
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
File: qDBcblgpStDtUWL6hCnaUWVlOTA.mft (raw, json)
Hash identifier: +DFcH9Ru0fWhJcDooRej/RJHwPR7DajkbZXgTOwPQFQ=
Subject key identifier: 2B:26:5A:FD:D6:58:F8:D4:46:81:DB:07:F2:43:68:D0:FA:92:BE:DD
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial: 01987BD2916717A0533FAF079C0ADA68471C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
Manifest number: 161E
Signing time: Tue 05 Aug 2025 20:00:53 +0000
Manifest this update: Tue 05 Aug 2025 20:00:53 +0000
Manifest next update: Wed 06 Aug 2025 20:00:53 +0000
Files and hashes: 1: K1hHLihKHxHk06eTdbGXntsm7n0.roa (hash: L22VRHHVigykudQA1GmcYoeypbh6Yu5VUYyqOcGQaXE=)
2: qDBcblgpStDtUWL6hCnaUWVlOTA.crl (hash: rDhv/DTSn9ptMHRPf3kOEPNuzxqkSofiljEok7ASnXE=)
3: wPNMxy1HP_1cYFy7utzNj0qnsDA.roa (hash: yEdNFFWb7AqdqiQvhXrarz8nG5eHA1sOBjlHc/SL+pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:91:67:17:a0:53:3f:af:07:9c:0a:da:68:47:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
Validity
Not Before: Aug 5 20:00:53 2025 GMT
Not After : Aug 6 20:00:53 2025 GMT
Subject: CN=2b265afdd658f8d44681db07f24368d0fa92bedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:37:35:dc:af:00:5c:43:3d:af:84:2b:24:
61:17:3e:74:8e:f9:95:b2:af:a6:c9:a4:bf:b7:a9:
5e:4f:ff:0c:36:02:5c:ce:1e:d3:79:54:3f:e4:ac:
8c:14:49:4f:1e:36:72:d4:4a:43:d1:5f:4f:0a:45:
2b:d7:c9:7e:e7:d2:48:ae:e1:4e:49:2c:55:57:67:
07:8a:e9:92:eb:df:86:eb:fe:b3:fa:9a:b0:7c:25:
fa:82:fc:c4:09:30:f0:b7:9b:89:7b:97:26:b9:48:
8b:4f:11:19:cd:a3:27:b8:8c:d9:e3:f3:cb:53:11:
78:ba:5f:8e:7c:e7:63:d6:e0:97:11:4c:79:ba:58:
30:00:75:56:61:69:b2:62:7c:b1:87:79:6a:1f:90:
15:3b:d7:c3:13:ed:e9:dd:84:14:87:a9:52:a7:87:
9c:e4:1a:5a:f1:b7:03:17:6d:be:f1:1d:9d:e3:e8:
1c:47:d3:2f:e9:58:90:93:33:24:7f:22:84:a2:2c:
4e:bb:9e:b2:32:3c:55:1f:31:1e:8f:27:03:e0:16:
b1:79:d4:5a:c3:37:40:20:d1:63:68:1f:a5:2d:8d:
95:be:1a:e2:e5:6e:86:85:40:1d:cb:de:68:dc:ae:
4f:f9:51:fe:bb:b9:33:cf:6a:9d:de:7f:42:c5:23:
53:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:26:5A:FD:D6:58:F8:D4:46:81:DB:07:F2:43:68:D0:FA:92:BE:DD
X509v3 Authority Key Identifier:
keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a9:89:b7:a9:d1:a7:82:01:54:a6:9a:4d:2b:67:20:a9:2f:
77:1b:9a:1e:02:76:84:6f:17:6f:c3:67:76:ab:d7:8a:c8:8a:
49:5f:23:22:6c:f5:b3:9f:65:23:81:20:04:44:8d:f2:c0:fa:
1f:f1:60:a9:29:ad:f6:f0:99:04:3a:96:5b:ea:3f:6f:3c:51:
4c:c2:a3:86:2c:66:16:0e:70:78:d5:38:3a:b2:b7:59:ec:cd:
78:b9:22:94:c3:41:1d:bc:b8:13:36:c1:29:a2:10:1c:6d:9b:
90:10:19:c4:f4:52:91:22:00:e5:e9:d3:00:c0:8a:c9:ae:c3:
8a:29:97:db:95:b4:e9:72:17:44:a5:4f:1f:44:03:dd:16:ca:
11:41:24:b9:40:31:a3:fe:73:f8:d9:50:9c:f1:bc:cf:0b:09:
63:d9:6d:97:11:80:94:ea:eb:51:6f:a4:9c:61:62:a8:3c:c6:
b8:d6:f6:f5:37:8c:2e:dc:ac:e0:13:3e:6b:d6:27:76:d3:09:
4c:93:fa:53:78:28:fa:63:ce:9d:ec:0d:e5:7b:1a:01:dd:d9:
6e:b8:0d:93:2b:df:bc:75:3e:a4:96:c8:87:c4:9b:2c:ca:ea:
9c:ae:13:3e:de:62:14:ad:0c:62:d0:ee:40:ef:77:31:65:31:
d6:3b:df:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:09:52 2025 by rpki-client