Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json)
Hash identifier: ExCMfvkWv3Nrwly3nMQNDIPEZ1tkALnn4rg/gTbpq/M=
Subject key identifier: 91:9C:B2:02:D8:AA:82:D1:2B:1C:8F:4A:31:FC:66:66:76:35:F7:07
Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Certificate serial: 0199FAD7CB63A5F7E00AD450C849D3F64175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 05:01:10 +0000
Manifest this update: Sun 19 Oct 2025 05:01:10 +0000
Manifest next update: Mon 20 Oct 2025 05:01:10 +0000
Files and hashes: 1: Se8jY-LoM2MVsZ37wmyygWUdZqw.roa (hash: 460xRSiSARjue5TmuazrIkrxiYolcj28Woj0bWcIVJo=)
2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: TyeFGJpS1uZZh455vOsYqL48OV9GFUO3fw1anJlS/2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:cb:63:a5:f7:e0:0a:d4:50:c8:49:d3:f6:41:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Validity
Not Before: Oct 19 05:01:10 2025 GMT
Not After : Oct 20 05:01:10 2025 GMT
Subject: CN=919cb202d8aa82d12b1c8f4a31fc66667635f707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:cb:2b:c8:e5:a3:23:30:c1:95:ba:05:49:
93:b2:9a:0e:4d:33:78:d4:0b:a0:36:44:71:d2:fb:
02:6c:03:f5:0e:45:53:43:56:e1:d5:88:33:ed:bf:
92:d6:15:e0:a0:78:f9:5b:61:de:d9:77:77:0d:cf:
fc:86:ea:f1:e6:c9:bf:69:c9:ea:46:b7:f1:ea:6e:
98:dd:24:4d:51:dc:a1:dd:83:04:f2:02:76:55:4e:
53:80:ed:8a:aa:8c:ac:54:64:2c:34:88:55:fb:08:
5b:b7:30:22:2e:4b:0e:75:d1:cb:39:b7:0b:f9:67:
87:c3:67:38:f3:5e:45:d3:3e:97:34:04:73:c3:d7:
5e:e6:eb:03:53:16:a9:de:32:a5:a2:ed:31:8d:cf:
c2:d6:e3:60:4f:4d:72:7a:d1:6f:32:74:4e:48:4e:
59:40:4e:09:59:8f:8b:8f:65:cf:fd:1c:08:ec:b4:
45:c1:b4:7f:a0:99:03:ee:3b:99:cc:1b:5f:a7:f8:
a6:3f:1c:d4:d2:6e:16:17:31:68:80:64:02:00:f6:
8a:62:5a:92:24:4c:af:6f:89:d8:03:5d:09:ea:5b:
da:06:16:12:fd:4f:4f:21:80:4c:9a:6c:d1:2a:b3:
d5:07:48:6f:b7:60:ec:32:47:64:79:e4:6d:9d:a7:
7c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9C:B2:02:D8:AA:82:D1:2B:1C:8F:4A:31:FC:66:66:76:35:F7:07
X509v3 Authority Key Identifier:
keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c8:e8:a9:34:e9:e5:fb:3a:71:a3:ee:d1:90:ae:c0:63:79:
5c:43:2b:f1:b3:ce:ce:b4:53:35:44:42:05:2a:c6:bf:5a:25:
5f:7a:4a:ff:7e:43:85:91:e5:3a:52:32:82:a7:e2:3f:a9:7f:
70:1c:ff:c5:64:3c:79:2f:d9:cc:28:30:c0:b8:0a:00:62:cc:
17:5c:5d:09:05:74:35:7f:76:c6:68:4e:16:fc:16:86:8b:48:
61:6a:71:b7:4e:6d:97:37:8b:17:2e:78:1b:b5:de:d4:15:ab:
06:54:81:35:b9:99:a6:79:76:51:05:2c:75:14:6e:4e:36:76:
0e:13:71:2c:72:25:b0:75:4f:7c:56:8a:c9:c9:d9:cd:c6:f3:
fb:75:e3:f8:1f:30:a2:8d:95:ec:c4:6f:68:2b:4e:69:30:1e:
0e:70:82:ee:85:fb:4c:5e:6e:18:d6:62:5b:9a:1b:c0:b7:52:
4f:82:cf:50:a5:b0:b4:ed:4d:92:a2:6a:39:8e:21:3b:1d:8e:
ca:7d:33:ba:39:33:fb:16:ef:aa:27:10:52:ca:c4:e7:81:41:
81:bd:f0:1a:73:71:18:e4:3f:ce:9d:9b:41:ed:1c:40:a2:6a:
92:0f:02:d8:b8:66:99:05:1d:2d:e4:c5:79:f2:84:d6:d8:64:
e0:6c:96:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:13 2025 by rpki-client