
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
File: qwbI8iR9IgQcguVVZniB5Q-RVKs.mft (raw, json)
Hash identifier: qTZNGCMrBwXUt3Jlq0gtvBIyAQr6sEh2sf+YD7vb068=
Subject key identifier: 4A:33:8F:15:8A:31:6A:2F:4E:CA:C1:0F:EC:7F:63:DD:1A:08:D9:05
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Certificate issuer: /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial: 0198D583DF4DAC157A5FD1D4A9619B92F192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:46 +0000
Manifest this update: Sat 23 Aug 2025 06:00:46 +0000
Manifest next update: Sun 24 Aug 2025 06:00:46 +0000
Files and hashes: 1: BvjHm2eLgQsE-EhNaMGys6XuvSA.roa (hash: 3dR8rduC7LW0RozAGEED/FwSFwjDp9QTVfVqQtjf3mI=)
2: kD9wFsIkyemJmyZR5NsOicAOk6Q.roa (hash: 5lwx2dujcX+QPN65pRSgkqXQZ6JloT7CVxLAGTDZ7oM=)
3: qwbI8iR9IgQcguVVZniB5Q-RVKs.crl (hash: DYFsqBhhU9J+95xa9UqezS+w061H1CvBOp7+U2pdy7U=)
4: y-vKKwMZ-Jm1IyyKOX5h3UFOkJs.roa (hash: TREazVziiS/zSuZ98yUE1lCBdvTaOvsRUmgllHq3JrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:df:4d:ac:15:7a:5f:d1:d4:a9:61:9b:92:f1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
Validity
Not Before: Aug 23 06:00:46 2025 GMT
Not After : Aug 24 06:00:46 2025 GMT
Subject: CN=4a338f158a316a2f4ecac10fec7f63dd1a08d905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c5:38:2c:8c:f2:ba:4f:91:88:e0:f6:50:58:
fa:93:ea:3e:07:96:4b:b3:53:94:e2:6e:69:b2:84:
6f:ea:2c:9c:c2:7d:fa:08:2a:73:7f:08:0a:13:3c:
20:a8:f6:73:0d:36:13:35:54:8d:ef:fa:f4:37:f3:
05:3d:a2:ec:e5:b5:46:d1:76:c4:ca:2d:c8:a5:5c:
d1:c7:32:03:d9:f5:5d:ff:79:78:1a:45:08:e8:55:
98:dd:ae:3d:ab:a3:8e:de:9a:3a:e4:f3:39:67:52:
23:d1:6d:9c:5e:fc:e6:e4:e8:d1:56:2d:47:87:eb:
d2:0f:e3:64:67:e3:9d:a9:34:53:30:a4:94:6e:35:
2b:1c:78:7f:85:93:d5:92:29:b4:1c:53:53:07:af:
e3:3a:33:29:ae:e8:4b:20:c0:67:35:6a:26:79:a2:
ac:f7:b8:00:0b:9e:13:2c:69:77:d5:04:92:09:a5:
5c:09:8d:b0:ee:90:11:cc:a3:c6:05:97:17:9b:2b:
53:1f:9c:54:a9:2d:2a:2f:cc:07:d0:8c:c6:4c:af:
9b:b6:06:49:8c:d4:7c:2e:0c:d1:fc:4c:3e:ed:35:
f6:23:3d:46:0d:c5:f6:80:7a:c5:4d:f7:0d:d7:12:
80:dc:f6:ad:fa:b5:f2:13:53:08:fc:00:58:38:a5:
b5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:33:8F:15:8A:31:6A:2F:4E:CA:C1:0F:EC:7F:63:DD:1A:08:D9:05
X509v3 Authority Key Identifier:
keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c8:74:94:4e:a4:b8:97:ee:ba:e6:a3:1e:78:81:10:58:6c:
99:c6:18:82:81:de:29:d2:55:0d:21:5d:e9:7b:06:ed:c0:5a:
06:58:60:c1:62:ff:06:5c:87:e4:60:78:82:b3:e9:6c:dc:0c:
8f:12:02:f9:ac:25:cb:33:54:f2:13:5d:b5:38:e4:f6:5f:e7:
cd:27:77:37:e2:a2:ac:05:a0:b0:af:18:29:be:ae:2f:06:18:
dc:ea:6f:a7:63:1d:2a:34:6b:f8:8a:ce:23:d2:3b:5a:45:e9:
b5:7a:8a:29:76:21:a3:d8:ae:8b:b2:a5:38:0c:e2:f4:12:62:
87:cf:22:3a:8b:cb:f7:73:dd:0b:5a:67:aa:98:4c:c6:b2:8a:
3e:bf:d8:d5:24:e7:5d:40:82:c8:75:08:80:0e:db:a2:5a:be:
2f:56:7e:e5:b7:45:2a:55:1f:9a:37:7b:8d:ac:35:ce:ce:49:
83:25:b3:71:2f:34:ab:38:d3:e3:69:9e:d9:30:e4:0f:91:0b:
30:27:04:d1:0b:bb:b5:52:65:b1:74:d8:56:97:38:a8:10:a1:
ec:92:cc:eb:92:df:72:8a:4f:a0:05:8b:54:b9:d7:47:02:62:
1e:60:34:0d:0c:3e:fc:b4:43:49:5c:c1:2e:6d:48:19:0c:97:
06:c3:0c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:21 2025 by rpki-client