Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
File: QWbAb_SeBTSAniNABbqlzKfhRqg.mft (raw, json)
Hash identifier: FJSZqpW18WNBatnYroMwCMAnvGDGTH+B5siKZNQvMqU=
Subject key identifier: 19:5C:07:87:C5:FF:7F:BE:83:5A:88:4F:59:5D:77:8D:DD:4C:DF:06
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial: 019A515155FEB5482831AADEBA002137AC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
Manifest number: 021E
Signing time: Wed 05 Nov 2025 00:01:16 +0000
Manifest this update: Wed 05 Nov 2025 00:01:16 +0000
Manifest next update: Thu 06 Nov 2025 00:01:16 +0000
Files and hashes: 1: 9W9gYghW6_iCN3HlIGpaoOJHZhk.roa (hash: /VOahTPt9Fh6RgLRa78P8pgoK/6N4p3sHujeTUCmYBc=)
2: QWbAb_SeBTSAniNABbqlzKfhRqg.crl (hash: 3QIV4LoFDUUMm94xoFc4hnVvc4p2qhwZnZYONj5p2oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:55:fe:b5:48:28:31:aa:de:ba:00:21:37:ac:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
Validity
Not Before: Nov 5 00:01:16 2025 GMT
Not After : Nov 6 00:01:16 2025 GMT
Subject: CN=195c0787c5ff7fbe835a884f595d778ddd4cdf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:2e:96:97:ef:24:7d:53:d4:54:00:47:5e:
f6:36:ab:b6:5c:7b:a0:a4:3c:c6:19:e6:49:36:12:
13:9a:5e:c7:6a:7b:34:e6:89:3a:3b:70:02:8e:93:
7f:1b:09:e9:52:4d:52:7b:5f:6f:55:c6:15:8f:29:
07:71:8f:a7:d2:3d:76:79:91:14:22:7e:17:51:54:
de:c5:97:ce:e0:08:98:fe:5c:ff:dd:77:29:08:8a:
96:73:b5:a7:61:e4:a2:46:0b:cb:c1:ab:75:08:35:
eb:57:40:51:93:8c:37:5d:81:f4:55:56:38:c1:3a:
ba:51:ce:20:1d:7d:c2:c7:6b:01:89:ab:5f:20:87:
53:3d:f3:c2:26:44:31:cc:23:94:02:ba:cb:a6:a7:
75:85:0f:ec:37:61:54:3d:59:f9:a6:50:a3:cf:07:
87:83:bd:6e:81:7d:fc:4f:64:07:8f:d9:ea:6d:0f:
d9:85:87:69:f5:c8:6e:f0:e2:d5:da:64:e3:b1:e9:
51:8b:ac:24:8f:d8:40:4c:a6:a9:26:60:e3:99:b2:
1f:ea:24:a6:2e:53:93:ae:fe:ab:41:eb:72:4e:f7:
ed:e0:b6:2b:f2:5d:63:33:73:9d:2d:12:f8:74:13:
59:4f:3f:70:68:5f:43:98:de:16:b7:d7:a3:2e:7f:
4f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5C:07:87:C5:FF:7F:BE:83:5A:88:4F:59:5D:77:8D:DD:4C:DF:06
X509v3 Authority Key Identifier:
keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:89:3c:cb:a7:16:09:b8:9f:b8:d5:ca:f7:21:d7:bc:dd:74:
2e:60:1c:0f:cf:ad:e6:3a:93:82:66:6c:4d:73:03:ce:5f:09:
46:4e:77:2c:dd:d5:3a:10:c3:ab:3e:e0:d9:a2:ad:46:c0:92:
e8:8c:b0:ab:1a:0d:fd:ed:2f:3a:af:5a:b7:50:25:c7:ee:dc:
36:96:cb:80:76:2b:b5:5f:f8:8d:be:31:bf:60:76:0d:dd:72:
db:81:d4:f1:91:da:8e:13:17:9e:0f:aa:2c:70:e3:49:11:44:
c5:20:fd:bb:2e:e3:8d:02:15:73:65:ba:8f:59:13:24:36:9f:
5b:ea:40:c4:3a:77:92:a4:18:34:e2:46:68:1b:62:02:24:aa:
1c:a3:1f:d8:31:fb:fb:46:27:5e:49:9d:95:99:48:cd:12:88:
26:00:30:2c:08:c3:ef:2c:c0:30:a8:32:10:f6:b9:ad:b9:ed:
ca:a1:78:09:bf:72:41:45:f1:3d:5f:b6:d9:55:de:6c:44:d5:
ca:eb:16:6f:3a:8e:ba:6a:c0:35:4d:7d:ab:59:26:65:28:d0:
9e:d4:77:cf:00:10:f5:38:20:7c:18:ee:22:71:66:92:70:eb:
52:c2:78:87:9a:22:82:dc:93:cd:19:71:3a:5d:59:de:9a:3d:
e0:41:c6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:08:22 2025 by rpki-client