Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
File: qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft (raw, json)
Hash identifier: KSEv4R2CirUKtVT8sTETkkX8UzRNH5qoGKzL4Dqga1c=
Subject key identifier: 09:B0:60:1B:B8:11:44:C1:70:81:F2:0E:43:C3:61:8A:6B:3F:1F:1E
Authority key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
Certificate issuer: /CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Certificate serial: 019748FA339F6B09101EBB456BF27DF0DA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 06:00:46 +0000
Manifest this update: Sat 07 Jun 2025 06:00:46 +0000
Manifest next update: Sun 08 Jun 2025 06:00:46 +0000
Files and hashes: 1: GxaI4hXBc2RYVYOf0z16mvSsnyE.roa (hash: g97pf2epkDk5ZUzae5HXyC8jqAaA5Zg8rR+Lupka6qA=)
2: qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl (hash: yE1G7ssNcp1Sb+A7p5VyGz2pjmLewMIXTSrSpxYlzYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:33:9f:6b:09:10:1e:bb:45:6b:f2:7d:f0:da:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Validity
Not Before: Jun 7 06:00:46 2025 GMT
Not After : Jun 8 06:00:46 2025 GMT
Subject: CN=09b0601bb81144c17081f20e43c3618a6b3f1f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:05:8f:f7:91:76:de:c9:4e:31:de:f4:f7:
2a:a0:48:f6:b0:21:5c:2d:9b:ee:9c:e9:3d:76:f8:
72:c1:08:f0:a1:de:45:18:0d:16:b8:65:2b:bb:5e:
35:36:97:1f:e2:37:f6:ee:09:e2:b4:30:29:57:dc:
02:28:73:86:ca:0d:06:cb:b6:8c:e8:18:a8:a7:99:
de:b4:e4:42:8b:f7:07:96:4e:52:3a:fc:b8:a5:35:
28:38:46:c0:6b:06:81:49:21:2a:25:99:ea:78:38:
d2:8f:80:e4:3e:22:b3:9b:fc:f8:23:bf:83:35:97:
0c:97:89:43:59:d4:cb:44:80:2d:da:9f:7a:ea:6a:
f0:f2:55:14:0d:e4:0b:c7:8c:e5:ef:fa:9e:9d:06:
8b:93:ac:79:15:8d:a9:f3:28:8a:cc:56:f6:c9:95:
2e:b8:01:70:7e:b2:dc:ab:78:cd:af:6d:b3:68:6b:
e7:f3:50:4e:78:e2:98:9a:e8:74:86:ad:ed:e1:f4:
1d:4d:21:39:4b:8c:8e:30:16:be:2b:c6:54:42:cb:
65:e4:24:0f:26:11:8f:51:11:3f:6f:50:3d:0e:02:
64:a7:a8:66:89:35:93:68:2c:c8:d6:b6:50:a9:23:
82:4b:54:34:7c:d4:10:43:3e:27:33:98:2e:1b:2c:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B0:60:1B:B8:11:44:C1:70:81:F2:0E:43:C3:61:8A:6B:3F:1F:1E
X509v3 Authority Key Identifier:
keyid:A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9f:a7:6b:a5:32:83:20:9b:16:87:61:29:9d:7a:f3:d6:f4:
f0:b8:a7:67:eb:40:f3:f3:03:5f:8d:ef:e0:c3:a5:12:00:d3:
6f:11:39:64:5b:a1:85:28:69:e7:9a:ea:73:bd:bf:c8:36:d9:
72:e9:d8:30:0c:5c:90:65:e0:58:f3:4d:69:21:ba:50:2d:1b:
af:f7:30:20:e2:ac:e2:9b:9e:66:f9:27:58:fb:f8:27:a7:47:
60:bb:c7:85:9e:1b:45:87:6f:08:33:b1:8d:10:ab:f9:08:ae:
b7:ff:ab:cb:72:f6:68:08:90:c8:7b:91:d8:35:cb:75:1b:3f:
3e:31:77:bd:39:11:28:16:63:63:af:84:7c:54:5c:6e:08:be:
a7:59:96:e6:0a:14:5c:9e:dd:55:6a:29:6f:9d:e7:23:8a:75:
a6:53:f9:50:09:13:52:91:fe:26:27:7b:29:2c:fa:07:ed:18:
a9:8d:3f:d6:36:6b:0f:55:87:23:42:ff:95:d1:55:f3:27:7d:
a3:c8:8d:82:38:f9:22:89:fd:c4:3e:8b:35:0a:39:7c:bd:62:
c4:9f:89:e2:a2:6e:b1:05:3b:2b:3f:09:4f:16:eb:65:9e:e4:
0d:27:ae:c8:2b:e4:bc:61:96:d6:d3:81:07:78:4e:82:91:f5:
b3:5c:d0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:12:54 2025 by rpki-client