Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
File: QWUyQgoh5CuK0w2iTr9DR96V7zU.mft (raw, json)
Hash identifier: jBxwtjgAqZ04prddTmpkb9XciUHidqb39c6I+1VHhFs=
Subject key identifier: 16:48:24:12:7A:4C:CB:91:B2:90:52:D9:C1:3B:AA:D8:D9:F9:BD:B3
Authority key identifier: 41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
Certificate issuer: /CN=416532420a21e42b8ad30da24ebf4347de95ef35
Certificate serial: 0198D405073E75A2437CC419BF0D4181150D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
Manifest number: 1151
Signing time: Fri 22 Aug 2025 23:02:35 +0000
Manifest this update: Fri 22 Aug 2025 23:02:35 +0000
Manifest next update: Sat 23 Aug 2025 23:02:35 +0000
Files and hashes: 1: QWUyQgoh5CuK0w2iTr9DR96V7zU.crl (hash: I/b5S+KXqb7rN3bwRzLTcZ7Hw1DH0SeJi3xVbS9MBdg=)
2: eV_HY0yWE8mOE1MRDnB0YcYTccg.roa (hash: 5xM8UD0IporPo6ojXDnvNcFP3vOdI9fe0xTb6m2cal0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:05:07:3e:75:a2:43:7c:c4:19:bf:0d:41:81:15:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416532420a21e42b8ad30da24ebf4347de95ef35
Validity
Not Before: Aug 22 23:02:35 2025 GMT
Not After : Aug 23 23:02:35 2025 GMT
Subject: CN=164824127a4ccb91b29052d9c13baad8d9f9bdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:cb:14:8c:eb:96:74:f4:7e:cc:0a:84:7e:
2f:b3:38:cd:a4:a3:af:ba:fd:08:2c:bf:3d:9b:88:
67:9f:5a:df:da:66:75:d5:d0:29:b1:d3:05:a3:18:
5c:99:40:aa:88:5c:bc:3f:1b:9a:f8:94:65:f0:e6:
f2:c1:0d:6c:1d:8c:3f:1a:ec:52:ff:b5:27:d2:fd:
20:5c:36:8d:5f:0d:e1:64:85:28:31:5e:ac:9a:d5:
69:d3:27:82:73:30:1c:87:89:3f:da:92:47:2d:dd:
18:a7:dd:1c:a3:d1:96:17:16:ef:81:7c:5f:97:66:
95:42:45:bd:fb:19:9f:15:fd:72:95:e9:2e:d6:cb:
4f:c3:68:2f:67:10:36:09:9b:56:61:10:fe:02:cc:
39:09:84:44:41:b5:e4:14:ad:fc:ed:28:36:d0:5c:
50:6f:ae:7e:f5:a3:ea:48:4d:7c:02:e9:fb:79:e9:
d2:2a:bc:6f:38:83:da:8c:ac:ba:91:39:10:bc:7d:
0c:ab:0c:e4:d3:0d:e1:65:54:cf:9b:bd:d0:58:e7:
cb:26:8b:6b:d5:36:7e:6c:f4:bf:6e:a2:85:a1:5a:
ab:f8:d0:6f:c8:c0:46:e7:65:a9:11:8a:cb:88:04:
93:16:1a:28:0f:ac:b1:3d:cf:6a:7b:a0:83:c8:49:
0d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:48:24:12:7A:4C:CB:91:B2:90:52:D9:C1:3B:AA:D8:D9:F9:BD:B3
X509v3 Authority Key Identifier:
keyid:41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:cc:26:f9:19:e9:6e:d5:e6:b8:f2:37:60:12:10:37:a8:77:
b9:9b:78:79:8f:75:29:5f:5c:e7:53:7c:df:16:9b:86:f2:79:
d4:3b:c4:f9:cd:14:61:07:5b:e6:82:9a:d0:f9:0e:48:35:c9:
f3:5b:c3:d1:fa:7e:31:df:3f:2c:38:8e:5b:2b:6a:90:35:b4:
c9:37:65:52:31:a8:f7:9d:18:fe:c1:f1:73:65:69:41:ed:65:
01:d6:91:ce:5c:1f:ed:58:75:ed:5d:d3:5e:e2:28:19:f1:8a:
63:04:eb:a7:d1:64:9a:fb:96:b4:f6:71:b8:9a:85:fc:47:4b:
59:fa:09:7f:e4:97:f3:c3:a2:f2:23:4d:39:23:34:e1:4e:ec:
81:30:d5:9e:b8:7c:f2:79:e5:e0:cb:61:d0:ff:fe:c1:51:65:
89:ce:8d:6a:db:8a:63:84:d5:dd:87:72:05:1d:a9:d9:a8:fe:
c1:54:69:54:a1:a2:cb:db:f5:fd:99:06:a4:eb:0c:72:5f:66:
bf:af:73:e3:5e:d7:a9:cc:5e:51:8f:f8:24:6d:84:1a:ad:52:
b9:5d:76:73:36:ae:75:19:4b:09:42:91:8e:a2:53:4c:7c:9e:
da:d2:77:a3:79:fe:90:c2:36:ec:f2:46:02:fb:b8:ab:d7:27:
bb:13:74:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:16 2025 by rpki-client