Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
File: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft (raw, json)
Hash identifier: Jc/+WOy3iwRDb1z/XC+hMFnA+s8QkMoUHmo7ecWz0J0=
Subject key identifier: C7:03:7A:57:FA:32:48:20:95:8B:0B:68:83:3B:00:B9:06:07:D0:30
Authority key identifier: AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
Certificate issuer: /CN=ab069058b4d367612be4807372b5e593e0347766
Certificate serial: 0199FCFD1DBF6851DE58B7E10E66E2366F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 15:01:10 +0000
Manifest this update: Sun 19 Oct 2025 15:01:10 +0000
Manifest next update: Mon 20 Oct 2025 15:01:10 +0000
Files and hashes: 1: Ttl-1h1-V-nLfHGl50XIPqBaOuw.roa (hash: 4ysW7rFsdP6sSTiTROvgg5H3SFvIB36uqjjGielYpHo=)
2: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl (hash: XX7o3oU8uc19E9o6B/lYpxwF0E03ZqO98NqieULN6VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:1d:bf:68:51:de:58:b7:e1:0e:66:e2:36:6f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab069058b4d367612be4807372b5e593e0347766
Validity
Not Before: Oct 19 15:01:10 2025 GMT
Not After : Oct 20 15:01:10 2025 GMT
Subject: CN=c7037a57fa324820958b0b68833b00b90607d030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:c3:ca:97:7b:51:16:65:b0:3a:31:34:e9:
7f:ee:cf:b2:6b:23:4f:37:2e:a6:b7:45:cf:68:0b:
85:8d:4b:21:77:6e:bd:f1:e4:c9:e5:91:e1:fd:a9:
cf:9b:a8:5e:c3:4e:f4:a0:bf:48:44:25:b6:e2:62:
0c:52:f0:33:45:b8:62:97:2a:f1:9d:19:b5:1b:70:
e1:c9:84:b4:c8:25:fe:57:8f:b0:a7:54:68:65:6c:
a0:31:2d:20:a5:67:71:bd:c7:a3:67:ba:b2:1e:20:
4f:97:77:78:cb:3f:cb:dd:c5:58:0e:66:b4:ea:95:
59:47:49:15:f0:3b:62:74:87:74:ba:b3:a9:84:ab:
90:7b:6d:56:cc:05:b8:a5:e7:fe:9e:78:7f:e4:d4:
1d:7a:fd:b1:51:49:09:41:33:88:50:61:53:d3:46:
e0:8e:b7:0c:83:ef:ce:7e:8d:04:fa:86:78:59:0c:
bc:f0:5f:98:42:dd:e7:db:e1:6f:39:44:06:8d:c6:
41:29:6e:d2:e7:dc:d7:dc:4c:5f:f3:f2:9a:a7:3d:
92:be:94:b7:20:cf:29:47:90:7c:a2:0e:7c:90:a0:
85:43:68:32:b9:8c:e5:79:84:b5:06:ef:af:41:40:
c8:de:dc:28:c9:8f:0c:16:d6:75:9e:df:7f:f7:ed:
90:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:03:7A:57:FA:32:48:20:95:8B:0B:68:83:3B:00:B9:06:07:D0:30
X509v3 Authority Key Identifier:
keyid:AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:7c:89:1d:39:e8:a8:25:69:ee:93:3c:f8:2e:17:dd:19:3e:
9b:42:5b:1d:3e:ac:d8:ae:06:2a:d1:14:ac:4c:e4:8e:d7:88:
9f:a5:a7:ff:a7:f2:2a:94:3a:29:11:5a:e3:66:bf:0a:48:1f:
0e:d5:f9:e7:92:33:ce:b5:30:21:66:e0:d6:ee:01:90:3a:60:
e2:a2:ef:17:88:f8:75:32:24:17:c6:80:fb:71:dc:df:bc:ea:
8e:a8:3d:3e:ec:34:28:a3:87:eb:fc:b9:87:a7:b1:70:e9:8d:
5d:94:b2:53:31:2c:fa:ad:df:b8:9b:6a:b0:44:68:9e:b4:eb:
00:11:c5:4e:ae:03:5f:fc:73:22:c0:8b:a2:7a:6c:c1:74:2b:
6d:11:f6:d0:5c:fb:c1:e5:4a:24:7f:11:f5:69:64:4b:47:c1:
2e:02:0c:c1:cf:26:31:5b:10:7c:b6:2e:a8:63:d9:37:4f:77:
e8:e8:0a:aa:9d:5e:53:dd:b4:5f:c8:49:20:f0:1f:9e:11:4f:
bb:d5:b1:50:c6:56:ec:b6:79:23:c7:04:08:d2:af:bf:1c:1e:
85:52:2b:ad:08:66:a8:ba:5d:00:38:ec:08:04:8b:be:d1:7f:
b4:cf:c2:e5:35:3e:fb:de:fd:85:5a:31:a4:d5:45:5f:64:de:
c0:36:f0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:32 2025 by rpki-client