Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
File: qLMQBN8TWqGouUMDPbFGkbEaY90.mft (raw, json)
Hash identifier: 3u/Tapeno9Mf55j+bTsDZEEgFiSdlTZy+1XujqlWqtg=
Subject key identifier: 8A:B8:39:0B:D3:A0:09:F1:2C:98:2C:58:AD:91:CB:4F:CC:33:AA:3A
Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
Certificate issuer: /CN=a8b31004df135aa1a8b943033db14691b11a63dd
Certificate serial: 0197B6A21BA4928FE6FDBB5442BD1465250D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 13:02:46 +0000
Manifest this update: Sat 28 Jun 2025 13:02:46 +0000
Manifest next update: Sun 29 Jun 2025 13:02:46 +0000
Files and hashes: 1: 3OEik7tNKF16V3tqg6gfm44Pn9o.roa (hash: VkjODs+PPMDcywvy+ukOLTzmW2p5x8hOEfY1SjXF8hY=)
2: _DuyKPQbR1DkiE_RbE3bwhY5Urg.roa (hash: komYy8q7+/6pbFO69hkA1CXIqh7HDmdwPrOiVtmRueI=)
3: lbsbTqD_9mE7vY8Zyug_YVR-sD8.roa (hash: TyKDojoTZ/eLBbbwUhWYN2H/st4TZlYsWMMpDrArAgs=)
4: qLMQBN8TWqGouUMDPbFGkbEaY90.crl (hash: 7mjNplNz+TSFtC7o/OozdzRzc3Fy/Ze6bBccGeEW590=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:1b:a4:92:8f:e6:fd:bb:54:42:bd:14:65:25:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd
Validity
Not Before: Jun 28 13:02:46 2025 GMT
Not After : Jun 29 13:02:46 2025 GMT
Subject: CN=8ab8390bd3a009f12c982c58ad91cb4fcc33aa3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:1d:15:c3:80:44:15:b1:49:e6:e7:c4:cf:
86:dc:44:50:7a:8b:c5:eb:6e:15:b2:d6:fe:ff:b7:
ea:df:d9:c7:dc:86:d7:b3:fb:ea:80:c0:4d:26:ee:
08:70:81:49:b9:de:55:f4:73:bb:40:3d:d1:bc:dc:
62:bb:2e:22:79:d0:10:fc:fb:40:52:6c:b3:5d:f3:
eb:f6:51:ee:e8:72:dd:cb:ae:da:86:26:ac:dd:44:
75:16:24:97:81:c7:71:52:76:e1:84:44:ee:e3:fc:
a8:85:fc:33:b2:a7:93:ee:fb:b7:0e:15:8d:32:e9:
a7:0d:59:a7:e1:e1:c0:05:54:b3:9b:b7:98:ec:df:
ee:36:7c:a2:91:5e:bb:86:b9:c2:92:fa:53:79:d7:
05:7d:55:c2:f7:bb:87:61:37:ce:44:24:12:b5:cc:
90:ef:89:70:91:25:83:79:a0:4d:9c:41:7c:1a:ad:
b8:56:38:23:78:b4:6b:6d:a9:ed:0d:0e:e1:39:0f:
89:e6:b3:e2:aa:4c:a4:48:65:56:2a:ce:a0:6b:96:
2a:bc:c9:8e:41:a9:93:e4:89:b9:b5:00:62:79:00:
c2:89:9c:52:f5:2a:01:44:bd:19:93:e9:26:19:18:
37:37:2f:8f:7f:96:74:88:c8:aa:50:14:d6:b1:c4:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B8:39:0B:D3:A0:09:F1:2C:98:2C:58:AD:91:CB:4F:CC:33:AA:3A
X509v3 Authority Key Identifier:
keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:af:52:d2:24:ce:9a:ee:51:f0:31:43:eb:aa:16:96:9e:89:
7f:44:7f:a1:a0:99:af:93:8c:e0:60:4b:e0:38:4c:02:63:5f:
8f:b9:7b:e2:dd:08:90:3d:43:ee:fd:fa:4a:b5:4a:8b:e4:3f:
17:2d:cf:c4:dc:1b:b0:17:cf:62:c2:a9:34:b2:6a:14:a9:62:
b8:d6:0c:b3:af:89:b3:07:23:be:1b:5b:f6:9b:98:4f:49:5b:
c9:86:74:f6:a5:52:a9:4d:9d:4d:56:b3:e9:a7:b6:b9:7e:35:
b1:88:68:77:02:b3:de:be:78:6b:f9:89:b6:a8:40:57:a7:48:
75:85:24:9c:eb:ca:57:c2:a4:96:49:f5:4c:67:3f:13:01:6d:
09:80:31:3b:97:51:78:6e:94:f8:50:8e:ab:5b:77:eb:31:54:
a4:55:17:7d:cd:0c:b2:4b:f1:f3:1c:c5:2c:80:96:c3:12:d9:
5b:11:e3:4e:67:57:7a:56:05:64:80:4d:4a:ea:d2:c0:5f:06:
64:88:b1:6f:b9:7a:c5:9f:96:ba:55:c1:05:92:f3:05:e5:df:
82:cc:7b:bd:12:3b:98:4f:7a:70:f4:a1:66:99:c6:bb:78:50:
07:fc:18:67:87:fa:dc:10:38:37:e9:e4:72:2e:19:59:d1:fb:
d0:eb:82:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:59 2025 by rpki-client