Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
File: qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft (raw, json)
Hash identifier: Abe9wTW6zS9LhitajP0FyPV+BCFCbxoCTqnUIJRZBnc=
Subject key identifier: 70:C3:AC:C4:2D:24:79:DC:EC:38:35:C4:1B:BC:F5:12:50:57:01:15
Authority key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
Certificate issuer: /CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Certificate serial: 0199221E2C757E0A6D428C563FA3D17B4DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 03:00:26 +0000
Manifest this update: Sun 07 Sep 2025 03:00:26 +0000
Manifest next update: Mon 08 Sep 2025 03:00:26 +0000
Files and hashes: 1: GxaI4hXBc2RYVYOf0z16mvSsnyE.roa (hash: g97pf2epkDk5ZUzae5HXyC8jqAaA5Zg8rR+Lupka6qA=)
2: qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl (hash: 7eoUhnT77U+eDxmfE4096xCaSUNCECosR0NDEy80GzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:2c:75:7e:0a:6d:42:8c:56:3f:a3:d1:7b:4d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Validity
Not Before: Sep 7 03:00:26 2025 GMT
Not After : Sep 8 03:00:26 2025 GMT
Subject: CN=70c3acc42d2479dcec3835c41bbcf51250570115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:6e:70:d5:9d:e5:0a:cd:fc:3c:19:48:e1:
20:5b:fb:d7:30:44:61:86:3f:f3:7f:73:c1:b2:83:
64:b8:4b:1a:78:b4:8b:98:39:41:ae:8e:b7:cb:8c:
74:1a:01:13:8b:fc:9a:12:84:96:cc:52:22:38:65:
9d:f3:63:a2:0b:dc:5a:1b:8e:6f:c8:41:c2:a6:67:
63:4e:52:b2:a3:dd:36:fb:42:15:54:c4:37:f9:f0:
e9:1c:1e:69:62:75:96:a0:15:11:85:96:f9:22:69:
3e:53:5b:8c:1c:58:b4:b3:d7:9b:05:f0:d4:b6:1f:
d1:c6:0f:d9:42:dc:55:69:0b:9e:ce:fd:aa:56:e4:
d4:31:9a:f7:27:c5:9a:61:40:a7:f7:c8:96:66:e2:
52:46:ce:b8:f3:69:da:31:45:6b:6b:44:01:70:28:
1d:07:85:c4:84:a2:55:dd:fd:f9:6e:f4:d0:f5:39:
f8:e0:f6:41:93:4f:a0:46:bd:c1:73:e1:98:79:a9:
e0:e6:d0:67:18:0d:25:bf:f4:1c:de:f7:c4:eb:c0:
f6:36:f1:28:c5:0b:1a:96:5a:57:11:cb:a1:01:84:
ca:2b:3e:44:3b:78:d3:17:a5:52:c7:5b:9e:0d:01:
83:ed:fe:d4:ba:e8:f1:d8:a5:a4:23:c8:50:10:3d:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C3:AC:C4:2D:24:79:DC:EC:38:35:C4:1B:BC:F5:12:50:57:01:15
X509v3 Authority Key Identifier:
keyid:A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:10:40:68:5b:7f:40:7f:72:35:89:bb:8b:5f:32:35:3e:7b:
c7:88:36:09:fe:8a:77:ee:e3:91:25:96:4a:1f:13:7d:ac:4c:
33:e8:c2:bc:35:30:2f:bc:ce:e4:58:ad:da:f3:64:b7:fb:f9:
78:06:75:44:ec:ca:93:77:ed:57:9a:b1:3a:49:c5:eb:0b:0f:
58:75:41:a4:24:a1:d5:93:be:fe:10:ca:28:1e:96:1e:6b:df:
c5:31:2e:05:bd:69:01:92:a6:39:5e:a3:7b:69:73:aa:5c:10:
de:e2:04:ce:99:9a:4e:ae:29:37:1c:da:57:c9:e9:38:cc:45:
d1:f4:cb:94:f1:e0:e7:af:3c:d4:50:68:44:8c:d1:1c:31:93:
60:ea:b6:d1:65:ef:44:15:0c:15:d2:85:f9:d0:fc:52:5b:d6:
ba:32:f2:5a:d9:1c:fb:c3:af:90:93:74:0e:50:19:f9:fa:bc:
77:f9:04:01:67:22:1e:5c:f2:b0:2a:4e:1d:5f:a7:d0:0d:5b:
87:b8:2e:fa:fa:01:38:27:d1:50:64:44:e5:8c:93:cb:2e:9a:
c8:7b:6c:fb:16:ee:87:79:95:c6:61:8c:b2:f7:d4:0a:db:51:
c9:c4:71:56:0f:d0:fc:24:62:18:6b:3a:ee:5e:a0:bd:86:1e:
42:38:af:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:45 2025 by rpki-client