Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
File: qDBcblgpStDtUWL6hCnaUWVlOTA.mft (raw, json)
Hash identifier: jRC60iB3M0vdAPt3gUjdFjb/XH5cI+tLeSJaJh/I8lg=
Subject key identifier: 2A:63:FE:89:80:49:FF:E9:F3:97:76:12:72:1B:66:56:1A:63:0D:56
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial: 01976D747F95EFB02CAA1CD56CA4268020EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 08:00:40 +0000
Manifest this update: Sat 14 Jun 2025 08:00:40 +0000
Manifest next update: Sun 15 Jun 2025 08:00:40 +0000
Files and hashes: 1: K1hHLihKHxHk06eTdbGXntsm7n0.roa (hash: L22VRHHVigykudQA1GmcYoeypbh6Yu5VUYyqOcGQaXE=)
2: qDBcblgpStDtUWL6hCnaUWVlOTA.crl (hash: GIQiFZAOoosoKKOLumS8MxLOk9YF40L0lLRTiHJp8yI=)
3: wPNMxy1HP_1cYFy7utzNj0qnsDA.roa (hash: yEdNFFWb7AqdqiQvhXrarz8nG5eHA1sOBjlHc/SL+pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:7f:95:ef:b0:2c:aa:1c:d5:6c:a4:26:80:20:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
Validity
Not Before: Jun 14 08:00:40 2025 GMT
Not After : Jun 15 08:00:40 2025 GMT
Subject: CN=2a63fe898049ffe9f3977612721b66561a630d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:19:0c:fa:4f:23:c2:53:1d:d7:3e:55:ab:
dc:95:29:4d:9f:fe:dd:47:a7:5c:f2:08:5e:6d:db:
c9:14:f9:3f:c0:93:e9:7c:82:ba:f6:14:06:41:70:
51:55:a3:0e:99:40:c2:3b:76:65:0d:a5:a5:9a:6b:
47:d0:3b:aa:c1:08:5b:91:e6:60:63:f3:e3:10:ce:
23:c0:fe:21:e1:eb:21:49:8c:85:26:8b:11:ec:5b:
a7:95:36:2b:7f:69:1f:fa:db:cc:0b:bd:07:79:03:
69:7b:46:42:70:eb:00:e3:6c:fd:fc:fa:44:22:e6:
9a:7f:49:e4:d2:23:ec:35:83:e0:fb:f4:9d:38:c9:
1a:3c:29:8c:59:b3:22:ac:e9:27:94:ad:12:f4:d1:
83:2b:99:df:4c:44:c5:0e:6b:46:00:7f:a8:17:59:
b3:ee:a9:ac:ca:b2:7d:0a:a0:79:b4:70:07:94:f6:
b5:b0:d2:31:b2:0a:ab:a5:09:9c:7b:8b:9a:cf:87:
0c:3b:bb:2e:e2:96:48:e4:12:35:3e:3e:71:9a:49:
24:f4:5e:8d:60:3c:fb:14:49:71:45:17:0c:99:75:
f1:d9:c9:9c:3b:31:3a:84:90:8d:04:f4:81:5a:ce:
5a:0c:f7:1b:44:66:e3:dd:73:90:93:e9:92:5f:3c:
07:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:63:FE:89:80:49:FF:E9:F3:97:76:12:72:1B:66:56:1A:63:0D:56
X509v3 Authority Key Identifier:
keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b5:b1:7e:d9:1b:f8:1b:0b:6b:22:10:e1:30:d9:ea:36:9d:
07:99:63:3d:9a:2b:ba:4e:bd:9e:4b:e2:e2:59:c8:cc:a8:62:
4a:da:b5:8e:f9:32:05:c0:37:f8:9b:c6:5d:d1:84:fa:70:33:
1f:62:bc:5d:90:47:7b:84:ce:84:88:67:a4:f8:c7:8a:c9:53:
e9:f6:8e:93:5f:5f:84:76:95:fa:be:fd:1c:94:b5:1c:93:eb:
6a:ed:b1:e7:00:6f:9f:34:60:1e:9f:4a:5a:35:1c:e2:62:22:
b6:91:3b:85:27:a7:bc:17:13:30:9d:f5:28:07:fa:2b:3b:03:
27:f3:08:88:b8:6b:fc:0c:01:71:ca:2a:53:46:33:26:94:a0:
45:e1:43:d0:db:a1:65:75:d4:58:e3:46:6e:df:70:15:0a:a3:
35:e0:88:62:13:bc:cf:d7:91:3c:e5:d5:d2:b4:fc:0b:e1:80:
57:cf:b2:9c:65:32:04:fb:2f:89:5f:a2:c3:32:28:0a:78:f0:
ba:3b:a1:12:8f:5d:8a:95:0f:aa:12:14:dd:28:26:6b:c8:b0:
37:ae:75:0b:a2:ed:29:d3:fb:c0:35:96:1f:a0:a2:44:d3:8a:
be:af:8a:ed:2f:42:c6:b3:01:a2:c1:d6:af:57:ab:b0:55:78:
a6:51:c5:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdH+V77AsqhzVbKQmgCDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MzA1YzZlNTgyOTRhZDBlZDUxNjJmYTg0MjlkYTUxNjU2
NTM5MzAwHhcNMjUwNjE0MDgwMDQwWhcNMjUwNjE1MDgwMDQwWjAzMTEwLwYDVQQD
EygyYTYzZmU4OTgwNDlmZmU5ZjM5Nzc2MTI3MjFiNjY1NjFhNjMwZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcEZDPpPI8JTHdc+VavclSlNn/7d
R6dc8ghebdvJFPk/wJPpfIK69hQGQXBRVaMOmUDCO3ZlDaWlmmtH0DuqwQhbkeZg
Y/PjEM4jwP4h4eshSYyFJosR7FunlTYrf2kf+tvMC70HeQNpe0ZCcOsA42z9/PpE
Iuaaf0nk0iPsNYPg+/SdOMkaPCmMWbMirOknlK0S9NGDK5nfTETFDmtGAH+oF1mz
7qmsyrJ9CqB5tHAHlPa1sNIxsgqrpQmce4uaz4cMO7su4pZI5BI1Pj5xmkkk9F6N
YDz7FElxRRcMmXXx2cmcOzE6hJCNBPSBWs5aDPcbRGbj3XOQk+mSXzwHNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpj/omASf/p85d2EnIbZlYaYw1WMB8GA1UdIwQY
MBaAFKgwXG5YKUrQ7VFi+oQp2lFlZTkwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcURCY2JsZ3BTdER0VVdMNmhDbmFVV1ZsT1RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80YzE1ZDktNzllNi00NTJmLWFhMzIt
MDJkYjhiNzdkMDg3LzEvcURCY2JsZ3BTdER0VVdMNmhDbmFVV1ZsT1RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS80YzE1ZDktNzllNi00NTJmLWFhMzItMDJkYjhiNzdkMDg3
LzEvcURCY2JsZ3BTdER0VVdMNmhDbmFVV1ZsT1RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLWxftkb
+BsLayIQ4TDZ6jadB5ljPZoruk69nkvi4lnIzKhiStq1jvkyBcA3+JvGXdGE+nAz
H2K8XZBHe4TOhIhnpPjHislT6faOk19fhHaV+r79HJS1HJPrau2x5wBvnzRgHp9K
WjUc4mIitpE7hSenvBcTMJ31KAf6KzsDJ/MIiLhr/AwBccoqU0YzJpSgReFD0Nuh
ZXXUWONGbt9wFQqjNeCIYhO8z9eRPOXV0rT8C+GAV8+ynGUyBPsviV+iwzIoCnjw
ujuhEo9dipUPqhIU3Sgma8iwN651C6LtKdP7wDWWH6CiRNOKvq+K7S9CxrMBosHW
r1ersFV4plHFzg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:28:49 2025 by rpki-client