Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
File: QWbAb_SeBTSAniNABbqlzKfhRqg.mft (raw, json)
Hash identifier: P4L87NTE2sJjpYzL7sww/v9Ju9jzyVa7GboiB2DlvW0=
Subject key identifier: 68:90:AE:A4:B0:8E:84:E5:67:70:D5:16:A2:5D:44:7A:B9:2E:BC:62
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial: 0198D4E0CBA3BD94F5FAA39FE5BD2BE3DD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
Manifest number: 0159
Signing time: Sat 23 Aug 2025 03:02:38 +0000
Manifest this update: Sat 23 Aug 2025 03:02:38 +0000
Manifest next update: Sun 24 Aug 2025 03:02:38 +0000
Files and hashes: 1: 9W9gYghW6_iCN3HlIGpaoOJHZhk.roa (hash: /VOahTPt9Fh6RgLRa78P8pgoK/6N4p3sHujeTUCmYBc=)
2: QWbAb_SeBTSAniNABbqlzKfhRqg.crl (hash: quLZHzh58ielQURYKyF1gNazzy0AmB9Ubrtdout/Grg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:cb:a3:bd:94:f5:fa:a3:9f:e5:bd:2b:e3:dd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
Validity
Not Before: Aug 23 03:02:38 2025 GMT
Not After : Aug 24 03:02:38 2025 GMT
Subject: CN=6890aea4b08e84e56770d516a25d447ab92ebc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:86:f5:2a:62:d7:28:db:d0:5e:6b:ab:2f:
70:80:c4:d2:07:34:8e:d5:e5:c2:58:8d:6e:4b:94:
e4:cc:65:a6:41:05:2f:5e:08:52:73:22:eb:c4:26:
3d:75:06:c3:b6:1d:05:9e:77:4a:8e:22:4d:7e:03:
5d:de:eb:c0:f9:88:62:ca:db:b9:33:8e:ef:ed:84:
73:e9:c2:24:f8:94:5b:fb:1b:12:8e:be:37:d4:aa:
7a:c8:7b:da:bd:4e:e7:29:b8:3a:98:3d:e8:6d:5d:
e2:93:26:2d:20:b6:4d:9a:b4:d3:5d:bc:28:b9:77:
d9:98:8f:de:50:57:5f:b6:76:58:46:68:df:f5:32:
75:13:c2:73:ca:5b:c5:d5:b2:30:ea:d9:e5:c3:1b:
69:41:d4:b8:8d:67:5d:cb:a9:6c:3c:2a:f8:9b:01:
d8:81:18:2f:e8:7a:27:e2:57:01:79:93:d3:ef:d5:
b4:60:e2:a3:d4:c8:99:86:8a:30:58:c1:ee:ea:65:
a9:50:b3:9c:18:19:c9:4f:6d:77:66:32:aa:83:43:
4d:00:3f:30:ea:f6:7d:64:d8:3f:17:6c:6c:e0:2a:
00:bc:a9:94:65:30:d0:5f:90:06:00:e6:9e:96:f2:
79:85:63:95:9d:8e:d5:d6:86:35:6e:28:ec:44:22:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:90:AE:A4:B0:8E:84:E5:67:70:D5:16:A2:5D:44:7A:B9:2E:BC:62
X509v3 Authority Key Identifier:
keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6d:b0:3f:b4:3a:42:84:23:53:41:11:5d:24:4a:8c:0f:4d:
70:42:c8:4f:d9:61:8b:82:d3:e8:e8:10:0d:56:7b:c5:c0:83:
b7:0b:3c:53:35:3b:38:96:8b:41:db:5f:5d:cf:c8:68:4b:d1:
77:df:24:23:0b:d6:2e:8a:60:e8:d7:e5:f9:1b:3f:fd:76:30:
2a:75:9c:68:b4:bc:59:36:99:0b:63:02:9f:ad:9e:e9:7d:1d:
89:69:63:45:6d:fb:06:32:b5:6f:b8:c9:b8:09:a2:eb:0f:78:
5f:b1:44:b7:35:72:28:73:13:bf:a4:18:ce:0b:17:22:4b:46:
e5:87:01:fe:d7:fa:df:0c:f4:c1:50:22:22:aa:87:0a:ef:1c:
bc:59:a0:16:87:52:80:b7:ee:82:31:71:15:13:59:2a:5c:49:
9d:de:1a:6c:2f:c1:44:43:78:f0:49:8c:d8:55:e6:74:f0:96:
3a:f2:11:73:fb:2e:46:6b:b9:61:eb:09:cf:7d:2e:d4:26:9a:
0e:b6:90:66:57:75:35:f9:c6:71:6b:8a:97:f7:21:0d:b1:f1:
e4:81:51:3a:19:bc:d0:be:90:5c:86:f7:97:41:ec:0d:35:b3:
91:ae:a6:41:63:9f:7f:49:f2:7b:f5:cd:d6:e6:f2:0c:9c:40:
b5:a7:4e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:32 2025 by rpki-client