Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json)
Hash identifier: 2oNaICJVDefY4qjQQzwwITiRXzbW5jV4WIaBN6QqGvI=
Subject key identifier: 77:4E:76:C8:DE:B1:F3:C9:53:44:BA:9B:40:B2:7C:7A:E8:C2:90:C0
Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Certificate serial: 0198D54E511068B5BB4DE62950C434860933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 05:02:16 +0000
Manifest this update: Sat 23 Aug 2025 05:02:16 +0000
Manifest next update: Sun 24 Aug 2025 05:02:16 +0000
Files and hashes: 1: Se8jY-LoM2MVsZ37wmyygWUdZqw.roa (hash: 460xRSiSARjue5TmuazrIkrxiYolcj28Woj0bWcIVJo=)
2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: 7uN5DRr+zxROAk7BeilE7v8k9tQC+Voe2G+1T516Ays=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:51:10:68:b5:bb:4d:e6:29:50:c4:34:86:09:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Validity
Not Before: Aug 23 05:02:16 2025 GMT
Not After : Aug 24 05:02:16 2025 GMT
Subject: CN=774e76c8deb1f3c95344ba9b40b27c7ae8c290c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:19:c4:46:fa:41:64:f7:6e:3f:38:25:6b:
35:e1:d3:5a:27:79:48:f2:89:22:8a:e5:b8:8e:5f:
cd:32:b0:c1:00:e7:a0:1a:e9:09:43:42:6f:b2:a2:
bd:cc:81:3e:68:66:07:2b:ec:f9:86:04:8c:b6:f7:
3b:33:dd:ce:e7:97:0e:c8:51:fd:3e:7e:5e:9f:f6:
e1:f6:29:38:4f:78:4a:4c:7d:c3:d8:a5:cf:67:76:
18:24:1f:02:57:a5:a9:0f:58:f0:d9:d1:28:ed:5b:
a8:c8:74:16:a3:18:27:26:5f:fa:9d:a9:4b:d9:d7:
e6:3c:f0:60:4a:0d:6c:28:84:86:61:bd:99:07:34:
cd:0a:52:af:3d:3d:cc:bf:a8:69:fa:1c:fd:bc:08:
29:83:c5:ba:3e:52:92:7e:a4:90:bd:09:56:81:23:
a0:ba:e0:41:8c:03:0a:62:4b:95:35:77:51:5c:38:
5c:01:25:6f:19:1a:a8:74:fa:8a:57:ac:6d:c1:d3:
c3:ac:f0:09:aa:cf:f3:13:84:1f:5f:37:33:cc:3b:
f6:9b:47:90:35:b0:31:72:27:ca:c4:6f:4f:16:1d:
a3:0d:76:3e:ae:40:bd:1e:e6:81:f8:91:b7:00:fb:
2f:0e:1b:1c:68:19:42:7f:3e:50:c0:ef:d9:11:1a:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4E:76:C8:DE:B1:F3:C9:53:44:BA:9B:40:B2:7C:7A:E8:C2:90:C0
X509v3 Authority Key Identifier:
keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f9:10:6c:d5:6a:8d:68:2c:1c:30:dd:91:8b:23:83:bb:a9:
70:f3:78:42:87:80:f5:54:c8:5b:14:9b:87:03:80:b3:29:18:
aa:48:e7:9e:6c:6a:af:b4:d7:ea:ed:4f:bd:5f:47:b6:92:3e:
59:19:a7:03:80:82:0f:3b:2d:5c:eb:b6:99:e8:70:50:08:e8:
da:36:f5:38:e3:3f:a2:dd:a7:46:4a:af:9a:e3:ef:dd:b5:c0:
96:e4:ea:32:1b:2f:41:71:6c:15:bc:d4:5b:14:46:3d:69:7b:
07:b2:dd:8e:52:a1:91:e8:3f:be:8a:40:ef:da:9c:3e:11:0f:
60:40:4d:30:99:e2:66:42:2d:94:d9:76:ea:b0:bf:c7:95:10:
bb:c6:f3:d5:c4:36:7e:a8:37:96:70:dc:e1:f7:bb:6f:66:b5:
87:45:7b:ef:be:9a:b2:82:d7:4a:36:30:1f:70:55:33:97:bb:
3e:7e:d3:c5:cc:c0:e7:d9:bf:d2:42:34:d3:a5:df:a3:06:d6:
d5:ad:75:55:38:7e:dd:14:09:66:84:a0:1f:93:82:92:ac:c5:
fc:9b:47:02:4a:e8:3c:15:46:17:05:da:75:49:78:68:70:1c:
9d:fb:5d:77:a0:c6:cc:34:fb:c2:e3:c9:42:3b:f3:eb:e5:c1:
c7:54:02:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:06 2025 by rpki-client