Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
File: qBGiyfyN6WebsVhYGxDOrukf95E.mft (raw, json)
Hash identifier: awXZ/6SetbaViSBb56bkTMaIFAlhNK+CmBo5i3Sdk1Q=
Subject key identifier: C3:13:43:DE:A2:21:09:EB:D6:9A:FC:24:A3:0E:EF:DB:FD:6F:30:C2
Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
Certificate issuer: /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Certificate serial: 01976D3E85C79D168AAF371F856FF4BA3DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
Manifest number: 159F
Signing time: Sat 14 Jun 2025 07:01:43 +0000
Manifest this update: Sat 14 Jun 2025 07:01:43 +0000
Manifest next update: Sun 15 Jun 2025 07:01:43 +0000
Files and hashes: 1: PPeyKFftPaiVCXNYTK3ZP37-8BI.roa (hash: 1x8aYa43ug+3XZe9x+qmxKaVKmQGYXXQ926Bpo3NKhs=)
2: qBGiyfyN6WebsVhYGxDOrukf95E.crl (hash: srEV8T90twqGqEsvsYgEtSPisOAkBP9P9JGHfqC/V+Y=)
3: r7_wV3dzjpVPhKRXt9LOL6uFNoM.roa (hash: eXGrZnOiRM2nkPOyWX+HuDqKFlwEgjMo/lqsZKhSHKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:85:c7:9d:16:8a:af:37:1f:85:6f:f4:ba:3d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Validity
Not Before: Jun 14 07:01:43 2025 GMT
Not After : Jun 15 07:01:43 2025 GMT
Subject: CN=c31343dea22109ebd69afc24a30eefdbfd6f30c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:58:89:cc:6b:f1:bf:42:c2:25:49:03:23:
d1:f6:0c:a5:6d:a6:6c:d5:1c:2d:32:d7:8a:07:03:
ee:ba:cc:4f:03:d4:2b:f6:28:a8:96:56:44:55:29:
83:6c:14:ff:f5:8a:9d:4f:47:b3:2e:ac:b5:f4:28:
54:e6:01:df:d1:35:df:8c:d3:51:54:ab:46:f8:e1:
22:64:5b:63:df:93:a1:6d:e1:d9:7d:de:67:50:d6:
a6:6d:ce:37:d3:28:c1:f8:0c:0f:b1:b6:ef:8b:7d:
06:2a:29:15:c4:30:9f:f8:42:1d:da:71:5b:59:d9:
ff:c7:14:b7:78:2d:6a:aa:55:5b:49:23:04:36:91:
89:79:4b:80:b0:b1:3d:ba:07:0e:70:41:33:43:15:
99:95:74:5d:fb:e9:a1:7e:43:3e:e3:bb:4b:ba:0e:
c9:d4:d7:62:ff:b0:f2:36:74:ec:63:70:d7:09:57:
84:ce:56:4e:58:b8:68:21:87:ec:15:53:09:d7:70:
10:0e:5b:d4:05:05:7f:e8:9b:b3:36:ae:b9:16:63:
6f:e6:67:c5:e0:3c:93:f1:b7:89:42:47:03:7f:81:
09:c0:a1:ac:87:61:e3:63:25:0f:cc:aa:eb:42:97:
9a:f5:d0:c0:da:a4:a7:df:07:9e:2c:c2:32:5a:a1:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:13:43:DE:A2:21:09:EB:D6:9A:FC:24:A3:0E:EF:DB:FD:6F:30:C2
X509v3 Authority Key Identifier:
keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:86:89:d4:65:c2:c7:a8:3e:9e:e4:1e:81:31:1b:cc:cc:7e:
21:94:16:7d:ca:aa:8b:e2:72:80:42:e0:5a:dc:a1:f6:45:b8:
12:b9:27:8c:87:5c:3e:64:83:69:8f:db:21:67:71:ea:d1:76:
e6:a5:01:97:43:3d:5d:77:ed:9c:5b:89:2b:ef:ab:68:a0:e3:
c8:83:9b:d9:1d:77:3c:1f:6b:38:70:0f:cf:eb:de:f5:1c:ec:
89:d6:31:f0:e5:5f:3f:b9:ae:9e:a1:0f:db:67:cb:e3:71:14:
71:df:8a:9f:c4:0b:23:b5:e8:36:2d:90:37:3a:2c:5f:83:81:
05:ae:3a:77:aa:f1:90:5e:67:52:b0:3b:db:b7:35:96:94:a2:
75:ee:dd:15:4c:28:ad:06:3c:4a:fc:42:a0:86:36:79:e3:9c:
d3:4c:71:20:28:42:e6:94:98:67:6d:af:87:61:4c:39:1e:44:
17:b2:2f:6b:f4:0e:50:4a:4f:22:b9:a1:85:de:b3:ce:ba:02:
a8:4f:da:a5:30:34:09:0a:7b:95:24:b8:58:e4:d7:20:f3:d5:
a1:83:07:f9:a1:50:97:8b:b4:52:f0:85:7d:76:26:d9:a5:21:
c9:9e:75:2f:fe:f1:31:a2:b1:98:8a:f9:52:64:1b:d1:43:f6:
71:fb:18:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:20:14 2025 by rpki-client