Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: uvxHYyx0FKuoGt+XwGl0CDFVLmz6Q3rzAEGPcQjsFtw=
Subject key identifier: BB:F6:7C:AD:3D:F9:88:25:00:C8:54:69:CC:33:20:99:A7:85:E8:79
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 01984A0A24F8BE1094C4C6CA1AAD3288A057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 12F6
Signing time: Sun 27 Jul 2025 04:00:35 +0000
Manifest this update: Sun 27 Jul 2025 04:00:35 +0000
Manifest next update: Mon 28 Jul 2025 04:00:35 +0000
Files and hashes: 1: KgttFz6IodgLZeLta7RLneUK6Ro.roa (hash: IYP5zin82ggYoVWQmz/dnK+iP1pdsQlzD5cbI7kYfRQ=)
2: T1_HIEmvBSvtxZPEKcCF4aZsCPs.roa (hash: 0CEooqGIOmFXehL8CMLN24SE73s+yk1wsCLjJu3HBUc=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: EPVMgnZFeH6vSOctxXo8LrFBawa4kgOVosDvditEmNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:24:f8:be:10:94:c4:c6:ca:1a:ad:32:88:a0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Jul 27 04:00:35 2025 GMT
Not After : Jul 28 04:00:35 2025 GMT
Subject: CN=bbf67cad3df9882500c85469cc332099a785e879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:39:94:a1:5d:09:8d:3e:04:83:89:23:20:
b0:97:32:fb:23:84:da:2f:7d:19:d5:e0:06:58:92:
a3:bf:9e:40:eb:b3:db:f1:c0:73:fd:50:ee:47:ae:
4a:8b:c8:01:17:13:4e:4d:9c:48:d9:c7:16:b1:45:
a5:4f:1a:22:b1:fa:42:ea:6d:fd:e1:dd:59:6a:60:
c2:2d:a1:26:fa:0a:85:f5:7e:7b:82:89:ff:49:e3:
98:d0:fc:07:93:43:06:c2:d8:28:88:1e:fe:e5:e3:
c9:60:c9:0f:c7:ef:35:b4:55:af:66:7b:7d:6c:c8:
a6:24:29:ba:46:bf:dd:49:29:a7:07:3b:1d:17:ae:
94:4f:a0:88:4d:e2:2c:06:c3:55:9f:81:e3:6e:7c:
da:87:41:7d:5f:bd:1b:61:83:56:06:ba:a3:db:07:
02:ac:7a:9d:cc:77:d8:49:ff:fa:6e:a5:05:1b:2c:
3b:cf:6a:36:3f:c1:7e:3b:d9:76:89:9e:d4:76:0f:
00:13:76:9a:68:06:af:06:30:8d:39:4b:ab:04:14:
27:a1:7a:9c:2f:bb:72:93:56:45:15:80:e0:9e:f3:
d9:72:5d:e6:af:cf:b9:83:ac:04:0f:b8:ca:77:c4:
5e:13:db:36:ac:3e:e7:1f:6c:f1:62:7c:2f:c9:83:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F6:7C:AD:3D:F9:88:25:00:C8:54:69:CC:33:20:99:A7:85:E8:79
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:49:1c:19:5a:40:30:99:b1:66:29:c9:9a:22:c4:0d:26:28:
fa:ef:18:35:60:46:e6:bd:4e:5e:af:d3:58:13:cf:c6:e7:6e:
3a:bf:f6:a5:a9:14:13:df:08:f8:53:4b:17:c3:a6:df:61:2e:
ac:0d:67:8c:f1:cb:ef:8f:e4:cd:58:b5:3a:e5:90:8d:74:b6:
96:0f:7f:f8:fe:15:5b:5f:81:32:7f:76:cf:2d:dd:3f:08:52:
15:be:ab:3e:57:7a:f1:13:66:41:a3:82:49:d7:1e:65:1a:69:
ec:f6:8f:2d:f9:09:c7:e9:12:35:a2:b5:88:c3:09:05:c0:2d:
6b:86:7c:32:01:5e:4f:27:6b:48:9d:17:0d:94:65:4c:37:71:
c4:32:15:ed:f1:9f:ca:ef:22:26:60:a6:5a:da:38:14:2a:72:
1c:94:13:cd:32:23:e0:7c:10:de:3a:62:59:85:60:16:a6:73:
99:2e:b7:5e:04:9b:6c:5b:dc:a7:f9:4d:63:5a:30:40:cc:c6:
d9:6e:51:2b:c7:13:24:45:87:1a:49:fe:aa:41:45:d9:30:9a:
cf:8d:d5:ce:8c:0b:5b:84:a9:81:8b:38:65:98:68:29:d5:00:
b6:ca:d8:aa:ef:cb:c3:49:7a:1c:90:ac:3d:f0:8a:3d:b9:50:
4a:35:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:55:59 2025 by rpki-client