Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: ru/c0FGQDIsUI4Bh5tp0ShtQAaaMMYqugkx/JDwQdCY=
Subject key identifier: A7:88:9F:FE:86:C1:3C:35:E5:47:9B:91:2F:AF:B7:46:F6:F0:18:66
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 019768177215B03D7BF338A8141E9147F1A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 07:00:56 +0000
Manifest this update: Fri 13 Jun 2025 07:00:56 +0000
Manifest next update: Sat 14 Jun 2025 07:00:56 +0000
Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: HVUAh00V98lHsO7uEKw2x62zMP2H6kYZXLaw9vfGHUY=)
2: RWXMqjkV2JSmE_jNgsIntDAZ40E.roa (hash: JlOZyqtU1Xw8rdg1LgiJgni//bw4mMZ1Qt4Pvh5z6tE=)
3: VWg3f0Gbf8sa5f2R-1SRG52r7-8.roa (hash: /HyVmsWd+2rMbD1GgNRa5CoP6uMJQMzjsYwposvYEw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:17:72:15:b0:3d:7b:f3:38:a8:14:1e:91:47:f1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Jun 13 07:00:56 2025 GMT
Not After : Jun 14 07:00:56 2025 GMT
Subject: CN=a7889ffe86c13c35e5479b912fafb746f6f01866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:90:aa:3e:9b:98:61:67:36:d4:90:bf:f4:
5b:10:06:21:ee:91:d8:3e:fd:54:e3:8d:e2:a8:d1:
f9:87:04:9e:8d:5a:59:56:39:5e:eb:57:3d:da:dd:
cc:c0:6b:a9:e2:8d:50:fe:0b:a1:fa:e3:5d:5c:9c:
b0:1d:09:17:70:d0:ab:36:a7:40:db:ce:09:28:5c:
7b:e2:49:65:45:eb:13:23:93:87:8b:c4:a4:85:7a:
dd:ec:8b:f9:8c:cd:20:06:df:02:68:1b:a4:05:4e:
d2:56:97:71:74:62:98:41:f7:7b:46:7c:44:46:4c:
95:2f:12:dc:f9:7e:1e:41:f3:b6:16:0a:56:73:d6:
47:4d:b1:e9:7a:e2:13:30:2a:ba:fe:67:a5:20:cc:
00:bd:fb:a4:ad:7c:a8:ed:c4:c8:41:69:5f:d2:00:
20:13:aa:c8:43:65:9f:5b:5f:38:68:c9:eb:30:1b:
9a:e5:98:fc:49:e7:07:e9:3f:63:5d:16:1d:c8:46:
da:25:c8:99:bd:cc:47:85:8d:74:fd:34:b1:26:ef:
33:de:9e:03:0c:6a:eb:49:d0:34:2d:c9:3a:46:6d:
aa:8c:3b:65:36:11:ef:32:af:c2:91:d2:b3:13:d0:
a8:38:0a:18:3f:47:61:b5:4e:25:dd:2e:57:d0:bb:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:88:9F:FE:86:C1:3C:35:E5:47:9B:91:2F:AF:B7:46:F6:F0:18:66
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:00:2d:fb:5b:d2:c8:cf:6d:aa:53:48:ed:83:1b:1e:e5:fc:
74:d0:19:33:18:38:d3:b2:9e:07:1d:16:6a:86:fa:d9:eb:13:
4c:33:2d:79:1a:68:8d:57:9a:39:3a:1a:74:2a:a5:bb:fd:63:
6c:b9:97:19:94:9b:e8:89:8d:7a:fa:2d:d6:d8:9e:e5:37:1c:
6c:0d:7f:e9:87:6e:0c:c4:73:ac:09:21:36:94:57:cf:c8:0a:
c6:50:c7:8f:8d:b6:aa:88:04:a1:bc:4c:d8:8a:9a:76:42:d8:
72:d1:f9:18:2d:bf:27:c2:fd:22:bc:ce:2d:f7:cc:fa:80:8d:
e4:03:7d:e2:67:20:5f:10:e1:f2:65:1a:28:84:28:0e:31:c5:
e7:cc:84:ee:19:7b:c7:aa:69:de:25:a2:09:65:0c:dd:99:e5:
81:31:8d:15:ff:90:e8:f7:cf:a4:5a:d6:61:99:dd:be:fa:e8:
e6:87:9b:b7:d0:b6:fa:50:35:d5:e7:4d:11:84:28:19:15:f2:
b9:c6:70:92:c3:89:f1:b6:bb:7f:5f:6a:fa:15:7a:3e:4b:b7:
6e:10:36:28:78:a5:8f:6a:80:1f:55:34:77:71:6a:87:71:4a:
e4:d6:be:96:81:a4:89:a2:89:0c:22:43:e7:7e:9d:12:0f:c8:
29:5f:ee:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoF3IVsD178zioFB6RR/GiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMjFkZmYzNWVkZjBjZTZlNDI4ZDZhZmZjMjEyYzQ3MTc2
NzllZTEwHhcNMjUwNjEzMDcwMDU2WhcNMjUwNjE0MDcwMDU2WjAzMTEwLwYDVQQD
EyhhNzg4OWZmZTg2YzEzYzM1ZTU0NzliOTEyZmFmYjc0NmY2ZjAxODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbSQqj6bmGFnNtSQv/RbEAYh7pHY
Pv1U443iqNH5hwSejVpZVjle61c92t3MwGup4o1Q/guh+uNdXJywHQkXcNCrNqdA
284JKFx74kllResTI5OHi8SkhXrd7Iv5jM0gBt8CaBukBU7SVpdxdGKYQfd7RnxE
RkyVLxLc+X4eQfO2FgpWc9ZHTbHpeuITMCq6/melIMwAvfukrXyo7cTIQWlf0gAg
E6rIQ2WfW184aMnrMBua5Zj8SecH6T9jXRYdyEbaJciZvcxHhY10/TSxJu8z3p4D
DGrrSdA0Lck6Rm2qjDtlNhHvMq/CkdKzE9CoOAoYP0dhtU4l3S5X0Lsx6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeIn/6GwTw15UebkS+vt0b28BhmMB8GA1UdIwQY
MBaAFEAh3/Ne3wzm5CjWr/whLEcXZ57hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAt
ZWI1M2E1MThjMjYzLzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAtZWI1M2E1MThjMjYz
LzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAAt+1vS
yM9tqlNI7YMbHuX8dNAZMxg407KeBx0Waob62esTTDMteRpojVeaOToadCqlu/1j
bLmXGZSb6ImNevot1tie5TccbA1/6YduDMRzrAkhNpRXz8gKxlDHj422qogEobxM
2IqadkLYctH5GC2/J8L9IrzOLffM+oCN5AN94mcgXxDh8mUaKIQoDjHF58yE7hl7
x6pp3iWiCWUM3ZnlgTGNFf+Q6PfPpFrWYZndvvro5oebt9C2+lA11edNEYQoGRXy
ucZwksOJ8ba7f19q+hV6Pku3bhA2KHilj2qAH1U0d3Fqh3FK5Na+loGkiaKJDCJD
536dEg/IKV/uxA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 11:05:54 2025 by rpki-client