Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
File: QWbAb_SeBTSAniNABbqlzKfhRqg.mft (raw, json)
Hash identifier: YCGSDUZ2/Fzk4mMkUUxH+HP9rqZG3yMdStm5FEZxmUY=
Subject key identifier: C9:33:E9:FB:20:53:4F:52:61:9A:E6:CC:DC:47:CA:D9:8F:FE:A6:FF
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial: 0197B70EE70F6374C1E335674842479CBB05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
Manifest number: C5
Signing time: Sat 28 Jun 2025 15:01:36 +0000
Manifest this update: Sat 28 Jun 2025 15:01:36 +0000
Manifest next update: Sun 29 Jun 2025 15:01:36 +0000
Files and hashes: 1: 9W9gYghW6_iCN3HlIGpaoOJHZhk.roa (hash: /VOahTPt9Fh6RgLRa78P8pgoK/6N4p3sHujeTUCmYBc=)
2: QWbAb_SeBTSAniNABbqlzKfhRqg.crl (hash: Ct/c2inf3dq4dbEEYdGKfLaXPkBaE+nPFsflthKGFpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e7:0f:63:74:c1:e3:35:67:48:42:47:9c:bb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
Validity
Not Before: Jun 28 15:01:36 2025 GMT
Not After : Jun 29 15:01:36 2025 GMT
Subject: CN=c933e9fb20534f52619ae6ccdc47cad98ffea6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b1:67:76:72:2b:52:8c:47:ed:99:b1:1f:f4:
f8:be:55:d2:79:b2:7d:e9:73:18:d3:6b:29:51:66:
ef:e2:d5:a6:2c:8b:11:3c:b5:29:46:2f:d5:53:d4:
26:d0:a2:ac:41:8d:fa:b8:0c:a0:b9:7b:e7:56:c9:
fd:8f:13:43:ae:c3:03:25:be:ba:ce:c6:0c:7e:a9:
1e:91:fc:3f:1b:8c:e1:28:e7:80:da:dc:85:76:87:
c5:fb:4c:99:d9:da:e6:2d:28:59:e3:4b:76:59:ae:
77:b5:bd:e1:2e:b9:9e:1c:3d:a3:96:c7:6c:58:d3:
fd:c8:97:8b:2e:99:14:70:d2:c9:f4:b0:c6:16:fa:
28:05:68:a5:e8:df:8b:0e:04:e9:d1:01:c4:44:2b:
ce:e6:39:b9:da:5a:e8:34:9c:8d:bd:93:ce:cc:11:
8e:e5:97:3d:1f:43:40:d1:e9:18:0a:4f:ff:18:55:
e0:4e:4e:75:7d:82:bb:b4:bb:9d:92:18:ef:bb:d3:
a5:4e:45:a2:d1:01:76:5b:4d:ce:24:57:06:02:11:
47:6d:6c:b7:aa:a2:91:c7:ea:b5:ca:8e:e2:79:08:
3b:5b:c3:be:ac:a5:50:d6:04:67:47:9f:13:1d:11:
ae:48:e3:cf:ba:95:f1:1f:3b:a2:4e:e0:2f:3b:a9:
34:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:33:E9:FB:20:53:4F:52:61:9A:E6:CC:DC:47:CA:D9:8F:FE:A6:FF
X509v3 Authority Key Identifier:
keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:63:54:94:91:a2:c7:69:f2:17:f4:db:59:9b:ce:f3:6b:3d:
33:11:9a:1f:61:60:82:8d:86:15:f2:ec:1b:f1:04:e2:0e:83:
29:d2:c4:82:a3:9b:c8:30:78:8f:72:5a:e0:5a:2a:c0:0f:d5:
51:d9:69:1d:67:76:e0:4e:52:74:f2:db:0a:91:3e:b6:b3:00:
ac:ae:ef:cb:a0:17:04:53:4b:ab:bb:9c:34:d2:96:6f:d7:d3:
48:17:57:2f:dd:3b:99:57:6c:dd:b2:36:50:5c:d1:ec:8f:e5:
e9:9e:c8:11:90:fb:14:4d:6a:21:7c:4c:eb:7d:92:3a:12:ed:
bf:dc:5e:dc:ba:3b:13:07:d4:94:99:9b:85:b3:63:8b:f9:68:
95:d2:e6:14:cb:db:49:d1:34:42:81:ca:63:cb:cc:ac:a3:4c:
20:75:99:a7:8f:8d:bd:4d:cd:47:d3:de:ab:2d:8b:f5:18:ea:
b7:f5:0c:7b:5b:71:1f:dd:7e:93:a8:12:ad:d6:50:7e:5b:78:
ee:9e:0d:fd:ba:87:20:d6:f2:28:c1:45:1e:4b:54:33:f2:c8:
4c:86:b4:41:e6:2d:df:96:5d:32:7f:89:4f:36:61:1b:61:c2:
80:9f:4d:c2:a9:83:a0:44:62:fe:31:17:90:f0:e1:a9:58:b1:
bf:67:db:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:05 2025 by rpki-client