Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
File: qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft (raw, json)
Hash identifier: 4nKSq0aHt9emW9QypEHgHK0SpT1rGWultNQ3z2f10js=
Subject key identifier: C1:83:D9:46:FC:98:2A:10:16:5F:0B:6A:5A:A9:A6:F3:33:76:68:CA
Authority key identifier: A8:18:0B:F1:A7:75:0B:3D:22:F9:35:85:56:E1:1F:0F:F7:66:A6:19
Certificate issuer: /CN=a8180bf1a7750b3d22f9358556e11f0ff766a619
Certificate serial: 01987BD2CB165A02352857C1942441188297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
Manifest number: 0504
Signing time: Tue 05 Aug 2025 20:01:08 +0000
Manifest this update: Tue 05 Aug 2025 20:01:08 +0000
Manifest next update: Wed 06 Aug 2025 20:01:08 +0000
Files and hashes: 1: n5eJkZFicuorP_7YUyglUyaxuUw.roa (hash: X7lChHAuDqiBzbpN9aFseejb0s7SiAcnR2Lo7vuWZMI=)
2: qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl (hash: eMHwOuzAo0m0D3pli19E/iymIVo1rhKYFCEKZ6eZTH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:cb:16:5a:02:35:28:57:c1:94:24:41:18:82:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8180bf1a7750b3d22f9358556e11f0ff766a619
Validity
Not Before: Aug 5 20:01:08 2025 GMT
Not After : Aug 6 20:01:08 2025 GMT
Subject: CN=c183d946fc982a10165f0b6a5aa9a6f3337668ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:03:70:4e:26:62:76:39:14:aa:69:7a:cb:36:
50:23:5d:06:81:94:a8:72:8d:7d:5b:9f:0b:22:a2:
29:a7:60:2e:ef:1c:5e:4b:73:8a:e9:a0:f4:c8:e4:
a2:49:a2:27:6c:dd:99:cd:c5:b6:d0:e9:8c:94:cc:
d0:e4:c3:de:7f:20:8a:42:bf:ce:78:c5:5b:8e:b3:
d4:3f:c4:7a:ab:c4:32:c8:fa:76:83:28:6a:7d:5b:
77:a4:f8:12:57:70:2d:ad:23:4e:68:0a:2c:38:58:
c4:6c:82:6b:fc:9c:54:20:bc:ca:82:17:a9:32:11:
c9:be:ae:11:0c:59:84:73:8c:c5:aa:57:3b:55:75:
6f:40:cd:e0:55:70:eb:21:2c:73:26:a2:1c:5d:c1:
67:28:3d:df:53:48:b7:21:5c:3d:5e:3f:b2:74:95:
92:bd:09:6f:7b:fe:bf:20:2a:a2:28:26:b8:36:d2:
3d:28:9c:d1:dc:e9:2f:f5:16:de:93:87:8c:e1:80:
10:81:ee:25:27:bc:a1:48:2d:51:19:7c:b9:3e:f4:
dd:d0:49:9a:4a:ee:76:4c:76:52:5e:73:d5:6b:fb:
2d:10:b1:15:c2:f2:cc:ff:a6:b7:a5:d2:0d:66:9f:
9b:b8:95:55:09:73:79:d4:e5:66:2e:f4:6f:b7:a4:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:83:D9:46:FC:98:2A:10:16:5F:0B:6A:5A:A9:A6:F3:33:76:68:CA
X509v3 Authority Key Identifier:
keyid:A8:18:0B:F1:A7:75:0B:3D:22:F9:35:85:56:E1:1F:0F:F7:66:A6:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7e:83:0b:a6:33:82:82:55:20:36:1a:35:37:62:7b:fd:9d:
c0:7e:eb:6d:cf:44:9e:da:aa:84:74:ba:8a:3c:43:4d:09:d8:
fd:43:bc:c8:9a:1b:95:ef:4a:2d:0b:80:3e:c0:05:37:b5:c0:
6f:c5:9d:35:e6:7d:f1:a2:6f:1c:01:e3:2a:e1:68:f6:38:06:
cd:7e:55:55:4a:8c:ba:f3:3f:3e:b4:10:94:f1:4b:7a:8b:31:
c1:ea:96:75:90:1d:b2:d9:65:50:8f:0c:10:3a:45:0b:68:f6:
59:0e:99:85:3b:30:32:57:f5:38:a3:0b:cc:37:89:ce:3c:ce:
b0:08:04:05:44:5a:3c:58:66:b3:48:5c:47:61:8e:ca:d6:7f:
04:76:fb:86:d2:43:f8:a8:02:b8:c4:57:00:7d:81:70:0c:88:
3c:c5:60:cb:27:5e:db:74:54:bd:cb:d0:a3:c6:88:2e:00:df:
a5:20:4d:6d:89:54:80:28:c2:f6:f6:a6:f6:0b:45:ff:9e:d4:
b0:3c:63:f6:1c:b3:cf:5a:5f:32:2d:1d:b6:20:bb:0f:1c:5a:
1d:c5:82:1c:af:b1:8b:06:61:04:2f:48:5f:c4:82:a5:16:ff:
b6:80:18:9d:59:56:3b:da:4a:59:e7:ad:9a:f9:fb:24:1a:83:
08:be:bd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:33:25 2025 by rpki-client