Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
File: qw8tGCnW-40kf6TpZY6hfwbACwU.mft (raw, json)
Hash identifier: vk1fnWzYEHGyd+D0syEsygLeEt7wIGfVMAhF7T7zF60=
Subject key identifier: 3C:A3:04:60:B4:4B:BA:CD:67:9E:52:C6:3D:1A:8F:D4:71:F2:4D:21
Authority key identifier: AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05
Certificate issuer: /CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
Certificate serial: 0198D660C7B38F580D81CFC27131902D7585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
Manifest number: 04DF
Signing time: Sat 23 Aug 2025 10:02:03 +0000
Manifest this update: Sat 23 Aug 2025 10:02:03 +0000
Manifest next update: Sun 24 Aug 2025 10:02:03 +0000
Files and hashes: 1: OUpskfGQwP1azsM6n4Ec-VCqNso.roa (hash: +d2WLz7J+vMS5D/Rs6fGhF8erps5E2C6DQvq3JVrWbY=)
2: qw8tGCnW-40kf6TpZY6hfwbACwU.crl (hash: /pQ9rhHVuwZAOooZ0JM8L/6FuzSlr8OWGkVTcU4cAYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c7:b3:8f:58:0d:81:cf:c2:71:31:90:2d:75:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
Validity
Not Before: Aug 23 10:02:03 2025 GMT
Not After : Aug 24 10:02:03 2025 GMT
Subject: CN=3ca30460b44bbacd679e52c63d1a8fd471f24d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:d5:08:00:04:50:b5:0c:d8:89:a9:ff:ab:
cb:c2:8b:2f:02:ef:9e:dd:c6:21:6c:00:70:35:0c:
1c:69:da:86:fb:b1:98:03:e7:9f:7c:b0:58:44:71:
f8:ae:be:5d:90:db:84:de:58:3d:84:a8:4c:0c:79:
d5:26:bc:3c:be:07:0a:0e:8d:1f:0a:c7:b2:1c:76:
e2:a2:14:af:d5:14:f0:96:a5:25:99:40:40:99:a2:
03:90:8d:9f:3d:e8:1b:fe:f0:09:8e:37:f0:98:c3:
a9:de:3e:6a:5d:59:ba:04:77:33:1d:3a:23:10:da:
b4:ea:ea:16:3c:72:3b:c2:cc:fc:49:dd:29:62:35:
2b:8c:3c:5e:ff:61:41:01:13:0a:5f:72:5f:ac:a9:
6e:93:64:0d:74:0c:ac:e9:22:a2:1b:f1:f8:f1:87:
c2:c0:7b:a3:a2:35:ed:2e:e7:9f:24:ae:63:7d:a1:
f7:0b:ba:1c:18:ef:d5:e4:cd:80:1d:29:62:a3:a4:
54:e8:92:d2:f8:b5:df:c0:fc:41:89:bb:b1:65:f0:
a7:c0:c2:98:e8:75:07:01:68:64:58:f1:26:c6:e7:
b9:14:b6:3f:e6:16:1a:39:50:45:73:7c:4b:f9:6d:
4a:7a:fa:39:77:0a:b0:8d:d9:5b:97:6e:25:cd:fd:
84:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A3:04:60:B4:4B:BA:CD:67:9E:52:C6:3D:1A:8F:D4:71:F2:4D:21
X509v3 Authority Key Identifier:
keyid:AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:63:b6:f8:45:b6:2b:40:af:f4:ef:33:95:d2:e0:0e:94:3d:
ed:01:2b:ec:c0:42:03:d3:ec:db:17:c3:f8:bd:f3:bd:14:c5:
4c:fd:cb:ae:78:27:f4:00:e4:53:12:b0:b1:95:58:52:8a:b8:
bb:f3:89:b5:8d:6f:db:79:fa:84:cd:09:d7:77:67:87:71:2d:
b6:3e:25:f1:4f:c0:10:db:82:e6:83:a7:e9:6b:a3:ab:1b:9e:
36:13:9d:00:da:ad:37:10:6d:d0:b0:d8:22:6f:13:23:d0:95:
64:d2:0b:04:e9:1a:24:7b:f5:39:31:42:7b:2c:4b:37:24:ce:
9a:1e:cc:a4:6f:70:50:a5:a3:1c:ff:58:8c:16:43:3e:37:6c:
5f:8a:ba:de:1b:21:af:5f:c6:7a:62:86:92:6d:50:8d:ce:0c:
10:08:79:77:1a:55:72:d9:27:13:fb:a5:0d:22:e8:45:a7:c2:
3f:35:ce:80:3d:3d:b7:02:2c:fe:1a:49:77:1a:53:07:d7:12:
53:ac:e1:5f:b3:04:9f:70:01:4f:2a:9d:29:de:02:fb:63:fb:
95:ce:3b:30:fa:b7:dd:4c:a2:86:9e:bb:3a:6c:4e:dd:ad:0a:
ff:ae:6b:ab:ca:63:ac:77:4d:81:db:d0:17:73:26:57:29:00:
44:74:b0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:32 2025 by rpki-client