
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
File: qBGiyfyN6WebsVhYGxDOrukf95E.mft (raw, json)
Hash identifier: UpW8w8Z5XlHIT2MVFxyZfVxa9AeyzZuIQ/RgwmdkM+U=
Subject key identifier: 7D:DC:A8:43:A5:BC:78:69:1E:E5:C4:F4:BD:A7:B4:58:F8:AB:AF:A6
Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
Certificate issuer: /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Certificate serial: 019873E1DED57029C8CC4058209335021763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
Manifest number: 1627
Signing time: Mon 04 Aug 2025 07:00:39 +0000
Manifest this update: Mon 04 Aug 2025 07:00:39 +0000
Manifest next update: Tue 05 Aug 2025 07:00:39 +0000
Files and hashes: 1: PPeyKFftPaiVCXNYTK3ZP37-8BI.roa (hash: 1x8aYa43ug+3XZe9x+qmxKaVKmQGYXXQ926Bpo3NKhs=)
2: qBGiyfyN6WebsVhYGxDOrukf95E.crl (hash: qPpdfclLzg6iGUWQqICEdu/TdZMsB44k6yLMgMxH33Q=)
3: r7_wV3dzjpVPhKRXt9LOL6uFNoM.roa (hash: eXGrZnOiRM2nkPOyWX+HuDqKFlwEgjMo/lqsZKhSHKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:de:d5:70:29:c8:cc:40:58:20:93:35:02:17:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Validity
Not Before: Aug 4 07:00:39 2025 GMT
Not After : Aug 5 07:00:39 2025 GMT
Subject: CN=7ddca843a5bc78691ee5c4f4bda7b458f8abafa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:47:95:a8:44:87:2d:7f:42:cf:82:60:b8:71:
70:eb:42:a5:5e:29:d8:6d:8c:d5:29:8f:59:56:6d:
8c:7d:5f:05:bb:55:78:ec:56:11:08:ee:9e:08:2b:
32:51:32:fa:4e:ad:b7:41:f1:fc:d3:94:a3:62:54:
40:6d:9e:a5:7e:dd:9a:d5:ce:65:6d:67:d1:09:f6:
b8:06:76:0e:60:fc:a4:e5:52:18:f9:dc:f8:20:87:
9e:bc:e8:25:d2:ba:f8:fc:39:fd:b5:48:0f:40:35:
8e:db:bf:7a:7a:c0:65:ec:f9:db:9a:3a:3d:0c:74:
1f:02:9d:60:40:ab:12:a7:5e:62:0a:54:37:f6:3e:
af:bf:dd:57:61:4d:23:0b:4d:1b:1d:fd:ac:6e:a9:
48:34:a1:35:e6:1b:3d:26:aa:25:ed:6b:77:f8:98:
f8:e6:ef:b2:cd:65:21:cf:85:62:14:67:96:b0:10:
ed:cd:0d:fe:8a:fd:36:95:33:88:2a:17:27:52:7f:
65:5b:96:2c:96:38:8f:69:f6:fd:36:31:2f:aa:20:
7a:f1:4e:d8:c2:4d:fb:a3:85:60:bb:9c:49:45:6d:
5f:82:61:4a:0b:05:58:9f:31:aa:8d:96:b0:85:ec:
fc:12:c6:be:f4:d1:de:19:ac:31:91:7c:f5:19:7b:
80:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DC:A8:43:A5:BC:78:69:1E:E5:C4:F4:BD:A7:B4:58:F8:AB:AF:A6
X509v3 Authority Key Identifier:
keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f3:b8:99:e6:80:14:4d:08:c9:9f:17:64:44:bf:b5:6d:20:
d8:84:b1:fa:04:f4:79:a0:b0:44:46:a7:d0:f2:ec:d5:26:95:
5f:85:f8:2b:58:b0:ae:3c:98:14:56:6c:3e:7b:8a:37:b2:b7:
3a:15:02:13:a0:e1:d3:5f:af:17:13:7c:fb:11:d4:47:1a:a9:
38:05:46:e6:45:dd:3d:50:ed:01:b2:0c:00:e6:f2:25:c0:46:
41:53:4b:52:b2:e1:68:e7:44:cd:5b:d1:b1:25:31:45:96:2a:
ee:51:92:bb:15:2a:dc:b5:d2:20:bf:23:a0:bf:f4:a9:f9:20:
3d:ad:b6:79:7a:65:db:d8:f5:e5:25:e5:d7:52:62:39:22:c3:
db:a2:01:18:a8:89:75:3f:2f:c1:09:dc:64:1f:eb:89:be:03:
38:67:48:93:97:e4:83:7a:9b:82:06:5a:03:99:ad:15:5c:66:
68:83:59:76:8e:5e:7b:a7:62:8b:23:8d:51:dc:c8:6d:4c:bc:
5b:b4:78:13:5d:d8:c9:3c:28:93:7d:29:36:a8:07:d0:8c:7b:
8f:be:f7:2c:bd:cb:6d:3a:89:a2:7d:07:0c:94:e3:1c:8a:89:
7b:af:0a:15:e1:77:c1:b7:d7:7d:da:b6:af:c3:aa:02:37:35:
a9:43:2c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:07 2025 by rpki-client