Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
File: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft (raw, json)
Hash identifier: eJwDHPdKaHSnuH5hQAJYEFjZnQ/cT842yltiGUyi6+A=
Subject key identifier: 40:23:66:D2:10:B0:F7:71:18:C8:3C:A6:23:48:CB:6B:D3:AC:63:49
Authority key identifier: AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
Certificate issuer: /CN=ab069058b4d367612be4807372b5e593e0347766
Certificate serial: 0199380265E166D183440709ABEF784424FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
Manifest number: 167E
Signing time: Thu 11 Sep 2025 09:01:45 +0000
Manifest this update: Thu 11 Sep 2025 09:01:45 +0000
Manifest next update: Fri 12 Sep 2025 09:01:45 +0000
Files and hashes: 1: Ttl-1h1-V-nLfHGl50XIPqBaOuw.roa (hash: 4ysW7rFsdP6sSTiTROvgg5H3SFvIB36uqjjGielYpHo=)
2: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl (hash: iVX83/ywm3ch2vO24dmWiekb2LA72zLTazPifyCd8jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:65:e1:66:d1:83:44:07:09:ab:ef:78:44:24:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab069058b4d367612be4807372b5e593e0347766
Validity
Not Before: Sep 11 09:01:45 2025 GMT
Not After : Sep 12 09:01:45 2025 GMT
Subject: CN=402366d210b0f77118c83ca62348cb6bd3ac6349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:3a:10:52:54:c1:4c:51:5e:29:5e:9e:25:
fe:57:98:9d:9e:ff:f8:56:e3:16:5d:91:83:d9:43:
e8:b5:ee:1e:b7:0f:b5:1a:c0:8a:53:d9:a8:16:c1:
76:18:22:85:0b:6f:24:15:d4:50:61:c2:88:42:39:
ab:79:3a:ad:c0:9a:1b:af:f5:9b:2e:f0:c3:2f:d1:
e5:7c:d8:71:76:23:74:85:4a:67:d2:45:f1:67:df:
f7:55:48:24:bd:79:13:06:90:0a:64:e0:1b:2d:8b:
47:bd:8f:c5:ef:81:37:ee:63:28:96:53:61:a2:95:
ce:f1:28:06:00:7d:69:53:5d:41:6b:6f:f2:ba:6f:
b4:50:4b:af:59:66:21:72:8f:70:b9:72:fe:90:11:
89:78:2e:b0:13:26:94:b5:aa:8f:f6:ae:4a:c1:5d:
0c:b1:cc:0b:f0:a9:a9:61:af:c8:fd:73:19:11:fc:
de:e4:a9:03:9b:b0:f5:75:80:11:83:a1:d8:ab:ca:
7d:c8:71:ec:e2:7c:40:4c:1e:6c:04:0c:c6:db:85:
d7:0a:d8:50:bf:72:97:af:4d:0a:8a:ba:f8:ec:8d:
49:c2:c2:d5:0f:a2:b5:00:c0:16:6f:3f:f2:0d:db:
cc:d0:57:8f:54:36:2c:fe:1b:41:5c:da:bb:b1:1e:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:23:66:D2:10:B0:F7:71:18:C8:3C:A6:23:48:CB:6B:D3:AC:63:49
X509v3 Authority Key Identifier:
keyid:AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:34:f2:b7:91:55:2f:2d:b1:ec:39:54:60:46:bd:7c:75:53:
54:ec:9a:a2:d9:96:d6:35:bf:79:11:0f:0b:1c:26:53:b6:a2:
f5:1f:3e:31:1d:05:6f:54:e1:2e:0f:af:b4:2b:c4:6c:7e:ef:
2a:3b:57:0c:f1:98:8a:78:67:39:77:03:2d:68:c5:fb:87:1e:
7e:13:7f:32:35:3a:35:2d:32:83:57:0e:ce:47:53:26:a5:2e:
4a:45:6c:41:3c:d5:da:7a:c3:b7:63:13:b8:7f:70:56:c1:58:
46:f3:62:6b:51:05:d9:78:0d:0b:7d:34:cd:9d:72:d2:e3:ac:
ac:47:69:77:70:66:d2:91:3a:72:f8:2a:b0:1b:7c:1e:9d:00:
4c:23:63:b1:7b:61:03:dd:a0:75:b4:6a:75:ac:83:21:a7:15:
1b:9f:5d:db:ba:cf:12:24:44:b6:56:e8:1e:80:1b:78:7b:65:
08:05:5e:83:c7:9c:a8:65:4d:c1:b4:89:1d:b6:96:d6:97:b0:
6f:5f:e0:ce:fa:8d:66:cb:cc:5e:e7:36:3a:5a:af:93:ff:cf:
ea:02:47:56:57:d5:55:15:e9:95:be:b6:25:e6:ee:8f:d8:17:
cd:0d:1f:e9:73:fd:9a:03:ce:03:5b:88:b3:5a:f1:86:cb:6e:
91:d3:2a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:49:11 2025 by rpki-client