Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
File: qBGiyfyN6WebsVhYGxDOrukf95E.mft (raw, json)
Hash identifier: 5WqIi20ngFqvyw3RZ0RnzHTcfOYI8D/VJj+MKOjxL1k=
Subject key identifier: E0:1D:86:17:A5:BB:8C:17:3E:F6:EC:46:82:B1:78:02:AA:90:EF:AA
Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
Certificate issuer: /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Certificate serial: 019854FC851DBDA0425DB4DB68CA453601FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
Manifest number: 1617
Signing time: Tue 29 Jul 2025 07:01:31 +0000
Manifest this update: Tue 29 Jul 2025 07:01:31 +0000
Manifest next update: Wed 30 Jul 2025 07:01:31 +0000
Files and hashes: 1: PPeyKFftPaiVCXNYTK3ZP37-8BI.roa (hash: 1x8aYa43ug+3XZe9x+qmxKaVKmQGYXXQ926Bpo3NKhs=)
2: qBGiyfyN6WebsVhYGxDOrukf95E.crl (hash: MitE//WOwfxAfwjY2AZWSJGF80LZ7xyNfnwqrIlfP6U=)
3: r7_wV3dzjpVPhKRXt9LOL6uFNoM.roa (hash: eXGrZnOiRM2nkPOyWX+HuDqKFlwEgjMo/lqsZKhSHKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:85:1d:bd:a0:42:5d:b4:db:68:ca:45:36:01:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Validity
Not Before: Jul 29 07:01:31 2025 GMT
Not After : Jul 30 07:01:31 2025 GMT
Subject: CN=e01d8617a5bb8c173ef6ec4682b17802aa90efaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:4b:67:60:7b:29:94:ec:0d:a9:e8:2d:d9:
12:63:22:45:97:62:fe:a6:0d:85:75:3f:50:df:65:
0d:a9:41:ad:97:c3:44:bd:c9:f8:44:39:24:e0:7a:
cd:32:a3:8a:71:a8:01:70:af:48:30:cb:59:e7:05:
fd:fb:f1:96:9a:e0:f9:12:90:57:4f:b1:c1:d1:e8:
be:15:80:97:f5:0c:ab:cf:03:75:eb:a7:94:e5:e3:
fc:b7:a2:ba:10:2c:50:7c:57:6c:47:b2:48:b8:9f:
42:87:39:c5:c7:23:ab:db:d9:4e:ce:85:97:d6:96:
7c:8f:e0:a1:fa:8c:57:2d:7b:a7:1f:5d:19:92:8f:
25:35:c0:11:54:34:2a:21:eb:4f:b5:62:b4:9e:ef:
00:f8:01:dc:23:11:42:10:e1:67:d7:1f:3b:8e:22:
46:cd:57:86:5b:91:2e:4c:d2:5d:b9:0c:f4:9b:8b:
07:4c:0c:b9:60:1b:46:42:9c:77:12:ff:b5:3a:de:
ba:06:18:90:74:0e:b1:ca:e0:65:b5:86:ca:f4:50:
89:e0:06:04:0b:f0:dd:d0:14:91:14:7c:10:76:5e:
33:5b:f7:2e:bb:06:91:d0:4b:60:84:eb:d4:3b:57:
97:4a:75:6f:81:a3:b4:7e:99:82:bd:ad:4f:9c:4f:
f6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1D:86:17:A5:BB:8C:17:3E:F6:EC:46:82:B1:78:02:AA:90:EF:AA
X509v3 Authority Key Identifier:
keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:38:81:92:a3:77:c0:69:d3:ea:65:23:17:69:a2:6e:da:ec:
a8:92:31:c8:99:5b:10:a3:25:0f:ee:53:61:7b:98:9c:73:14:
5a:03:67:48:24:3f:2a:d6:96:63:56:4f:86:92:2b:7d:e6:54:
b0:32:f5:9f:1c:6c:0f:b6:11:5f:94:87:3d:2f:6f:7b:af:c7:
fc:9c:4e:23:c6:71:ca:93:8c:e3:76:a0:a7:cb:5b:d9:7c:d5:
af:54:27:1f:d3:04:f0:b3:58:b8:fa:e7:f3:da:29:00:82:b3:
ad:46:9b:59:be:02:c1:9d:e5:fe:b8:e5:3b:b0:51:2c:5b:69:
4d:c6:60:99:98:05:78:59:cc:8b:71:93:15:ca:f6:90:99:86:
e5:46:e3:d2:d1:ab:03:6d:28:6e:91:41:e0:8b:d9:0c:2a:3e:
e7:0e:e4:a2:b1:7b:73:a5:bc:ca:87:e2:9b:ea:54:c1:e1:4f:
85:22:d7:17:30:42:6c:1e:e6:40:14:c2:63:f9:70:31:56:e3:
bb:8f:39:e6:bd:77:7a:99:e1:81:f1:86:a3:62:4c:1e:6f:d3:
08:3a:3e:c5:a0:d9:1a:2c:20:cc:4c:cf:c0:6c:33:7a:cc:30:
de:2f:2b:79:5d:13:72:66:22:c2:39:a4:f6:bb:4c:ee:d0:24:
2b:59:10:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:16:37 2025 by rpki-client