Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
File: qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft (raw, json)
Hash identifier: ZRHKU3hJoFT8k5ehOwG4BFmtHu6bWHsZEOD8JYNzhI8=
Subject key identifier: FA:9F:A0:41:E4:02:E4:6B:AF:56:60:78:64:0A:5D:04:9B:D7:06:9B
Authority key identifier: A8:18:0B:F1:A7:75:0B:3D:22:F9:35:85:56:E1:1F:0F:F7:66:A6:19
Certificate issuer: /CN=a8180bf1a7750b3d22f9358556e11f0ff766a619
Certificate serial: 019771511D644B95654236872796AED982A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
Manifest number: 047A
Signing time: Sun 15 Jun 2025 02:00:30 +0000
Manifest this update: Sun 15 Jun 2025 02:00:30 +0000
Manifest next update: Mon 16 Jun 2025 02:00:30 +0000
Files and hashes: 1: n5eJkZFicuorP_7YUyglUyaxuUw.roa (hash: X7lChHAuDqiBzbpN9aFseejb0s7SiAcnR2Lo7vuWZMI=)
2: qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl (hash: FKk9JfyFPko3t0DwrRfNS4xqLiqHkY0bnKcdV1e/jf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:1d:64:4b:95:65:42:36:87:27:96:ae:d9:82:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8180bf1a7750b3d22f9358556e11f0ff766a619
Validity
Not Before: Jun 15 02:00:30 2025 GMT
Not After : Jun 16 02:00:30 2025 GMT
Subject: CN=fa9fa041e402e46baf566078640a5d049bd7069b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:22:89:0c:c5:35:0f:dd:ba:ea:c8:e7:7a:
9d:b4:87:af:52:e1:17:7d:23:87:1f:c9:b8:9f:08:
77:33:c2:0b:13:79:fd:80:0f:2c:6c:8a:cf:17:b3:
a2:56:47:52:f6:37:4f:ff:a9:90:7a:af:34:db:ed:
e3:fa:b8:65:60:e3:e1:65:e0:1e:23:00:0b:74:fa:
d2:f3:03:03:51:9a:fe:43:2f:82:0d:6c:d1:c5:9f:
32:d3:d9:e3:a7:ee:29:df:b8:c8:ee:d7:5a:21:fe:
50:ad:90:db:84:d8:38:cd:07:e8:f0:51:78:72:69:
63:85:89:bd:60:4b:39:fa:d2:30:2c:b5:7a:91:64:
f4:06:9a:2c:3d:2b:d4:7e:22:bf:7e:4d:63:1b:18:
28:90:a0:bf:84:db:27:a1:6e:4b:3a:be:bb:4e:1d:
1a:dc:02:23:2a:8f:f5:ab:a3:09:36:8d:22:93:3f:
40:9f:78:8f:af:93:9e:84:e7:30:89:b0:cf:23:2b:
38:63:95:91:7b:8a:ce:80:e4:c5:f5:c1:7a:49:b1:
36:0d:dc:64:b0:83:75:00:ec:e0:90:da:88:ad:b9:
17:d5:e2:b8:55:aa:fc:47:fd:f8:97:d8:05:46:c2:
1e:c0:5e:a0:64:67:00:a7:d9:92:ce:78:92:d2:29:
0e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9F:A0:41:E4:02:E4:6B:AF:56:60:78:64:0A:5D:04:9B:D7:06:9B
X509v3 Authority Key Identifier:
keyid:A8:18:0B:F1:A7:75:0B:3D:22:F9:35:85:56:E1:1F:0F:F7:66:A6:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4d:e7:f9:bd:70:88:c0:41:4f:e8:54:b2:51:ee:1b:56:62:
fb:3e:79:eb:3f:94:32:cc:6b:ba:31:25:66:6c:41:ed:1d:78:
80:19:9e:fe:48:7f:e5:d7:e2:af:f3:72:a4:64:94:b0:60:54:
6a:bd:03:fb:a8:f5:f4:62:6d:89:ce:6c:1d:a1:14:05:ee:84:
a6:ef:a7:cb:39:08:0a:e3:21:74:06:d8:8a:21:19:60:22:77:
69:b4:12:59:f8:e8:06:77:31:bf:89:9f:8d:58:c9:75:d4:f0:
b0:ef:93:e5:1f:e9:e1:1f:84:dc:a6:13:b1:c7:a1:12:c5:06:
bb:6f:df:9b:56:4e:d8:a3:c4:c0:73:85:56:cb:3c:97:94:e5:
56:09:b3:54:30:35:68:a9:b2:3c:27:de:10:85:f8:27:48:25:
f3:1b:d4:8c:ae:a0:20:dc:81:4e:99:65:59:a5:07:17:c9:82:
4c:f7:d1:b5:89:7c:fa:60:11:24:cc:60:25:03:a6:63:c4:ec:
e4:f1:f6:99:1e:cb:c3:5e:f5:e4:47:a1:0d:94:f3:f7:cc:71:
59:74:a3:0d:f8:5e:09:bd:40:8e:6c:10:be:01:23:94:e5:9f:
f0:43:ea:27:3c:dc:10:f2:82:6d:54:7d:c5:0c:dd:89:29:a8:
fc:64:0d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:43:03 2025 by rpki-client