Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
File: qDBcblgpStDtUWL6hCnaUWVlOTA.mft (raw, json)
Hash identifier: Bzw9Zl436Zzse58uAXq1d0YwBy3L4I1Sd5VEbYu85ow=
Subject key identifier: F1:BC:27:CD:DE:0F:58:0D:42:8C:B6:45:4B:07:48:63:9A:D1:FF:A7
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial: 0197B6D74EFA8353ED27FF23F8A3764649C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 14:00:53 +0000
Manifest this update: Sat 28 Jun 2025 14:00:53 +0000
Manifest next update: Sun 29 Jun 2025 14:00:53 +0000
Files and hashes: 1: K1hHLihKHxHk06eTdbGXntsm7n0.roa (hash: L22VRHHVigykudQA1GmcYoeypbh6Yu5VUYyqOcGQaXE=)
2: qDBcblgpStDtUWL6hCnaUWVlOTA.crl (hash: st2NgA7RxvFakb9sG5J91tsB95WCYC3C251DNc8HeH4=)
3: wPNMxy1HP_1cYFy7utzNj0qnsDA.roa (hash: yEdNFFWb7AqdqiQvhXrarz8nG5eHA1sOBjlHc/SL+pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4e:fa:83:53:ed:27:ff:23:f8:a3:76:46:49:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
Validity
Not Before: Jun 28 14:00:53 2025 GMT
Not After : Jun 29 14:00:53 2025 GMT
Subject: CN=f1bc27cdde0f580d428cb6454b0748639ad1ffa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:42:91:95:ca:23:21:d4:cd:a8:54:e6:0e:0d:
64:38:fc:4e:95:5b:56:c2:fc:c7:47:92:62:33:19:
ff:0e:00:95:2e:b2:09:10:8d:d8:49:29:1d:52:e0:
6f:38:37:4f:58:cd:75:33:92:3a:85:80:25:25:1f:
57:8d:2f:30:4f:51:f2:80:06:d3:c2:ff:58:bf:44:
68:4f:5d:1c:72:12:ab:b1:d8:dd:1f:f5:d6:33:e5:
75:d0:28:c8:c1:10:36:73:af:81:bc:c5:ed:68:20:
56:d0:a0:f9:ff:78:b7:57:3e:fb:87:44:4d:c1:ee:
59:52:90:ed:4f:9c:44:82:bd:f8:b7:b4:ca:33:3e:
53:e5:8c:50:ea:6a:4a:d3:aa:2e:80:27:bc:15:33:
66:49:42:12:b3:fc:82:60:5a:05:4c:12:91:11:04:
63:f4:c8:63:11:9e:dd:ed:e9:49:ff:32:cf:c4:34:
73:cd:b4:49:b9:41:af:3c:a4:68:20:0e:f4:da:5c:
e9:87:a0:e4:cc:ec:1a:f5:11:b7:ff:be:e1:af:be:
5f:20:0b:7b:8d:38:36:50:82:90:8d:7c:58:7d:45:
2a:ac:a7:a9:61:98:c8:9c:c7:11:4a:b8:ef:93:7e:
4a:68:ad:55:5b:08:38:08:9d:9e:31:b7:9d:4c:f8:
cc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BC:27:CD:DE:0F:58:0D:42:8C:B6:45:4B:07:48:63:9A:D1:FF:A7
X509v3 Authority Key Identifier:
keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ea:85:2d:26:26:30:15:74:48:57:d7:ec:26:34:e7:6a:49:
77:94:5f:7b:e3:c3:db:0c:15:9a:05:a2:25:ed:71:f1:cc:0e:
4f:e2:a4:49:ac:eb:13:84:e2:44:f7:6a:07:f2:92:6a:d9:3f:
67:41:d8:e6:b1:f0:bd:44:16:11:6f:4b:af:19:39:ea:c4:4d:
56:8f:ff:82:ce:c8:a1:69:46:ce:ca:34:c8:3b:5e:c1:2a:d7:
50:6b:2a:5b:ef:1f:76:30:13:42:d8:1b:de:74:18:85:a4:b9:
54:9d:94:b3:1e:f0:6b:03:7e:84:32:bb:e9:04:3b:97:98:d1:
bb:21:d5:c8:ae:37:ec:8a:c9:73:54:df:64:d7:75:df:2b:01:
18:5b:9c:d4:40:2a:e3:bd:a9:5d:db:8e:ac:aa:38:1a:e8:a5:
5b:7b:aa:64:a4:7b:af:d4:75:54:28:fc:67:c5:d4:ca:26:5f:
c1:d0:62:fd:b0:1a:3b:5f:46:7f:0b:40:d9:cc:b8:50:80:a8:
05:78:30:04:89:a6:2a:b0:d0:62:7c:83:b4:4f:40:62:de:6e:
98:47:e1:63:5a:8f:1d:ee:68:fb:73:74:d1:16:77:dc:6a:4b:
25:0f:ad:51:64:48:64:b3:8e:cb:17:03:0a:9d:f1:53:ed:23:
3a:e1:0c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:32 2025 by rpki-client