Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
File: QWbAb_SeBTSAniNABbqlzKfhRqg.mft (raw, json)
Hash identifier: 0ARPdBxobCh/eEd2C3fq21FlOx8Rk87MSpebhDFtuOk=
Subject key identifier: 5B:D5:02:8D:94:C5:FA:A3:74:EA:11:02:75:D4:E9:A3:E7:4D:F1:8F
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial: 01976F99C01A084B6C123F27F03CB2F54F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
Manifest number: A0
Signing time: Sat 14 Jun 2025 18:00:36 +0000
Manifest this update: Sat 14 Jun 2025 18:00:36 +0000
Manifest next update: Sun 15 Jun 2025 18:00:36 +0000
Files and hashes: 1: 9W9gYghW6_iCN3HlIGpaoOJHZhk.roa (hash: /VOahTPt9Fh6RgLRa78P8pgoK/6N4p3sHujeTUCmYBc=)
2: QWbAb_SeBTSAniNABbqlzKfhRqg.crl (hash: X4q3UkzOotzqKWPGDk1elkwF9qLUT27RuKF06X9FFnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:c0:1a:08:4b:6c:12:3f:27:f0:3c:b2:f5:4f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
Validity
Not Before: Jun 14 18:00:36 2025 GMT
Not After : Jun 15 18:00:36 2025 GMT
Subject: CN=5bd5028d94c5faa374ea110275d4e9a3e74df18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:32:98:42:94:b7:ef:4c:03:91:6d:46:7c:3e:
1c:35:01:60:9e:73:a8:0a:c3:85:b4:2e:03:ae:d1:
25:1d:21:b6:2c:46:25:e6:0c:52:75:90:06:57:51:
3e:3a:4f:b4:fa:42:a5:87:ca:ef:ee:eb:32:f0:ed:
0f:c1:f2:76:47:fd:4b:5c:33:07:7e:6e:a6:7f:e3:
47:62:8f:30:4b:21:a0:d4:6b:1e:47:f6:0e:ad:e0:
ce:e4:1f:63:33:5b:4e:51:90:10:cd:94:32:9b:65:
4b:cb:b9:d5:b5:75:65:4e:fb:05:21:51:1c:7c:47:
da:00:a3:1e:f0:09:fe:be:6c:c5:8d:e8:81:c5:9e:
31:30:b3:6f:dc:a5:da:b2:85:86:f4:11:86:3e:1f:
ef:d5:83:1a:85:6d:84:99:7d:01:6e:54:fc:1c:e4:
3d:c1:d0:53:89:58:3a:2c:4d:bd:2b:0d:48:8f:3d:
06:f3:d0:79:a7:f9:aa:c4:d6:ae:2c:38:3a:f4:8e:
65:20:f6:0e:8f:34:9c:db:e7:51:a0:2f:8d:11:96:
01:7e:1e:d7:f0:3f:60:3d:60:ab:0b:e1:58:78:08:
da:df:69:70:ef:27:3d:05:a2:9f:45:cd:03:3a:00:
c8:0b:cf:a2:df:11:72:1e:d0:e6:ee:d3:29:e4:46:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D5:02:8D:94:C5:FA:A3:74:EA:11:02:75:D4:E9:A3:E7:4D:F1:8F
X509v3 Authority Key Identifier:
keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f3:18:43:c5:cf:86:a4:5e:45:2a:b7:e2:1f:8c:a6:c0:6a:
d4:44:f6:e7:11:7d:89:37:1a:d0:d1:69:9a:d5:97:79:dd:ab:
4e:fd:3d:24:46:67:d0:43:03:96:16:94:95:e8:96:59:cb:e1:
4c:e9:b5:e7:fd:a0:4e:22:b7:f1:b4:cd:43:45:9f:be:4b:71:
90:cc:41:50:e4:58:7c:75:0a:01:34:2b:bc:7c:1c:25:d0:01:
64:a9:2d:24:a1:c2:1c:b5:9c:ad:27:02:a9:c3:22:4e:43:6b:
ba:6e:bc:07:d9:12:30:19:c2:0a:ae:10:cf:28:55:fc:e4:03:
8d:1a:7e:ac:03:ec:e1:54:dc:2d:88:3d:d0:ff:f8:ca:ff:d2:
dc:67:43:83:bf:58:bb:fc:e5:da:bb:ee:4e:fb:46:71:ed:70:
72:f0:65:6e:e2:ee:4e:c6:1c:d3:76:b2:f9:0a:b9:1d:e4:2f:
c9:23:22:61:d7:b1:9b:56:92:e9:d6:11:b8:1f:c3:1b:f7:28:
aa:a2:ea:e9:f7:5e:5b:98:f3:d1:df:0d:18:ea:ea:ec:67:b3:
45:8d:2b:dc:16:43:b5:0a:bd:e1:7d:a9:6c:d3:80:ce:1c:c9:
d3:8d:b0:7c:f9:49:35:53:79:b8:96:02:89:96:f4:72:5b:58:
3a:99:7c:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmcAaCEtsEj8n8Dyy9U9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNjZjMDZmZjQ5ZTA1MzQ4MDllMjM0MDA1YmFhNWNjYTdl
MTQ2YTgwHhcNMjUwNjE0MTgwMDM2WhcNMjUwNjE1MTgwMDM2WjAzMTEwLwYDVQQD
Eyg1YmQ1MDI4ZDk0YzVmYWEzNzRlYTExMDI3NWQ0ZTlhM2U3NGRmMThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzKYQpS370wDkW1GfD4cNQFgnnOo
CsOFtC4DrtElHSG2LEYl5gxSdZAGV1E+Ok+0+kKlh8rv7usy8O0PwfJ2R/1LXDMH
fm6mf+NHYo8wSyGg1GseR/YOreDO5B9jM1tOUZAQzZQym2VLy7nVtXVlTvsFIVEc
fEfaAKMe8An+vmzFjeiBxZ4xMLNv3KXasoWG9BGGPh/v1YMahW2EmX0BblT8HOQ9
wdBTiVg6LE29Kw1Ijz0G89B5p/mqxNauLDg69I5lIPYOjzSc2+dRoC+NEZYBfh7X
8D9gPWCrC+FYeAja32lw7yc9BaKfRc0DOgDIC8+i3xFyHtDm7tMp5EYwOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvVAo2UxfqjdOoRAnXU6aPnTfGPMB8GA1UdIwQY
MBaAFEFmwG/0ngU0gJ4jQAW6pcyn4UaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUt
ODgyNmU4NzdkMTQzLzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUtODgyNmU4NzdkMTQz
LzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/MYQ8XP
hqReRSq34h+MpsBq1ET25xF9iTca0NFpmtWXed2rTv09JEZn0EMDlhaUleiWWcvh
TOm15/2gTiK38bTNQ0WfvktxkMxBUORYfHUKATQrvHwcJdABZKktJKHCHLWcrScC
qcMiTkNrum68B9kSMBnCCq4QzyhV/OQDjRp+rAPs4VTcLYg90P/4yv/S3GdDg79Y
u/zl2rvuTvtGce1wcvBlbuLuTsYc03ay+Qq5HeQvySMiYdexm1aS6dYRuB/DG/co
qqLq6fdeW5jz0d8NGOrq7GezRY0r3BZDtQq94X2pbNOAzhzJ042wfPlJNVN5uJYC
iZb0cltYOpl8TQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:12:37 2025 by rpki-client