Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
File: qGWA4YrW_43JQr6IPBbei3MflgU.mft (raw, json)
Hash identifier: epWIR8VyQHGS2/I2OZnNaAHOvzEjfYos5yCl53HRbEQ=
Subject key identifier: 14:AD:F3:A3:74:7D:FA:6C:0E:83:3D:5A:4F:02:53:51:90:64:44:E1
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Certificate issuer: /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial: 0197C5A584B9AAAD9DDD586675465B0480C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
Manifest number: 15CC
Signing time: Tue 01 Jul 2025 11:00:48 +0000
Manifest this update: Tue 01 Jul 2025 11:00:48 +0000
Manifest next update: Wed 02 Jul 2025 11:00:48 +0000
Files and hashes: 1: 197pYnG46mucdaOjzAIW-0FvLzY.roa (hash: BR12QmTAjX/RgEKW95SxAOTfhAUiEU3sJOAlauFSs3o=)
2: IAgL9Rqsax5Ubj9r-wZ6tomx5l4.roa (hash: N26/KKGVSMUch7z4T5mn9MTk6NJ1368D+UG3bVNSWBA=)
3: RXbwxnxv5i77bPKXOPNg3gLHQ2Q.roa (hash: Hb7ewCgNUReilTcVx5Y6r0li4yOFHBvAH9Jj35wZEN0=)
4: kgbZgs6-Yl9779KCqxnYBmplLhc.roa (hash: qc6AvzGUC9pOX7uyW0pISf+jcmwsR8CrVQA4q8kjZA8=)
5: ma2RNCPOqKr6px7ttaC3OYadV5M.roa (hash: 4QXUUTopAIkZT+ngreE21xMHUG4bG/w+QgmObpcV9bI=)
6: qGWA4YrW_43JQr6IPBbei3MflgU.crl (hash: +Lm+4cZ/v6Mr0CRHJsF+VcMJPMFJob4hwB3J+MWSzSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a5:84:b9:aa:ad:9d:dd:58:66:75:46:5b:04:80:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Validity
Not Before: Jul 1 11:00:48 2025 GMT
Not After : Jul 2 11:00:48 2025 GMT
Subject: CN=14adf3a3747dfa6c0e833d5a4f025351906444e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:35:73:e7:39:bc:07:6d:36:b6:a4:2b:37:
5d:7d:3e:bb:80:30:61:81:c7:f9:12:19:ef:ac:09:
79:26:0c:cd:6c:15:2b:fb:b6:14:32:99:9b:b2:15:
54:d6:37:1e:60:10:22:ac:57:36:5a:77:3d:e9:3f:
c7:9b:11:c5:20:37:0b:63:0c:b2:2e:7a:9f:31:0c:
00:4d:51:27:e7:58:0c:56:00:a3:3b:8c:7e:8b:60:
b0:23:5e:b3:fd:c3:63:65:d5:d2:e6:99:ca:e7:72:
6b:1a:1f:ce:2e:9d:34:8d:60:5d:bf:2e:e7:58:a6:
30:26:96:91:9d:35:4c:06:4d:08:27:d9:65:83:82:
6d:e9:31:40:22:25:91:37:a3:a3:49:ac:d9:6c:61:
d8:96:95:41:ed:d6:6d:1a:9f:3f:91:ae:22:9a:91:
14:ec:cf:53:ee:d4:90:84:ca:78:1d:4f:41:2f:9f:
55:3f:bf:ec:c0:99:ca:7a:e0:1b:c7:00:fd:6a:0a:
7a:ce:4c:b0:13:8b:47:24:e4:8c:42:05:1b:79:65:
b7:31:74:70:85:1d:5e:05:78:3e:09:f2:39:9b:63:
63:f1:21:42:c3:f9:fb:b4:c5:53:e4:75:d7:79:af:
73:17:f4:2e:af:b1:73:49:69:24:74:f2:7c:5a:1f:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AD:F3:A3:74:7D:FA:6C:0E:83:3D:5A:4F:02:53:51:90:64:44:E1
X509v3 Authority Key Identifier:
keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1c:6c:5b:4c:80:65:93:cb:c4:1c:5a:ec:0a:49:7a:d8:ac:
5a:45:ea:85:29:e0:d0:4f:63:a3:7d:ca:3e:38:21:16:3b:ea:
44:a1:5a:aa:c2:01:c2:d8:43:ff:63:79:b8:32:a0:58:2a:7d:
9b:e3:84:d9:53:f5:45:dc:60:30:ae:50:3c:92:f2:65:4c:f2:
75:f1:ec:5c:b5:a1:1b:ef:eb:d8:b7:f8:69:04:2e:bd:08:68:
c2:3c:c4:9a:c9:26:cf:ea:f1:a6:8f:d6:09:df:c1:3b:ba:24:
9e:70:16:25:2e:92:6a:e6:78:05:06:16:7e:b2:fc:0c:e5:66:
13:08:c9:b2:5a:43:17:c1:14:64:c1:65:ee:0d:00:a1:6f:39:
69:72:dd:c5:c3:f8:04:8a:2e:ad:0a:96:c2:23:77:a1:74:da:
44:f3:20:ae:16:ad:ed:09:b3:97:87:6a:ac:68:32:71:ed:94:
f8:49:dd:cd:b7:3c:9a:00:b1:c0:50:c9:15:5b:66:e6:e3:eb:
8b:c5:a1:33:19:f0:7f:72:91:10:89:6e:87:6d:c9:90:a7:50:
da:23:20:57:4a:5f:18:af:27:ac:a4:7a:c8:b8:fb:6a:fa:f9:
3c:7b:7c:42:c4:35:3a:db:87:03:41:e2:c7:02:93:06:a3:c8:
ad:f6:ac:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:19:48 2025 by rpki-client