Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
File: qMbzkzUMd1mMEhrNPJL3BIV274k.mft (raw, json)
Hash identifier: dgtvK8Mz2t/ejRNISiAEq4lr+MG4JKtEEjfiIMhVoZ0=
Subject key identifier: 7A:2B:A2:85:C9:32:38:C2:EF:3B:0F:A4:8D:AA:96:EC:B4:D5:18:4F
Authority key identifier: A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
Certificate issuer: /CN=a8c6f393350c77598c121acd3c92f7048576ef89
Certificate serial: 0197C23799F53266FAF1CD22951A7760B5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
Manifest number: 0CF1
Signing time: Mon 30 Jun 2025 19:01:52 +0000
Manifest this update: Mon 30 Jun 2025 19:01:52 +0000
Manifest next update: Tue 01 Jul 2025 19:01:52 +0000
Files and hashes: 1: eOh7otVHHrYHGXBG7XugLjFkG3I.roa (hash: jBij6Zpdi8PdzGdFEr+QptijCvWCfUOl+3jki1c2vMs=)
2: lCDqNprGOb5vTF01oJ8hwQqZCRE.roa (hash: mFZkrlVA4mVLiefirb6z2hXCAJmumM9YtxbYwU/yy10=)
3: qMbzkzUMd1mMEhrNPJL3BIV274k.crl (hash: buqXlusFAInnoCwefsfMCpEZQhMOVoWeq+Rz76smFaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:99:f5:32:66:fa:f1:cd:22:95:1a:77:60:b5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6f393350c77598c121acd3c92f7048576ef89
Validity
Not Before: Jun 30 19:01:52 2025 GMT
Not After : Jul 1 19:01:52 2025 GMT
Subject: CN=7a2ba285c93238c2ef3b0fa48daa96ecb4d5184f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a3:9e:cb:8b:b8:d9:28:ce:02:b5:ab:9e:3e:
ee:02:c2:75:e1:e9:0d:3e:1c:c2:ec:8a:a6:c3:8a:
6f:23:b2:83:cf:39:8e:44:ae:0e:a4:3b:ae:0a:0c:
aa:6d:b2:08:e5:73:ee:82:46:82:f9:0d:49:9c:8e:
57:83:9c:26:b8:25:36:81:ff:99:62:76:5c:05:e1:
c7:7a:57:4e:f6:37:39:44:9d:58:37:93:b3:4d:c4:
ed:e0:e4:e6:de:d4:3a:b5:5d:dd:79:30:07:59:66:
c3:f9:28:93:c1:34:42:03:67:9b:35:4e:f4:50:74:
30:41:0d:f9:f5:ed:19:e7:e8:1e:cb:ef:85:ce:fd:
10:cb:d2:8c:ba:63:20:87:b5:87:3a:3e:fd:e6:57:
e0:1f:1d:d7:03:63:d3:aa:97:08:ef:d7:8c:06:76:
82:45:fc:e6:52:d9:35:31:d9:a6:c7:5b:76:eb:0a:
14:e4:7d:f9:c0:75:b3:38:47:fe:38:7f:ed:f1:73:
ca:95:1c:a9:28:31:1d:7f:4f:7d:b1:71:6b:9b:4a:
5a:36:4f:5e:2a:34:0e:ff:d0:a2:dd:a7:a8:30:33:
bc:02:76:c7:09:74:33:26:a6:bd:6c:b4:29:d5:85:
41:6c:26:41:c6:10:2d:35:1a:5c:47:c9:16:94:33:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2B:A2:85:C9:32:38:C2:EF:3B:0F:A4:8D:AA:96:EC:B4:D5:18:4F
X509v3 Authority Key Identifier:
keyid:A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:09:cf:67:ca:fb:f6:2e:fc:34:7b:2e:18:dd:cb:38:47:02:
73:87:d9:ff:41:99:7b:a2:d0:c6:09:a2:3e:c4:c5:05:2b:a5:
17:21:c1:ad:4d:ca:0e:66:00:74:84:17:b8:ed:47:4a:bd:ea:
90:bf:b6:e7:29:e6:94:bf:a0:11:7b:18:4c:d0:b2:b2:69:69:
fd:2f:9c:f2:52:79:b3:f3:37:7c:ba:b4:7a:c2:38:37:4e:68:
c4:43:0d:32:cd:28:f4:6f:9f:ac:82:59:4f:04:69:04:75:cf:
ac:6f:d4:1b:c2:b3:12:ed:5f:91:75:91:b9:a7:70:b6:86:b1:
35:ef:95:0e:4c:07:ab:19:1a:72:55:82:40:a3:5d:df:d1:78:
c6:66:de:d6:e8:19:dd:10:c1:01:e3:9c:a5:9d:25:44:56:9d:
88:d7:fa:ed:ba:bf:18:59:c8:34:e1:79:e3:b2:ef:05:0c:fa:
bb:c2:b9:68:47:aa:95:c1:b9:5f:a4:95:21:81:d6:5c:f5:55:
c2:c6:c2:52:40:cb:96:c2:f6:f6:77:04:09:8c:29:5f:6b:b8:
4d:ff:b2:e5:b3:e8:0d:e2:b9:04:20:1e:37:83:7b:a0:ed:a0:
52:20:5c:9a:20:74:73:0e:f2:29:d2:84:45:71:a3:b2:a3:f3:
4e:f6:56:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:15:03 2025 by rpki-client