Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
File: qDBcblgpStDtUWL6hCnaUWVlOTA.mft (raw, json)
Hash identifier: rZMCrdvcnBbgqD3fDXGwmvJquS0JlkHGooiBpD5qDeI=
Subject key identifier: E9:C3:E5:9A:B6:6E:58:33:C1:7E:73:E9:FD:1C:FC:F6:2B:8E:45:FF
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial: 019748C34B83E063E4774BE191E3DD9404AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 05:00:47 +0000
Manifest this update: Sat 07 Jun 2025 05:00:47 +0000
Manifest next update: Sun 08 Jun 2025 05:00:47 +0000
Files and hashes: 1: K1hHLihKHxHk06eTdbGXntsm7n0.roa (hash: L22VRHHVigykudQA1GmcYoeypbh6Yu5VUYyqOcGQaXE=)
2: qDBcblgpStDtUWL6hCnaUWVlOTA.crl (hash: DCtHjHk0VeB5gQFNru0y6YNaZTMOW/exEQxqCYD647U=)
3: wPNMxy1HP_1cYFy7utzNj0qnsDA.roa (hash: yEdNFFWb7AqdqiQvhXrarz8nG5eHA1sOBjlHc/SL+pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:4b:83:e0:63:e4:77:4b:e1:91:e3:dd:94:04:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
Validity
Not Before: Jun 7 05:00:47 2025 GMT
Not After : Jun 8 05:00:47 2025 GMT
Subject: CN=e9c3e59ab66e5833c17e73e9fd1cfcf62b8e45ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4d:85:33:b3:85:77:c9:03:d0:ba:9d:fb:97:
2d:8b:69:a7:30:6c:c4:5a:55:5d:96:03:8d:aa:bb:
c3:70:be:fb:8c:c3:54:d4:81:d2:f4:f2:74:7b:fb:
2b:0e:59:72:0a:21:ab:16:e1:6b:65:8b:9e:e8:d7:
41:9a:99:c7:0b:e0:ae:cd:13:32:81:e7:57:e5:f2:
24:85:d0:99:34:25:a0:8f:29:7c:70:b2:c6:ca:b3:
94:4a:68:7a:bb:47:55:de:69:a2:cd:d7:c9:01:c4:
cf:67:83:0c:02:54:1f:61:53:49:42:6b:87:ff:b8:
e1:21:9e:0d:f9:e1:b6:99:69:e4:ba:05:d2:b4:69:
c4:37:af:79:2f:de:69:62:ef:ff:52:1a:18:b1:2e:
3d:92:84:79:97:12:d5:82:c4:9f:2c:09:24:90:e4:
ba:c0:8c:e9:c2:c8:20:23:7c:b0:8d:17:fd:1f:00:
e1:6f:07:32:44:36:15:69:3f:ec:da:ac:7f:40:e7:
63:99:15:91:c7:48:7a:18:a7:8c:e6:80:ad:d4:96:
cc:01:16:63:1c:7a:66:b8:0c:1c:67:53:17:10:a7:
f5:fb:05:8a:46:5b:a1:1a:29:4e:16:8d:46:7f:71:
36:c5:dd:a7:67:6f:c0:99:2b:0c:e0:2a:af:d4:76:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C3:E5:9A:B6:6E:58:33:C1:7E:73:E9:FD:1C:FC:F6:2B:8E:45:FF
X509v3 Authority Key Identifier:
keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:73:51:81:f9:7d:ac:eb:9e:70:8b:c7:cc:d5:25:89:0c:9f:
c3:cb:fd:92:0e:f8:16:81:55:68:7a:0d:47:a8:64:8b:a3:00:
81:ed:c4:0a:d9:06:5a:ef:91:75:8f:0f:57:f4:b5:34:ee:a2:
41:67:ba:33:1c:c5:9e:80:07:60:2c:08:d1:2b:06:98:c7:7d:
73:1f:7c:fc:3f:9c:ec:5d:4f:dd:c8:cf:dd:63:b1:7f:a5:83:
29:39:13:0d:6a:e7:50:a9:0b:6e:af:86:f6:09:9d:5d:0b:0f:
88:85:5c:40:ea:01:45:5b:37:32:4c:9f:d3:95:8f:e9:5f:36:
2f:10:9d:37:30:b4:3a:44:62:6b:03:05:b8:ca:e3:77:73:d1:
05:51:dd:ee:ff:c4:f4:a0:08:cf:7e:49:c8:33:3f:5f:6e:04:
4f:34:7f:e3:ff:c9:1a:bd:ec:14:b2:60:5b:f2:ec:c6:26:fa:
da:e8:ae:da:63:5f:d0:28:3b:46:98:cc:15:03:0a:a4:4a:09:
c2:6e:17:b4:cd:5f:5a:40:ad:6b:b8:e5:3a:69:e0:0c:30:55:
04:83:a8:71:36:fb:cd:71:ff:36:91:09:d2:aa:ed:9c:58:f4:
93:76:0a:e5:94:1b:27:0c:c8:45:21:ff:e4:f0:1d:68:18:16:
b3:63:e1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:02 2025 by rpki-client