Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
File: qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json)
Hash identifier: Sgox1fXba6QAfd0r1rdHcTHfhLfGuJxFI7CfO+NTW94=
Subject key identifier: B9:F5:76:A4:8B:60:77:3E:D8:34:1D:CB:30:D9:34:C7:31:1A:D7:CB
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 0197B70F152ACF11B28B24CA09647B7F831B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
Manifest number: 04B8
Signing time: Sat 28 Jun 2025 15:01:48 +0000
Manifest this update: Sat 28 Jun 2025 15:01:48 +0000
Manifest next update: Sun 29 Jun 2025 15:01:48 +0000
Files and hashes: 1: JQfyecuTBe9b0TVcrmo-tSM3WaE.roa (hash: 2itfFVYv64s2jKKBdM91XUWlXntYtRrbHNJzdg5vens=)
2: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: hiWOPehaqwSQNulapDsj2Hgor03hd9uRA2dnzOH58Zg=)
3: svM12JDKJB3e-TFZ2wiCejW_Bfk.roa (hash: QUass/NjIlJuE2HSs5ern4SfiFA+q7m1ESWTARVsCGk=)
4: w7D3frL9E_kqNSgsBRGXDLacRBo.roa (hash: bAa/9UjCK1wH6h3VxI4XwwbcVqAdTwwv/HQNN/v8Ugg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:15:2a:cf:11:b2:8b:24:ca:09:64:7b:7f:83:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Jun 28 15:01:48 2025 GMT
Not After : Jun 29 15:01:48 2025 GMT
Subject: CN=b9f576a48b60773ed8341dcb30d934c7311ad7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:44:b5:d0:fb:72:57:ae:a7:35:72:ab:f7:
40:24:ac:1f:f1:67:06:7a:9a:13:df:db:b5:46:80:
92:3e:d0:63:3e:24:15:cd:ff:d7:1c:3f:a7:04:a5:
ec:a6:ea:16:17:ea:f2:46:b0:46:ff:78:56:40:87:
ac:88:9f:6f:91:74:44:e7:b1:2f:82:41:17:bf:a6:
bf:8c:f7:19:d1:c5:10:8c:bd:1a:42:07:ad:99:5c:
f2:df:24:77:dc:40:a4:e5:f0:56:c4:62:9a:e9:b2:
c8:d5:e8:19:a6:b0:04:03:7f:de:94:44:44:38:2d:
5c:98:4f:df:a2:05:1a:96:27:22:fd:47:08:68:81:
e9:fa:2a:2e:bb:92:51:8b:83:ed:1d:d1:b7:18:ef:
02:48:fc:18:f4:76:2e:2a:2b:3f:9c:a1:ae:a5:a2:
04:21:44:95:a7:c3:5a:3d:f0:34:b7:d8:ad:ef:e1:
ac:fb:e8:cf:e5:1c:50:17:86:18:59:59:1c:06:4c:
d1:6a:db:67:b1:61:e2:67:87:81:28:d9:71:20:e3:
e1:bd:e6:21:6d:f3:1b:a0:2f:30:07:b5:c3:9b:09:
79:70:18:39:f6:75:3d:f8:64:40:2e:1e:45:8d:08:
87:6d:d7:ad:ae:92:df:c2:4e:ac:0b:c0:6f:91:b8:
a3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F5:76:A4:8B:60:77:3E:D8:34:1D:CB:30:D9:34:C7:31:1A:D7:CB
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:14:a2:8d:36:b9:79:b5:ed:ba:c3:6a:49:91:45:f5:e7:0d:
67:8b:79:a4:b6:09:3f:8c:53:d2:94:e9:14:3e:06:c6:29:ec:
e2:0f:71:a7:e1:f1:96:97:78:aa:96:6c:92:36:fe:61:b0:dc:
60:3c:10:b9:94:7c:af:97:cc:ea:61:b7:57:8e:ee:45:f6:0b:
38:8f:b4:ac:5e:17:5d:c5:3f:24:11:ea:62:2e:8a:e1:b1:4c:
d7:f5:cc:f9:4e:f2:ba:84:39:d4:e4:b0:5a:3c:ac:cd:a7:57:
56:dd:e0:cf:19:1c:50:6b:55:cb:39:17:22:c7:af:3f:92:da:
10:89:f0:0c:c8:83:eb:06:ea:9d:ce:3f:05:f2:35:64:3c:5b:
f1:95:47:d6:c4:18:ab:45:90:22:07:3f:8a:d7:cc:82:23:fa:
e4:4f:b4:bf:a4:de:3a:d2:71:00:2b:30:fa:13:a8:13:ca:1d:
4f:ed:9e:d6:c9:53:c3:9b:9c:bb:1d:da:29:12:af:f6:08:f1:
be:38:be:f6:53:bd:6e:41:66:e3:60:4c:c0:40:0f:f0:97:50:
05:c2:2a:fa:24:3b:3f:17:dd:27:fd:6d:32:6d:b4:6d:f8:e7:
7a:53:27:2b:49:c6:60:31:1f:7c:79:76:83:c9:a4:2f:37:89:
46:3d:bf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:31 2025 by rpki-client