Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
File: qBGiyfyN6WebsVhYGxDOrukf95E.mft (raw, json)
Hash identifier: Zq2Myv8T4bKTuI5WBvvn8L3k6EimoHHWcOjBEcauN/s=
Subject key identifier: 0B:CA:8F:4D:B7:D5:D9:87:5D:AE:C6:EC:CE:D3:C8:08:A4:C3:3A:E0
Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
Certificate issuer: /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Certificate serial: 01974A7AD87DB81295419476104BE5436711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
Manifest number: 158D
Signing time: Sat 07 Jun 2025 13:00:54 +0000
Manifest this update: Sat 07 Jun 2025 13:00:54 +0000
Manifest next update: Sun 08 Jun 2025 13:00:54 +0000
Files and hashes: 1: PPeyKFftPaiVCXNYTK3ZP37-8BI.roa (hash: 1x8aYa43ug+3XZe9x+qmxKaVKmQGYXXQ926Bpo3NKhs=)
2: qBGiyfyN6WebsVhYGxDOrukf95E.crl (hash: zcsbBCLKuZUOHjR/U3rZl4OJBNCUt6o9aLl9ovf2tjo=)
3: r7_wV3dzjpVPhKRXt9LOL6uFNoM.roa (hash: eXGrZnOiRM2nkPOyWX+HuDqKFlwEgjMo/lqsZKhSHKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:d8:7d:b8:12:95:41:94:76:10:4b:e5:43:67:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Validity
Not Before: Jun 7 13:00:54 2025 GMT
Not After : Jun 8 13:00:54 2025 GMT
Subject: CN=0bca8f4db7d5d9875daec6ecced3c808a4c33ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:cd:2c:04:d4:bf:e4:52:30:42:47:47:2b:
4b:52:dc:72:ed:50:47:47:99:f8:01:b6:84:bc:80:
9c:ab:7f:bc:5d:77:82:63:69:49:97:89:7c:35:bc:
38:53:46:be:f9:f6:4e:d5:f2:53:32:27:02:6e:72:
df:be:c6:32:8b:8f:b3:f1:ff:94:6e:62:2a:d4:ae:
ae:34:c7:1c:80:b9:46:47:23:d1:fd:22:d0:23:31:
e7:da:d9:df:e2:8d:87:af:f6:a8:0a:c1:dc:ea:b4:
b8:27:37:46:53:51:84:fd:eb:6c:09:90:3a:cd:d1:
0a:3e:05:f9:e1:0f:ad:6e:4b:b9:08:73:a9:5b:24:
1c:b7:7d:96:e7:4f:ae:7a:7d:dc:24:13:63:98:f5:
65:f5:59:98:9d:01:f2:c5:79:57:95:77:10:f7:05:
09:e3:66:21:46:a9:fa:e4:24:7b:4b:7e:70:b2:f8:
05:f7:1b:a6:af:99:b5:24:2c:fd:26:05:23:09:44:
bc:80:9e:bd:c4:9b:2e:bc:e6:d0:d5:3f:88:18:f3:
89:82:f6:73:be:98:68:e5:5b:db:11:3e:af:4b:77:
cc:2b:34:ca:fb:45:9f:4e:9d:f5:0b:7d:6a:96:9a:
27:a1:33:47:67:88:a7:d5:ad:6d:39:a6:57:1a:99:
83:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CA:8F:4D:B7:D5:D9:87:5D:AE:C6:EC:CE:D3:C8:08:A4:C3:3A:E0
X509v3 Authority Key Identifier:
keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c5:f8:8e:89:15:77:2e:d4:ec:23:70:7c:63:61:fe:2d:50:
a5:c0:9a:ca:f2:9c:35:bc:62:48:33:83:64:1e:b5:26:10:13:
e0:66:b4:bf:a0:36:cb:24:1b:32:55:5e:d3:b3:b9:90:0a:22:
fe:98:5d:fb:aa:76:21:7a:c9:17:c1:07:e5:a2:d6:82:e6:11:
0a:e5:6d:28:20:20:ba:0b:b3:21:b9:d8:9b:35:d8:5c:7e:36:
60:c7:6d:3a:b1:ef:1b:89:6e:f7:0f:19:4b:3c:7c:14:bd:71:
92:a7:36:b8:5c:07:5d:f3:e0:0b:cc:3f:0d:df:0d:fa:75:ff:
38:fc:f1:0a:0d:4b:d1:e1:c4:81:fe:7f:a9:9f:fc:b6:0f:0e:
ed:f4:fc:a3:aa:62:f1:6c:9d:71:1e:a0:f7:7e:2d:c2:a3:ad:
ff:3b:bd:fc:a2:a5:0f:94:c1:39:86:d7:f0:a0:50:62:1c:15:
1b:9c:02:33:1e:47:ac:62:93:83:75:06:03:52:21:8c:af:9e:
be:87:c4:b1:af:c4:27:1e:b5:18:09:0e:62:97:6a:ec:96:7d:
42:46:75:db:b1:21:0a:85:e8:c6:90:48:8c:5c:6c:71:f9:39:
98:48:03:12:38:48:4f:d5:ab:b8:8f:7e:2e:7e:01:24:c1:c6:
eb:50:54:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:23:10 2025 by rpki-client