Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
File: qwbI8iR9IgQcguVVZniB5Q-RVKs.mft (raw, json)
Hash identifier: 2SjhwYDa1LQTY2kjy5rYBtvoGcvY0QirbMY70Sf//5g=
Subject key identifier: 54:1B:CF:F9:7B:4D:B6:30:C7:47:8B:00:90:19:4E:E3:13:8B:E3:1C
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Certificate issuer: /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial: 0199608FB5F086D9BCE71ED5F3E1C7A084A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
Manifest number: 1691
Signing time: Fri 19 Sep 2025 06:00:54 +0000
Manifest this update: Fri 19 Sep 2025 06:00:54 +0000
Manifest next update: Sat 20 Sep 2025 06:00:54 +0000
Files and hashes: 1: BvjHm2eLgQsE-EhNaMGys6XuvSA.roa (hash: 3dR8rduC7LW0RozAGEED/FwSFwjDp9QTVfVqQtjf3mI=)
2: kD9wFsIkyemJmyZR5NsOicAOk6Q.roa (hash: 5lwx2dujcX+QPN65pRSgkqXQZ6JloT7CVxLAGTDZ7oM=)
3: qwbI8iR9IgQcguVVZniB5Q-RVKs.crl (hash: 5EvfLtwKVuB8XY3sc6xtF+4AV9mzECz76BEqCrJjnjw=)
4: y-vKKwMZ-Jm1IyyKOX5h3UFOkJs.roa (hash: TREazVziiS/zSuZ98yUE1lCBdvTaOvsRUmgllHq3JrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:8f:b5:f0:86:d9:bc:e7:1e:d5:f3:e1:c7:a0:84:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
Validity
Not Before: Sep 19 06:00:54 2025 GMT
Not After : Sep 20 06:00:54 2025 GMT
Subject: CN=541bcff97b4db630c7478b0090194ee3138be31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a2:b2:2b:76:c6:3c:4d:2e:74:e6:4b:56:42:
50:5a:08:16:8f:02:39:e7:98:a2:36:4b:5f:3d:b8:
96:1d:fa:64:a5:1d:29:82:a0:aa:4a:af:28:7d:51:
77:c8:01:30:e2:71:58:15:37:7a:4e:c5:6e:c0:81:
34:3a:df:95:08:23:a8:9d:c0:5d:1a:b9:5c:4e:39:
c5:4b:4c:e5:dc:d3:6b:8b:95:65:75:16:03:b4:ee:
29:de:9a:2e:9a:4f:a2:0c:50:ef:8f:fb:47:e2:bb:
40:d2:1f:6a:fa:c0:2f:59:46:62:52:85:6e:dc:e1:
33:33:ab:7d:32:e8:63:ea:94:3b:65:44:33:3c:28:
36:17:01:bc:45:47:d0:40:2a:2e:ee:83:d7:96:c7:
3c:28:c2:bf:38:ea:b6:8e:32:1f:48:0e:cc:ee:96:
fd:a0:14:cc:9e:f1:c2:c2:13:87:6d:76:54:84:65:
75:42:7c:20:2a:56:98:16:66:b1:0b:d1:f9:06:12:
53:5d:b5:0c:c6:99:02:c5:33:ed:85:83:af:94:0c:
78:c5:f4:f1:c1:82:8d:5e:9b:e6:34:67:00:36:d7:
e6:13:ce:b9:90:4c:b8:05:db:cc:bf:e3:1f:33:db:
9a:d3:0a:14:ec:73:88:25:6b:78:09:e7:23:b4:36:
f0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1B:CF:F9:7B:4D:B6:30:C7:47:8B:00:90:19:4E:E3:13:8B:E3:1C
X509v3 Authority Key Identifier:
keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:54:f3:16:68:6a:20:b6:e5:22:1f:df:d9:3f:2c:06:01:c0:
4a:fb:56:83:21:6b:02:ad:33:4e:a4:2a:0b:df:5e:4f:a7:a8:
41:b4:63:20:29:27:29:2e:7e:27:a2:70:01:71:61:41:24:8a:
99:05:8b:87:b3:c8:7c:c5:08:72:82:a3:ae:d4:10:7f:c7:5b:
be:61:a7:5a:87:9f:cb:9e:8b:b6:17:f4:b9:92:f6:a6:35:22:
50:23:0d:0c:88:b1:71:36:13:b6:1b:fa:d7:42:88:9b:60:db:
0d:0b:75:52:50:03:24:f4:5b:7a:ee:2e:3d:c7:23:fa:79:96:
a5:82:3a:0f:e2:88:45:0e:86:8e:46:7d:05:7d:c2:a6:c4:15:
71:3a:99:7f:5d:4f:da:65:f7:c8:ce:1e:b7:59:18:1e:c0:02:
80:7a:58:e3:6d:6b:97:04:60:96:d1:4b:26:0e:24:6a:4a:46:
7c:a4:1d:f8:c8:b1:86:54:b9:ef:12:a1:1b:7a:d6:64:c4:1b:
e3:3c:12:84:6a:18:b5:62:66:8e:4d:c3:1a:75:2e:f9:7e:cf:
c7:c9:30:36:33:d3:34:6d:c8:c8:48:c5:6c:64:aa:ca:d6:24:
f4:a2:13:d9:24:39:90:48:ba:51:a7:9b:a0:b0:0a:51:6e:39:
5b:f7:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:58:17 2025 by rpki-client