Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
File: qMbzkzUMd1mMEhrNPJL3BIV274k.mft (raw, json)
Hash identifier: 1GalbI/I1YXOUPVnZews9MLdN4vXMzmy9oSMiMPkNg8=
Subject key identifier: 51:96:58:AF:38:FB:C8:57:77:03:7A:7B:49:8D:A4:F4:76:0B:9E:23
Authority key identifier: A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
Certificate issuer: /CN=a8c6f393350c77598c121acd3c92f7048576ef89
Certificate serial: 01989E5E2FD2A2AC2C3B7A95DAD7F79C595A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
Manifest number: 0D63
Signing time: Tue 12 Aug 2025 13:00:29 +0000
Manifest this update: Tue 12 Aug 2025 13:00:29 +0000
Manifest next update: Wed 13 Aug 2025 13:00:29 +0000
Files and hashes: 1: eOh7otVHHrYHGXBG7XugLjFkG3I.roa (hash: jBij6Zpdi8PdzGdFEr+QptijCvWCfUOl+3jki1c2vMs=)
2: lCDqNprGOb5vTF01oJ8hwQqZCRE.roa (hash: mFZkrlVA4mVLiefirb6z2hXCAJmumM9YtxbYwU/yy10=)
3: qMbzkzUMd1mMEhrNPJL3BIV274k.crl (hash: eEzZW5C9YNs5X9sXKPRzLfLgN0LVO3ukGMO1KJBBNsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:2f:d2:a2:ac:2c:3b:7a:95:da:d7:f7:9c:59:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6f393350c77598c121acd3c92f7048576ef89
Validity
Not Before: Aug 12 13:00:29 2025 GMT
Not After : Aug 13 13:00:29 2025 GMT
Subject: CN=519658af38fbc85777037a7b498da4f4760b9e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:94:08:b5:b0:24:2d:36:09:34:7a:44:07:58:
6b:7a:40:91:c8:0f:f9:d3:11:4d:a2:55:41:2b:48:
d8:c6:c9:af:7a:fc:34:dc:ca:6b:44:62:78:1c:a4:
e1:a4:fd:00:6d:a7:c5:05:88:76:98:30:e4:8c:e5:
dc:1a:e8:85:64:92:a1:02:de:ed:87:59:83:83:e3:
01:d3:0c:07:57:38:c2:05:12:6e:e7:d8:ab:7a:3c:
e9:a4:87:d3:2c:34:ba:ee:53:06:14:b9:e3:a2:16:
4c:e4:35:fd:d0:1e:cb:ab:8c:39:98:0c:66:ce:14:
50:78:73:9e:2f:0d:c8:08:b6:0f:8f:3d:3a:fb:00:
45:00:a2:56:8d:63:ba:0e:2c:76:11:5d:32:1a:87:
b6:18:9d:ad:23:dd:ea:0f:98:44:0a:57:62:6a:10:
5d:0f:eb:11:20:a2:72:e7:7b:da:17:93:92:0d:75:
ce:c0:b3:fc:b3:b2:82:bd:5d:27:2e:97:38:dd:9c:
47:ed:82:a4:ce:cc:33:d5:b1:23:bf:55:fb:8b:91:
6c:fc:9c:56:e0:45:41:49:f7:ec:14:f9:37:31:17:
2e:c9:3e:74:80:79:ff:af:98:b6:28:86:76:bd:e7:
de:76:42:fc:ee:eb:f2:68:c9:a5:10:e2:04:19:ad:
ef:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:96:58:AF:38:FB:C8:57:77:03:7A:7B:49:8D:A4:F4:76:0B:9E:23
X509v3 Authority Key Identifier:
keyid:A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:7b:ed:ca:59:7c:d2:97:f7:01:48:e9:46:b7:a7:51:52:fc:
04:0c:2e:12:82:c4:66:f6:60:e1:05:37:e4:1d:43:6e:fb:82:
7a:d3:7e:79:81:f1:89:7c:05:41:7b:1e:f0:e8:a4:b1:43:3b:
d0:0b:d7:4a:58:78:71:80:f3:86:6f:06:5f:1a:be:e7:0c:2c:
02:4d:04:0f:f3:af:db:59:72:4a:ad:fb:86:ea:c7:d8:db:ae:
da:2a:de:ab:e6:d5:a1:17:6d:ff:b3:3d:8b:bd:a4:5c:3a:5c:
17:6c:7e:1e:8c:38:1e:1c:12:1a:e5:31:f1:24:2b:76:dc:dd:
1e:31:e7:3e:fd:af:e4:f8:45:d5:ef:f6:6e:5f:ce:2f:71:94:
5e:f4:fc:4f:b2:86:2a:02:ba:f7:d3:c1:58:b8:c9:8e:47:04:
84:2d:c5:2b:15:cc:05:f6:71:50:e1:51:63:d1:10:eb:f2:04:
8a:d7:53:34:22:14:ab:8b:09:01:58:74:3f:4f:8c:42:07:de:
cf:85:1f:a6:e1:95:a2:8d:ec:ba:4e:62:ef:32:00:74:0f:da:
df:b5:2e:48:e8:33:2e:b7:99:a5:d9:f3:6b:95:e7:c1:a2:b4:
e9:c7:5f:0c:66:e2:3f:87:2b:c3:7f:4a:3f:e9:ea:85:9f:ce:
09:34:e7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:11 2025 by rpki-client