Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
File: QWbAb_SeBTSAniNABbqlzKfhRqg.mft (raw, json)
Hash identifier: cxenUkAefcmGjse8bul57+gyCPmLvtIxtEHCNmK7Du4=
Subject key identifier: A1:FA:8E:21:56:C4:6A:55:F9:28:92:95:0C:BC:5E:4D:4C:CC:90:BC
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial: 01988B7D6A726163FA203A3CA7A89CD8C3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
Manifest number: 0133
Signing time: Fri 08 Aug 2025 21:01:48 +0000
Manifest this update: Fri 08 Aug 2025 21:01:48 +0000
Manifest next update: Sat 09 Aug 2025 21:01:48 +0000
Files and hashes: 1: 9W9gYghW6_iCN3HlIGpaoOJHZhk.roa (hash: /VOahTPt9Fh6RgLRa78P8pgoK/6N4p3sHujeTUCmYBc=)
2: QWbAb_SeBTSAniNABbqlzKfhRqg.crl (hash: Sc3JlL7GchHTlmgK36ycyBFxVK6K+ANC6xbF1l3L7gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:6a:72:61:63:fa:20:3a:3c:a7:a8:9c:d8:c3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
Validity
Not Before: Aug 8 21:01:48 2025 GMT
Not After : Aug 9 21:01:48 2025 GMT
Subject: CN=a1fa8e2156c46a55f92892950cbc5e4d4ccc90bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:18:f5:20:30:85:5b:ee:c4:7b:e8:a8:9b:
ea:7c:7d:eb:46:74:2f:02:9c:f6:3b:32:60:6b:ff:
fe:dd:32:27:8d:29:bf:7d:35:fc:98:b7:94:c6:ef:
b3:84:45:cd:79:62:9c:36:61:95:09:93:f2:99:a4:
26:fe:c3:34:4b:e0:b8:2b:03:7e:e9:19:85:ea:62:
67:25:1f:2b:e8:73:37:ec:ca:aa:52:df:00:35:e9:
5c:95:88:55:e9:c3:5e:5c:e4:3b:46:fe:3e:aa:02:
fa:ab:a4:30:1a:2a:5d:76:a7:3c:12:ac:4e:60:bc:
a2:e5:e9:21:53:57:6c:f3:9f:13:f3:c3:4a:84:74:
16:b8:ae:be:1a:11:2a:80:cd:53:bd:95:2e:37:1a:
98:d0:68:f1:81:89:26:fa:dd:b7:4e:60:49:8f:dd:
ba:a0:d5:9f:ec:1e:97:82:a6:66:4c:d9:ec:aa:4d:
85:bb:8b:15:ff:ba:75:22:e7:a7:13:c4:27:d5:68:
42:e0:c4:8a:5d:53:2a:ba:1b:90:85:6d:ec:fc:72:
28:04:74:5a:56:59:a6:ce:2e:ec:be:ad:cd:36:70:
c6:e1:cc:55:b5:a2:2d:e1:0a:2d:88:ef:6b:40:8a:
2f:02:88:e7:c7:44:33:f3:db:de:1c:e6:5e:8e:c9:
3a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FA:8E:21:56:C4:6A:55:F9:28:92:95:0C:BC:5E:4D:4C:CC:90:BC
X509v3 Authority Key Identifier:
keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:27:33:14:5b:3b:c2:c7:44:67:b7:db:7f:67:21:15:4a:1e:
20:a1:21:86:3d:c3:17:84:65:16:32:86:93:99:2c:b3:4a:2c:
49:6a:97:56:f6:97:44:e1:35:60:50:52:5d:fd:d0:85:ac:1f:
3e:3f:6d:1b:73:be:2d:84:4e:1d:47:df:ac:a0:34:37:ac:42:
35:a7:23:3a:af:08:bd:ee:ba:c9:64:f4:48:b8:cb:1a:6f:3a:
fe:1d:36:97:2c:b2:56:92:ca:e6:46:1f:40:f9:47:e4:5d:5c:
17:b3:72:ed:75:08:db:4d:7c:f8:97:b7:d4:4f:d2:6b:46:ea:
64:9f:2a:3b:4d:70:71:87:61:70:e8:0d:90:f6:a5:f1:eb:dd:
a4:57:e5:e2:5a:c6:10:50:d6:28:67:91:61:82:2c:56:4d:8c:
35:20:31:fc:9e:f6:7a:03:90:80:89:97:59:0a:b7:dd:a8:d1:
57:4f:0f:05:c3:86:cd:8f:d4:67:e5:1f:24:7a:74:8b:52:c3:
23:bd:0d:7b:0c:0c:f4:70:24:fc:fd:1c:7e:11:51:d9:ad:69:
ef:8d:44:16:ec:a9:0e:96:2c:0d:c2:63:87:45:b8:22:17:53:
2c:1f:93:3f:d5:e9:18:ff:c1:b0:8a:6b:4b:6b:c4:81:bb:b2:
b6:1c:b4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:45:44 2025 by rpki-client