Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
File: qwbI8iR9IgQcguVVZniB5Q-RVKs.mft (raw, json)
Hash identifier: GJNz5l+Ux9n0s50gd92SWaZNHx/gFLoGiqGDwbWzeg4=
Subject key identifier: DC:A5:8A:B6:32:A1:64:DC:E6:78:92:EB:B5:F7:FE:7E:4D:D9:52:58
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Certificate issuer: /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial: 0199FEEC0D25A592ADD5ECEF6BD871E5639C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 00:01:46 +0000
Manifest this update: Mon 20 Oct 2025 00:01:46 +0000
Manifest next update: Tue 21 Oct 2025 00:01:46 +0000
Files and hashes: 1: BvjHm2eLgQsE-EhNaMGys6XuvSA.roa (hash: 3dR8rduC7LW0RozAGEED/FwSFwjDp9QTVfVqQtjf3mI=)
2: kD9wFsIkyemJmyZR5NsOicAOk6Q.roa (hash: 5lwx2dujcX+QPN65pRSgkqXQZ6JloT7CVxLAGTDZ7oM=)
3: qwbI8iR9IgQcguVVZniB5Q-RVKs.crl (hash: D7xu26TlpBroy9VvBBBk3jWsMEGrjWDp3o9gkXXZigU=)
4: y-vKKwMZ-Jm1IyyKOX5h3UFOkJs.roa (hash: TREazVziiS/zSuZ98yUE1lCBdvTaOvsRUmgllHq3JrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:0d:25:a5:92:ad:d5:ec:ef:6b:d8:71:e5:63:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
Validity
Not Before: Oct 20 00:01:46 2025 GMT
Not After : Oct 21 00:01:46 2025 GMT
Subject: CN=dca58ab632a164dce67892ebb5f7fe7e4dd95258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:94:00:36:3e:5d:cc:1f:19:07:7e:3b:83:
3a:46:37:e7:ea:5f:68:23:0d:16:89:86:f9:a8:fc:
f2:23:88:0e:17:a1:3f:d6:49:e5:35:64:96:aa:cf:
46:c0:98:a5:e3:1c:a7:f8:d8:97:99:4f:04:db:5a:
d8:80:89:b8:9d:6c:aa:82:df:5e:7d:2d:e3:2f:c6:
13:0e:37:f7:25:9f:1d:b9:55:9a:7c:48:7e:1b:8e:
82:60:45:6f:98:28:f9:eb:a7:41:6d:f6:de:d4:ee:
3b:a2:54:27:ca:ea:c6:ac:f1:48:98:d8:c3:c7:5f:
6f:60:fc:25:56:96:42:5d:e6:52:f0:98:e7:4b:01:
9f:f9:36:a0:2c:25:27:51:79:16:26:9c:15:0b:44:
0e:e6:5c:67:20:03:1d:77:da:4d:bb:cb:9c:97:8a:
20:19:95:d2:19:bd:2c:09:56:9f:17:dc:8f:58:e1:
2b:71:15:ea:06:bb:36:9b:62:0a:14:8c:30:1f:7f:
87:32:c9:dc:c6:e6:78:3c:a2:3f:ba:51:58:c9:3c:
a0:9c:6f:11:c2:7f:39:a7:ff:e7:93:6d:09:19:0b:
c3:d1:fb:40:10:ea:bf:6f:de:44:8c:31:e1:73:2a:
8e:41:70:7c:3b:87:93:e2:93:c4:21:ca:40:1b:fe:
a1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A5:8A:B6:32:A1:64:DC:E6:78:92:EB:B5:F7:FE:7E:4D:D9:52:58
X509v3 Authority Key Identifier:
keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:21:41:81:38:77:c5:34:ac:01:b5:76:2c:77:14:a5:ec:3f:
55:db:bb:e1:7f:17:53:15:d2:23:6d:e7:32:a1:d5:8a:f1:e1:
e8:0d:b5:bb:7c:ae:4d:a4:06:1f:fb:e3:98:e5:cb:ab:86:a2:
91:e4:34:23:76:56:5e:53:03:33:65:eb:53:95:d9:e1:bf:2f:
48:04:b8:30:38:df:8b:67:dd:b6:4c:da:83:3a:48:a2:a1:4d:
87:a1:04:78:50:37:c3:ab:65:cb:ad:62:df:e8:8b:9e:80:eb:
62:96:cc:b5:f3:60:5b:1a:08:5b:fd:fe:b5:60:5d:9c:fc:ab:
4e:b5:70:d3:bc:68:33:5b:78:c1:79:15:b2:fa:66:5f:b5:79:
8f:75:f9:99:e0:67:ff:6c:76:73:35:16:8b:3d:a1:37:55:71:
d3:7e:c0:7b:77:11:48:1c:88:32:64:ad:20:03:5f:f5:04:c9:
9d:fd:d3:e3:fe:5f:33:db:7c:73:88:55:ae:25:82:92:17:67:
ac:77:2e:ef:83:4b:fd:92:a5:1b:45:eb:41:40:22:b1:67:35:
89:eb:c4:99:8f:d8:5a:16:41:38:f7:5b:18:94:ae:31:80:f9:
68:13:cc:7f:07:5a:a4:21:71:64:97:98:d1:f0:f0:4e:a6:36:
75:3a:67:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:48:42 2025 by rpki-client