Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: ATJ+H4JJQIX4FttmyCneRdZblHw272H67lW/KBrPovE=
Subject key identifier: F8:79:52:96:E2:F5:5B:85:DA:7A:2A:9D:A5:E8:FA:1C:22:5C:45:BB
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 01987B9C5F38A2E7633EF0CEE66C8D4ABAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 06D8
Signing time: Tue 05 Aug 2025 19:01:42 +0000
Manifest this update: Tue 05 Aug 2025 19:01:42 +0000
Manifest next update: Wed 06 Aug 2025 19:01:42 +0000
Files and hashes: 1: jnSve3XmFe0Ms43uzQn1WmoreJ0.roa (hash: JpZLimfc7+7aqyHJzwRKIdaJc+FFYashS7WERx4Vf3Q=)
2: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: oheDq/bHUzt79BwQFnlBxuki/KFm0dRRTUCVeUw/KhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:5f:38:a2:e7:63:3e:f0:ce:e6:6c:8d:4a:ba:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Aug 5 19:01:42 2025 GMT
Not After : Aug 6 19:01:42 2025 GMT
Subject: CN=f8795296e2f55b85da7a2a9da5e8fa1c225c45bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:c5:eb:92:d8:09:8b:af:89:74:34:dc:8f:
c0:4a:1e:0d:f9:98:13:3c:94:86:3c:f9:e9:bb:3d:
a3:33:3e:7d:c3:1d:56:b8:3e:3c:5b:f5:f0:93:cc:
fc:db:89:b8:7b:ab:4d:3a:31:37:b7:47:a6:d1:57:
32:60:64:ab:f5:9c:a1:9d:19:a0:d6:e5:b3:0c:f7:
b4:58:b0:5f:20:97:5e:cb:6b:4a:15:85:b0:fe:62:
ff:78:e6:a4:9d:d8:4c:df:6f:a3:7a:af:80:00:21:
78:06:24:2d:7a:dc:e9:11:59:ee:bd:97:26:e3:fd:
d0:17:89:c4:0b:39:1e:b3:76:fc:ce:e3:bb:20:e2:
58:64:97:35:92:9e:27:b9:79:5e:f8:05:70:79:de:
18:ec:5c:62:0a:10:fd:f5:ac:f6:ca:e6:48:0f:10:
fe:fb:2f:af:cd:77:21:5b:d3:15:30:c5:49:8b:f9:
81:e5:e3:63:ce:cc:1e:3c:fa:27:2c:70:aa:d7:4c:
d8:ca:23:e8:e3:23:ee:9d:fe:c8:39:f4:73:3a:4e:
a7:80:97:d5:d6:3a:45:20:3c:0a:bf:ab:0a:2e:c2:
47:61:a9:0d:6b:87:b1:9e:b8:95:2c:42:7b:49:41:
9c:26:50:4e:0a:c6:cc:88:5d:92:08:64:12:d5:51:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:79:52:96:E2:F5:5B:85:DA:7A:2A:9D:A5:E8:FA:1C:22:5C:45:BB
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:14:4a:5e:9f:f2:3d:11:fb:bd:bb:ca:6b:d8:22:0c:40:e9:
a7:37:66:8b:45:23:1d:63:52:f8:fd:9d:f5:2c:ed:ae:92:37:
bd:8d:21:20:70:9a:90:88:b4:a6:88:6c:46:f7:e4:ed:b9:b8:
b9:51:74:51:47:00:ce:78:eb:a1:7f:cb:cf:29:fe:07:41:fe:
5a:ee:68:b2:25:ad:b5:18:8e:44:bc:38:a6:75:6e:bc:4d:fa:
83:41:e7:2f:d5:4e:62:f3:8f:8d:28:eb:6a:0e:f5:a8:b5:e4:
48:55:64:2e:ce:d9:86:4d:44:0f:f0:2f:df:cd:0c:8a:54:11:
ce:71:68:91:84:6d:5b:c2:47:9f:11:83:99:3c:ea:5a:88:b3:
cc:24:8a:e2:01:04:de:63:bc:cf:9f:7f:8f:13:46:2e:f1:a2:
aa:fd:2c:28:db:9a:06:08:07:f3:d5:1b:5b:f9:3d:c5:49:b5:
3e:64:71:c6:ff:48:94:d4:c1:e5:9e:3e:b9:1b:87:5f:cc:41:
6b:98:61:c0:cb:f9:d1:b2:ce:88:04:9b:c4:1f:c7:d9:ef:cc:
09:cf:7c:fb:50:5d:4b:02:ec:6b:29:d6:a0:a3:33:25:fe:06:
12:9f:59:e0:00:31:96:5c:c3:64:39:c5:81:4e:cc:e6:97:8a:
9c:9b:1f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:06:12 2025 by rpki-client