0a:bd:2d:6b:c8:ee:c9:9b:09:
1e:93:28:20:fe:24:34:e4:e1:2b:b8:b7:b8:91:72:26:07:6d:
75:c5:c7:b1:0c:74:b5:2e:82:1c:d7:69:6e:89:41:79:20:84:
c6:eb:0e:b1:30:b5:1b:69:a1:81:44:b3:06:a4:e5:ca:61:ed:
3d:10:71:87:92:22:3f:be:0e:ff:fc:82:09:4b:7a:d2:2e:a3:
fa:ea:86:0a:b5:19:34:06:31:30:75:7c:0c:e1:a2:ab:f7:4a:
d0:6b:23:91:bf:32:f2:9d:89:dc:07:03:09:c5:b5:69:bf:68:
00:71:e9:5f:14:e2:f8:3b:45:c7:52:30:56:6f:a7:3b:92:c9:
69:5d:e0:91:40:50:54:e0:57:1f:38:fe:ad:13:90:87:69:6b:
b9:6f:f0:6b:3d:06:08:fd:ec:af:13:b8:2e:4a:eb:b2:44:ee:
03:8d:9a:5d:56:1b:1a:53:99:81:67:12:1c:8d:13:94:fe:a6:
d2:5a:fa:21:16:46:87:56:72:f8:ca:aa:00:17:b6:a2:af:b6:
d4:79:8a:02:1c:24:86:a4:c8:83:da:78:7c:eb:ab:8d:0d:c1:
0b:30:1e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:37:32 2025 by rpki-client