Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: xcfMqV+TyiGid280OLCX+OCqBVq+r75l98c8QEDdkgs=
Subject key identifier: 9A:16:9E:9B:5D:4D:0A:5A:92:17:F7:DA:48:C2:16:0E:6F:D2:82:1C
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 0197B6A21807E92BA340C68496CE07C5A13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 0672
Signing time: Sat 28 Jun 2025 13:02:45 +0000
Manifest this update: Sat 28 Jun 2025 13:02:45 +0000
Manifest next update: Sun 29 Jun 2025 13:02:45 +0000
Files and hashes: 1: jnSve3XmFe0Ms43uzQn1WmoreJ0.roa (hash: JpZLimfc7+7aqyHJzwRKIdaJc+FFYashS7WERx4Vf3Q=)
2: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: SFdGYywcQGvqCZW29DiCXLxUypivmBQPQU3cq13XTEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:18:07:e9:2b:a3:40:c6:84:96:ce:07:c5:a1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Jun 28 13:02:45 2025 GMT
Not After : Jun 29 13:02:45 2025 GMT
Subject: CN=9a169e9b5d4d0a5a9217f7da48c2160e6fd2821c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:de:96:e7:3a:dc:3c:59:b4:a8:09:80:d2:
4d:5b:e7:a6:2e:c2:27:4d:b9:bd:20:d0:01:25:e7:
d9:d4:46:20:aa:4d:ee:12:ae:ef:5d:c2:5f:53:96:
93:f3:d6:60:93:91:67:d0:13:39:57:6e:a5:42:97:
22:28:07:40:83:ee:18:19:e9:75:cf:6c:68:f8:07:
59:1b:e3:af:44:e8:0a:ba:73:eb:4f:fe:fb:c1:d5:
1f:17:cf:e1:fe:c8:3e:68:55:91:32:d4:9b:30:aa:
fc:3d:6c:49:44:ca:ed:3f:41:b4:70:86:36:d6:26:
76:05:d0:a0:9e:af:91:8d:c8:ee:3f:1d:fb:dd:de:
48:6e:c7:a7:55:dc:a9:de:ea:04:92:5f:c2:71:1b:
3f:26:d0:96:04:1d:e8:55:5f:62:34:3d:79:4b:b4:
0e:ac:09:ab:55:e5:10:64:98:9c:9a:67:60:11:14:
e6:99:15:6b:37:51:9f:14:f5:fd:b8:0d:8d:b3:6f:
67:e4:dc:d5:58:dd:53:98:9e:7b:af:c3:b5:c7:80:
25:35:b9:68:67:af:82:6c:ac:3c:25:01:ec:61:a3:
1b:b0:a4:54:fa:c6:b5:6e:ab:fb:14:6e:cd:12:79:
c6:0d:25:d2:41:41:7e:45:f4:44:82:59:8e:fc:ed:
4f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:16:9E:9B:5D:4D:0A:5A:92:17:F7:DA:48:C2:16:0E:6F:D2:82:1C
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8a:08:de:24:fb:71:96:e1:e9:a3:68:9f:96:bd:3b:a9:41:
31:6b:ba:62:2e:d7:99:c3:b5:dc:8a:e7:19:d6:3c:b4:f0:71:
9a:85:42:a3:82:7c:fe:b2:71:6e:54:fe:51:6c:dc:37:e6:52:
57:60:cf:97:68:59:04:22:dc:d8:86:49:d6:65:3e:e9:b6:fc:
80:8b:c9:6e:2d:97:e5:ab:0a:06:c0:19:9c:60:68:71:20:82:
d0:d0:21:c6:47:65:6a:72:8a:59:d0:0e:cb:f2:e6:e2:e4:bb:
93:af:36:bb:bc:04:10:5d:8c:5c:d7:e6:59:63:b1:61:85:15:
d8:dd:2c:f4:af:2d:5a:d2:66:0f:09:45:63:1e:01:bb:b6:a3:
79:e5:31:8d:8d:f3:a7:37:88:1d:93:58:9d:7a:6e:61:e0:31:
46:71:51:93:4d:78:6e:4f:e3:af:05:25:06:91:7b:3c:8b:03:
a1:9f:d0:20:8b:77:52:0e:79:77:ab:28:6f:c6:32:b7:15:e2:
8c:47:33:6e:a9:20:6e:80:d6:60:1c:e4:60:62:37:05:7e:86:
e3:f7:f2:b2:2c:fd:79:16:5f:25:99:a9:38:0e:29:37:28:49:
2a:1b:bb:d8:95:74:ef:6e:8d:06:07:aa:e2:39:b0:a5:2b:a6:
b7:a8:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:50 2025 by rpki-client