
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: QA8xATkbon3wb70JRBwsDU138zlrsCh1OZctFayJ2FM=
Subject key identifier: 3B:A0:BB:55:D8:F5:BA:85:2B:74:42:EB:81:43:F3:B6:B2:8E:FC:75
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 0197B88F304982B440E3DF518BC3DA201752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:01:21 +0000
Manifest this update: Sat 28 Jun 2025 22:01:21 +0000
Manifest next update: Sun 29 Jun 2025 22:01:21 +0000
Files and hashes: 1: 2ut4gcmR75V3_QB4c_0bjHQRV8A.roa (hash: Z/Z7sYO20kciWO7Cd+RFwgDueOu/lt3nwibhugXBGT8=)
2: 8IrzZekkYTKoZhthQz-Ja8OIvRA.roa (hash: 5Ew3dl4XH0P4aPETfurdIQU/EHcW5/rwYQ03Cgm05/8=)
3: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: mVU7jKqIDZIWhC9rS3IBQ/yXdEQtaR0E7yYt2s2GxlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:30:49:82:b4:40:e3:df:51:8b:c3:da:20:17:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Jun 28 22:01:21 2025 GMT
Not After : Jun 29 22:01:21 2025 GMT
Subject: CN=3ba0bb55d8f5ba852b7442eb8143f3b6b28efc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:97:0f:ef:45:51:e9:7e:93:7b:7b:62:9c:
39:35:8e:7a:c2:41:0e:82:a4:71:ec:3d:72:2b:1b:
a7:f5:a8:bc:68:7d:1a:ff:87:29:00:8e:0f:e8:21:
34:1f:46:27:96:00:91:8f:f4:c1:db:72:2f:11:ec:
f8:0c:84:98:a8:be:b7:25:f3:00:a4:39:33:fd:8a:
7e:25:c6:66:93:ca:4d:ff:b7:08:ea:1c:ad:43:eb:
8f:50:dd:cc:92:93:13:f3:4d:be:89:cc:6e:c5:a4:
49:cc:87:7e:6d:b7:4a:9e:34:9d:08:74:7c:d8:fb:
f1:a7:fa:a7:54:54:27:99:8b:63:55:2d:73:89:84:
4a:90:38:9f:57:ef:89:06:f6:fb:79:4c:39:b9:cd:
f4:ec:1d:dc:47:da:a7:82:76:04:a0:20:8a:7f:db:
63:3b:7f:08:78:59:4c:47:64:53:6d:d4:a3:68:8f:
19:e7:e4:8a:e8:e4:75:58:32:10:56:74:67:d6:0c:
30:5d:21:7d:31:e4:d1:04:eb:fd:2f:17:4c:ab:53:
ef:da:0d:a2:f8:8c:1b:a9:39:ca:9d:9d:42:ca:fa:
8f:0f:3c:30:d7:cb:06:65:85:d1:30:df:23:cc:2e:
93:b1:72:64:b2:64:9f:b4:50:79:1f:c2:80:58:78:
dc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A0:BB:55:D8:F5:BA:85:2B:74:42:EB:81:43:F3:B6:B2:8E:FC:75
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9c:58:b1:31:f4:10:88:c7:10:1d:d9:f8:3a:62:de:74:58:
15:7b:ec:55:b8:57:92:e8:4f:9b:28:33:f5:43:1f:2c:3d:35:
8b:b6:40:30:8d:a9:7a:03:e6:ef:82:bb:9f:f0:24:a5:7b:92:
40:55:a7:46:2d:97:2d:08:ce:b6:75:98:5e:0d:b5:25:a7:8a:
65:71:73:88:03:41:17:3e:af:1e:83:53:32:cf:95:d5:4b:ef:
69:f7:3d:5e:b9:1e:ee:ab:e8:7c:c7:28:2f:ae:95:e3:74:65:
7e:71:b9:78:3a:69:87:f2:6b:f4:fb:84:44:f8:95:ca:bb:45:
9b:7a:16:23:00:86:4a:09:57:e1:f3:01:ce:b6:db:4a:93:9f:
89:68:ad:f5:ab:60:31:d0:68:57:11:28:6b:28:b3:3d:ec:0f:
6f:db:3e:20:74:fe:2b:9a:d7:86:12:ff:bf:64:7f:dd:d4:46:
d8:ed:0a:3a:50:f2:1b:f5:c8:b7:9b:30:22:0e:4e:df:f7:32:
24:ab:5c:bc:d6:47:8d:e1:7d:a8:a5:73:35:73:56:e2:06:7a:
ca:67:f9:da:a6:00:83:c1:a6:85:47:6d:38:ce:e0:44:83:f4:
17:d6:10:67:8c:c5:eb:83:e7:41:a2:ef:65:40:e2:87:71:59:
83:82:cd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:33 2025 by rpki-client