Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
File: QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft (raw, json)
Hash identifier: viEnJ+mxQJvn60R16Izo5yeemAUovQFt02sdLQNHOD0=
Subject key identifier: 65:60:E9:EF:6E:ED:A3:6D:DF:AC:79:8D:A6:4C:06:B3:D6:58:5A:EA
Authority key identifier: 41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
Certificate issuer: /CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Certificate serial: 0198D65FB64A2AB4D1E726150E51BA8F43FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
Manifest number: 0535
Signing time: Sat 23 Aug 2025 10:00:53 +0000
Manifest this update: Sat 23 Aug 2025 10:00:53 +0000
Manifest next update: Sun 24 Aug 2025 10:00:53 +0000
Files and hashes: 1: QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl (hash: L83bgM7FFfhFVhTJn6KxGpHdyGHa6E5Dw19CcsQwEcU=)
2: Z6Wkv7AZrSmiWgbMuz5hZVggR7E.roa (hash: MRaF6vDhyEMplwKKtwCPw92vpK44c5JniyQIX+roRzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b6:4a:2a:b4:d1:e7:26:15:0e:51:ba:8f:43:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Validity
Not Before: Aug 23 10:00:53 2025 GMT
Not After : Aug 24 10:00:53 2025 GMT
Subject: CN=6560e9ef6eeda36ddfac798da64c06b3d6585aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:45:17:52:b9:2e:33:01:c2:f3:e9:ec:8e:
63:46:ef:ff:04:ff:5c:ce:3d:1c:0a:32:c0:22:12:
bd:31:8f:2b:db:fe:86:6c:fe:e6:99:8b:4b:62:cf:
29:57:24:1f:f2:c9:08:be:df:78:62:e7:1b:cd:fa:
63:5d:df:a6:8f:69:bf:71:0b:ec:e7:97:b0:94:ff:
00:1e:7d:fd:71:48:e0:99:b8:ed:7f:96:e7:bf:b3:
59:51:38:18:af:4d:ec:06:2d:f4:f5:e8:3c:3d:ea:
ab:70:15:00:8d:31:44:36:22:73:64:62:0e:00:63:
66:f2:51:a8:55:7e:eb:97:54:56:a5:bf:90:d9:67:
83:80:81:ef:0e:14:f9:e2:b6:ef:c2:2b:ea:50:84:
42:a4:3b:0d:5d:b8:db:c6:92:7b:c5:98:39:23:59:
79:8c:1d:af:70:88:18:8d:72:c4:72:54:8d:46:eb:
23:89:a3:9d:79:1e:75:0d:3c:e9:68:f9:77:24:e9:
27:68:8e:1a:6d:44:c3:32:ee:7b:e0:e1:b6:94:fd:
93:63:78:f5:e4:5b:4c:d4:03:75:7d:fd:69:aa:2e:
07:b6:fe:aa:94:81:77:0a:bf:d7:31:21:40:02:4a:
fa:17:8e:15:cc:63:b5:4b:f7:04:df:d2:17:e4:07:
f9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:60:E9:EF:6E:ED:A3:6D:DF:AC:79:8D:A6:4C:06:B3:D6:58:5A:EA
X509v3 Authority Key Identifier:
keyid:41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:77:9a:c9:06:88:42:5b:3a:6d:ca:a4:a5:b8:df:19:b4:40:
a2:10:36:57:02:c5:df:09:51:e6:8a:c3:df:5b:cf:0d:d6:1b:
b3:bf:20:82:94:e7:de:72:32:2e:c6:a4:04:90:ae:8d:ed:ca:
6f:9d:bc:f6:2e:4a:6a:91:43:30:c0:58:3d:f5:23:f8:df:cc:
ac:b0:69:3c:22:4e:4e:21:97:22:89:31:f8:2c:2f:06:e2:66:
a1:49:da:3c:32:12:4c:7f:5d:22:86:2d:4d:86:c4:e3:df:5a:
3c:1b:55:e4:b5:90:63:5a:bd:fd:0e:bc:d3:69:c7:d9:58:d8:
82:55:3d:57:02:7f:29:16:af:d2:d1:27:02:78:aa:c7:72:79:
01:70:73:6d:d0:ea:5b:15:ff:78:69:9c:45:bd:d1:44:14:1d:
6e:6d:d3:9b:69:fb:ad:52:40:fd:e8:f6:51:dc:6c:43:07:26:
d3:61:96:f7:ce:e2:ba:a9:16:71:9e:1e:40:e7:8f:fd:51:e0:
e2:93:5e:be:ea:4a:fe:40:49:c3:fc:f3:76:86:4a:b8:9a:ea:
2f:08:51:3f:22:d2:f7:3d:19:1f:c8:ee:10:98:30:c0:8e:89:
c0:32:98:cb:75:68:d6:4d:5d:11:eb:3a:82:a1:c5:45:91:e5:
20:5c:01:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:22 2025 by rpki-client