Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
File: qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft (raw, json)
Hash identifier: mbrkCqukvDnHg70KaTb2JZbQpcTyn+N8qzitjxN3gUE=
Subject key identifier: A8:ED:AD:4C:88:54:0F:6F:F8:A0:38:D1:D2:02:02:16:02:F7:2D:A7
Authority key identifier: A8:18:0B:F1:A7:75:0B:3D:22:F9:35:85:56:E1:1F:0F:F7:66:A6:19
Certificate issuer: /CN=a8180bf1a7750b3d22f9358556e11f0ff766a619
Certificate serial: 01993B0291B1D344149C848BB63F604A0E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
Manifest number: 0567
Signing time: Thu 11 Sep 2025 23:00:48 +0000
Manifest this update: Thu 11 Sep 2025 23:00:48 +0000
Manifest next update: Fri 12 Sep 2025 23:00:48 +0000
Files and hashes: 1: n5eJkZFicuorP_7YUyglUyaxuUw.roa (hash: X7lChHAuDqiBzbpN9aFseejb0s7SiAcnR2Lo7vuWZMI=)
2: qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl (hash: 4xOo74SMi0XWFtourAv+yqZgz3SEGoFoudqYljXrgDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:02:91:b1:d3:44:14:9c:84:8b:b6:3f:60:4a:0e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8180bf1a7750b3d22f9358556e11f0ff766a619
Validity
Not Before: Sep 11 23:00:48 2025 GMT
Not After : Sep 12 23:00:48 2025 GMT
Subject: CN=a8edad4c88540f6ff8a038d1d202021602f72da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:1b:e2:71:50:a8:ec:5c:a3:14:e0:a7:ae:
aa:32:ba:19:85:fa:02:90:9d:f2:e4:9b:41:bb:06:
da:20:8d:34:9c:ac:22:e4:2c:b5:ae:15:c5:11:cc:
be:58:4f:6c:66:5a:36:d2:54:16:3b:17:95:1d:0d:
73:40:f3:96:b6:71:aa:61:34:ee:61:ce:0d:b3:0d:
6d:b7:8f:4b:0d:48:72:fd:13:0f:2d:a8:37:49:a3:
6b:b3:5b:0f:1b:28:9a:2a:5a:b0:c5:ed:e9:bc:55:
d0:90:b5:8e:69:3f:40:86:f5:78:9c:df:14:67:12:
69:6d:95:bd:55:e9:3b:47:01:d8:94:2f:6b:5b:98:
e3:04:f1:b5:58:14:aa:31:db:aa:bb:d3:24:96:25:
cd:b5:58:17:3f:a4:d4:94:33:03:90:c5:21:2a:86:
2c:c3:ab:ef:93:e7:ba:af:11:be:4a:c9:ee:94:ae:
91:0c:2e:cc:b9:a9:91:de:01:5c:f0:8f:30:4c:04:
22:e7:56:33:1b:8a:cb:38:28:f6:a7:95:07:fb:01:
58:a4:12:9a:e2:91:4e:3f:e7:73:5f:5a:93:0c:fd:
36:4c:d6:c0:ef:f2:0c:34:0f:5f:0e:0b:1a:f4:65:
d5:2e:52:65:d7:e9:68:81:58:ec:d6:61:7c:8c:7f:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:ED:AD:4C:88:54:0F:6F:F8:A0:38:D1:D2:02:02:16:02:F7:2D:A7
X509v3 Authority Key Identifier:
keyid:A8:18:0B:F1:A7:75:0B:3D:22:F9:35:85:56:E1:1F:0F:F7:66:A6:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:37:5b:f5:35:cc:e3:4e:81:28:bb:17:67:89:20:24:32:ca:
99:81:de:b2:f0:59:b0:6f:b9:c8:e7:09:ad:18:b7:ef:a6:ba:
b1:a9:e8:05:cd:03:0d:35:09:d0:e0:85:67:50:03:98:6d:5e:
33:c1:1d:8c:20:4f:33:44:87:09:83:b1:af:14:fa:1d:71:92:
38:6f:0e:41:2f:fd:3e:8c:f9:a3:81:5c:09:f1:43:1b:51:c1:
6e:87:08:5d:30:6d:87:07:89:d2:a9:7f:0a:c9:51:a9:a5:59:
28:65:50:6a:2f:6d:a5:72:07:1f:2b:44:13:4c:ef:08:15:fa:
26:52:6f:a8:3f:6e:90:b3:d3:07:6c:9f:32:4d:6e:4c:bf:16:
27:d5:3e:33:59:a1:cc:6b:2e:0d:4b:9e:02:df:10:4b:40:07:
9c:ca:fa:6e:86:df:e4:63:dc:fb:1a:e9:a5:1e:bc:77:91:2d:
77:f4:2c:ae:b7:51:e6:f4:40:d1:ab:95:63:28:03:89:23:aa:
9a:b5:97:b3:ad:8a:6d:35:34:5e:45:c1:36:da:0c:7c:46:09:
c6:ec:f0:04:7e:e2:39:24:41:29:50:ca:72:60:d2:83:ad:c5:
49:bd:e4:53:24:06:ef:26:b1:7f:37:28:76:d9:9e:3b:80:6c:
d8:b3:5d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 06:13:37 2025 by rpki-client