Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
File: QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft (raw, json)
Hash identifier: wV92gVoka6Fo2rrGaMG/GbVAnCfRzP/yIVKJgQXQW+c=
Subject key identifier: 43:F1:5E:24:BD:9D:BF:45:76:28:D2:CF:C8:70:58:51:67:E0:AC:EC
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial: 019935028019E19F4F478B24E82976DE1470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 19:03:00 +0000
Manifest this update: Wed 10 Sep 2025 19:03:00 +0000
Manifest next update: Thu 11 Sep 2025 19:03:00 +0000
Files and hashes: 1: 1OkV1FOSt0CIRzcv_xhQZDIhaCY.roa (hash: 0nS1ugbBt4Oiv/4rCAPHlWm5w4EZo3UZ1Why6gpAxu4=)
2: KmelkdSsmbJtVWU94thK7d4v5RE.roa (hash: oIEVJa5VewYKMBXTZDUCkwziB09TzVnzHNBtgzRneDA=)
3: QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl (hash: s2zzXbNJZlp/b3UVrYrtGmrvpG4pHoGj7ENdALNZsVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:02:80:19:e1:9f:4f:47:8b:24:e8:29:76:de:14:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Validity
Not Before: Sep 10 19:03:00 2025 GMT
Not After : Sep 11 19:03:00 2025 GMT
Subject: CN=43f15e24bd9dbf457628d2cfc870585167e0acec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:9d:e5:f9:2d:a2:32:7a:bf:12:fb:5e:b3:
41:f8:b4:9b:9d:4d:fb:34:ea:ca:df:e7:52:3b:89:
f6:68:44:64:89:13:18:20:c0:00:f6:5d:68:ab:0b:
3a:8e:e7:e8:95:e5:2f:21:99:b2:c0:a7:a8:4a:45:
4d:76:98:af:6c:08:b4:f6:3b:6f:5a:a3:c9:f3:22:
a9:8d:b2:98:de:c3:fe:25:b8:e6:fd:10:03:41:ba:
ab:eb:9a:bc:0b:93:fb:c2:e0:19:65:e7:8f:4b:56:
2a:c7:b1:66:23:c3:78:1b:db:bf:42:af:3b:82:54:
b0:42:cf:bf:a0:33:c1:de:ac:65:ca:a3:13:24:54:
0c:4e:e2:e6:16:40:0d:52:cb:0e:67:31:ee:c9:24:
c2:01:98:5b:0e:0d:8e:9d:be:db:07:7f:13:15:6c:
e1:9d:a8:18:92:8d:30:2f:57:9d:22:65:66:cd:ea:
bc:30:bf:ac:f7:4c:d3:cc:e2:bc:8f:ef:2e:49:28:
2b:14:75:11:01:0d:da:00:89:b0:46:f9:0b:ae:8e:
d4:1e:05:40:24:3b:85:3e:8c:1e:22:d7:a2:6c:98:
6d:6a:25:c1:83:1f:03:c1:b0:72:6b:81:da:e6:05:
f0:a3:30:6b:48:1e:25:6b:88:e6:71:a7:ef:9e:50:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F1:5E:24:BD:9D:BF:45:76:28:D2:CF:C8:70:58:51:67:E0:AC:EC
X509v3 Authority Key Identifier:
keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4b:33:d6:ba:f7:f8:aa:71:ae:d2:81:80:81:c2:55:72:9d:
5a:ed:0f:14:ef:e6:86:32:dd:6b:d5:62:14:cc:65:a9:cd:e5:
95:17:85:ac:64:fb:51:c7:e8:fd:ef:38:97:02:6e:cc:90:96:
7b:65:77:32:91:28:29:c4:ea:c4:56:e5:2c:1c:57:fc:55:38:
8a:6f:e8:64:96:47:a3:8f:f8:c2:91:39:9a:bc:49:c9:98:fe:
a3:08:dd:eb:68:80:04:42:cc:90:06:b3:94:69:93:a1:db:57:
b8:73:e0:7b:99:72:5d:46:82:40:05:0a:ec:af:89:0e:11:4c:
67:55:9f:09:75:13:02:28:fd:66:68:3a:fe:2f:a7:69:56:fd:
5d:99:f8:ba:7c:84:b5:c2:cd:68:cc:8b:f1:95:7f:89:be:74:
93:2f:99:35:a0:d0:ba:7b:77:ea:fe:4f:c6:37:5a:78:7c:1b:
d5:2a:8e:e6:1d:51:b4:66:e1:25:90:01:64:58:6c:df:93:4e:
6a:1b:14:18:14:55:44:18:2f:44:43:64:c4:de:f8:7e:47:e1:
64:b0:c4:98:98:f4:00:c9:be:5e:8b:cd:48:5c:92:51:3c:49:
c8:3c:a3:58:96:38:ca:54:39:1b:e5:77:68:fb:96:f4:d4:61:
88:84:aa:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:15:05 2025 by rpki-client