Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
File: qDBcblgpStDtUWL6hCnaUWVlOTA.mft (raw, json)
Hash identifier: M7glCyAvqtqgR/aAoEz8SSXyOvcODz9ZP96c54sdTRE=
Subject key identifier: D6:E7:EA:76:0F:B0:2C:36:D1:8A:AA:5C:3C:5E:43:DB:12:B7:AB:4E
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial: 0198499C27C4A3E9FFFDE9C6A86380BA4D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 02:00:27 +0000
Manifest this update: Sun 27 Jul 2025 02:00:27 +0000
Manifest next update: Mon 28 Jul 2025 02:00:27 +0000
Files and hashes: 1: K1hHLihKHxHk06eTdbGXntsm7n0.roa (hash: L22VRHHVigykudQA1GmcYoeypbh6Yu5VUYyqOcGQaXE=)
2: qDBcblgpStDtUWL6hCnaUWVlOTA.crl (hash: OkQIeTkYYuNGfVBezqyPIg8bm1Z5oTiDXluXcJo6+YM=)
3: wPNMxy1HP_1cYFy7utzNj0qnsDA.roa (hash: yEdNFFWb7AqdqiQvhXrarz8nG5eHA1sOBjlHc/SL+pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:27:c4:a3:e9:ff:fd:e9:c6:a8:63:80:ba:4d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
Validity
Not Before: Jul 27 02:00:27 2025 GMT
Not After : Jul 28 02:00:27 2025 GMT
Subject: CN=d6e7ea760fb02c36d18aaa5c3c5e43db12b7ab4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:3d:20:6c:cb:aa:b0:4b:8a:5e:28:8f:27:
80:3b:cc:a7:5a:ec:34:04:f8:84:bc:ca:c3:fa:76:
39:89:42:14:85:84:5f:55:5e:f7:1c:4a:1a:04:d7:
30:d1:df:0b:ea:fd:1f:07:a3:c6:b5:f3:42:4c:3e:
6c:8b:07:06:ba:e9:fd:7b:7a:f4:8a:21:40:87:01:
45:bd:6f:83:e6:3b:e7:52:fa:00:4e:97:a1:ab:d5:
cd:12:ba:1a:29:0d:4d:8e:63:92:06:09:3d:14:0c:
b9:2b:a6:44:4c:01:8f:de:fb:56:aa:e1:75:00:39:
23:45:5c:d2:49:ce:f7:49:53:75:58:99:33:1b:ce:
79:4f:c0:01:50:09:4c:03:d0:5a:a6:48:ce:4c:b3:
1c:3c:de:f3:e8:44:d4:70:27:fa:0b:bf:fc:97:c0:
a0:48:e7:5c:d8:af:70:b1:b7:1e:cd:90:02:c4:f2:
55:6c:00:db:ed:8f:49:97:8a:9a:80:29:22:81:47:
32:27:b6:73:5b:2d:19:44:c5:85:b8:99:5e:93:4f:
65:ce:5b:20:4f:4a:9f:ba:2d:9c:c8:52:75:95:ba:
22:ed:ea:10:34:81:e9:df:f8:8c:be:59:26:9d:90:
3b:20:86:ee:7d:09:58:03:d2:3e:82:34:17:cc:98:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E7:EA:76:0F:B0:2C:36:D1:8A:AA:5C:3C:5E:43:DB:12:B7:AB:4E
X509v3 Authority Key Identifier:
keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:88:75:31:9f:4f:0d:a9:77:af:1a:ff:ba:c7:71:ac:23:a1:
0e:eb:91:88:c2:02:f5:25:c0:b4:a0:12:04:c9:e3:37:e6:06:
fa:95:a0:b9:0f:96:64:d1:2d:9d:05:bb:a4:89:06:c8:07:b7:
7e:a6:b1:dd:df:14:67:28:9d:87:de:cb:ca:df:dd:ce:18:0d:
4a:ff:9a:5c:2c:49:0e:bf:6d:c7:29:f2:01:f8:09:4c:bc:50:
f3:d4:19:3e:93:7a:43:1b:52:19:bd:1e:7f:d5:47:c5:0f:a0:
75:28:83:05:03:9c:f1:67:b1:7d:b2:97:56:57:f6:21:85:fe:
b5:0a:72:2a:33:31:e8:90:a0:33:d3:8b:60:60:90:4b:95:6e:
14:38:d4:7f:a4:ef:9e:98:dc:eb:e7:31:ca:50:c9:c5:85:82:
7d:82:ae:d8:7e:e1:85:93:8c:5a:c9:de:8b:ab:9b:42:b0:95:
34:94:07:b8:77:19:4e:5c:c8:0f:fd:61:35:c3:40:64:96:0a:
81:5b:55:46:f0:95:98:c2:b2:fe:c4:3f:35:00:29:de:8f:3b:
42:28:78:64:f2:09:59:a5:f3:b3:1e:95:85:5c:53:69:7a:ea:
a0:b5:30:8a:cc:1a:e2:ee:ee:9f:b9:92:22:f4:e4:0d:83:bc:
c4:5f:f1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:58:05 2025 by rpki-client