Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
File: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft (raw, json)
Hash identifier: Q9ujYAd7KcQRG1sZdE+o76cMrJzvKUcAKd7P3TME7Qo=
Subject key identifier: 3E:3A:4A:1E:A3:C1:97:3B:02:8B:83:DE:46:5C:53:40:FC:F7:F1:47
Authority key identifier: AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
Certificate issuer: /CN=ab069058b4d367612be4807372b5e593e0347766
Certificate serial: 01987CAE220CCD669BF4AD1670552F6B1B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 00:00:43 +0000
Manifest this update: Wed 06 Aug 2025 00:00:43 +0000
Manifest next update: Thu 07 Aug 2025 00:00:43 +0000
Files and hashes: 1: Ttl-1h1-V-nLfHGl50XIPqBaOuw.roa (hash: 4ysW7rFsdP6sSTiTROvgg5H3SFvIB36uqjjGielYpHo=)
2: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl (hash: BesBwzTyKze+gE+SHOrM3Mui4mY+x8xjY1gMno8bics=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:22:0c:cd:66:9b:f4:ad:16:70:55:2f:6b:1b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab069058b4d367612be4807372b5e593e0347766
Validity
Not Before: Aug 6 00:00:43 2025 GMT
Not After : Aug 7 00:00:43 2025 GMT
Subject: CN=3e3a4a1ea3c1973b028b83de465c5340fcf7f147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:c7:b1:47:75:8e:55:8b:da:60:1e:d8:e2:
fa:5d:58:bd:43:b1:4f:f5:ab:23:83:20:f4:ab:26:
d6:01:09:18:a9:36:61:90:f4:1c:05:92:5c:72:46:
a0:04:9b:c5:52:9e:14:a6:04:82:29:71:50:17:60:
1d:2a:4b:5c:d2:88:83:65:68:2e:20:37:bf:ac:33:
4a:67:97:22:6c:7b:c1:7d:4a:be:ad:e1:19:58:d4:
ee:4b:0e:24:a3:ae:09:01:ba:b0:c8:13:3e:25:6b:
b2:a9:0d:db:87:94:f2:4b:61:55:4e:8b:c9:1f:10:
79:d7:e0:77:1b:7f:3f:56:cd:c3:ee:ad:78:90:2a:
5c:ab:9c:70:d0:a3:93:af:71:54:6d:60:8d:ec:d1:
58:31:72:b3:c4:70:66:d4:6a:e0:90:68:de:b9:01:
47:5e:30:5f:8b:b3:ef:13:71:71:0a:cc:28:9d:3a:
25:d6:91:d0:fd:a4:74:ff:e4:34:3f:60:68:d1:c3:
0c:7d:ff:b9:8f:d9:d7:0c:96:86:e1:4c:42:1f:42:
b4:7a:6b:07:2a:84:ff:fd:d4:4e:9d:ec:3d:d4:15:
41:47:82:af:84:f4:94:3f:4b:fd:5e:96:f4:a9:e1:
ee:75:a7:27:a1:aa:f6:ca:aa:32:7d:d6:31:c6:80:
48:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3A:4A:1E:A3:C1:97:3B:02:8B:83:DE:46:5C:53:40:FC:F7:F1:47
X509v3 Authority Key Identifier:
keyid:AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a6:a8:b8:fb:88:20:19:65:32:6a:0f:8a:94:5b:91:45:aa:
de:ce:3e:fd:27:d8:ae:3c:e7:d7:fc:bc:18:20:c7:62:a4:c6:
39:79:ae:a6:5f:6a:7e:df:d2:ab:2d:a3:bf:20:a7:c8:d8:e1:
8b:1e:a3:3f:1d:55:37:dc:d6:24:20:0f:13:92:4f:76:60:3c:
eb:3f:15:d2:19:37:fa:77:df:1d:b1:79:2c:3d:05:99:39:eb:
c2:dd:72:e4:da:8d:4c:1b:eb:bb:82:b6:96:52:cc:c9:db:ff:
88:f9:1a:da:9a:c1:60:e7:0e:6d:8e:ea:65:f2:40:a3:4f:87:
72:df:38:31:67:d9:9a:92:78:32:d7:05:f4:8a:9a:11:90:4d:
da:f0:1c:39:a7:d5:ef:dc:97:48:ad:2c:bb:68:38:70:9f:e6:
b5:32:1e:e1:90:35:23:a2:86:12:72:60:60:64:1a:c0:94:89:
b9:31:3f:25:36:80:24:91:ba:ba:ab:3a:11:59:7f:24:77:5f:
9d:a4:f0:ab:e4:a9:ce:f9:f9:53:f5:88:91:58:04:36:2f:ad:
35:22:09:a1:ea:8c:1b:82:35:74:43:0f:19:00:e8:5b:ac:29:
46:3e:a5:e7:87:14:5f:9a:22:1e:f0:12:6d:50:46:62:9e:fd:
0d:23:3b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:22:36 2025 by rpki-client