Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
File: qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft (raw, json)
Hash identifier: k3wZehR3E0m6dBpm83AcHNh9+m2LuKI315a+hkLSB88=
Subject key identifier: DE:71:02:BD:57:56:78:59:31:2A:95:B0:72:25:11:89:48:6F:EE:B6
Authority key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
Certificate issuer: /CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Certificate serial: 01965793BB22BB237688CB76849DB8B2CB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 09:00:21 +0000
Manifest this update: Mon 21 Apr 2025 09:00:21 +0000
Manifest next update: Tue 22 Apr 2025 09:00:21 +0000
Files and hashes: 1: GxaI4hXBc2RYVYOf0z16mvSsnyE.roa (hash: g97pf2epkDk5ZUzae5HXyC8jqAaA5Zg8rR+Lupka6qA=)
2: qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl (hash: iH0Wt2rGRGQO/bMZBFjcTu8tEy2HrJLRirARibm8eng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:bb:22:bb:23:76:88:cb:76:84:9d:b8:b2:cb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Validity
Not Before: Apr 21 09:00:21 2025 GMT
Not After : Apr 22 09:00:21 2025 GMT
Subject: CN=de7102bd57567859312a95b072251189486feeb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c1:0b:e6:ad:f4:3f:1c:00:74:5e:f4:83:af:
6b:5d:91:50:99:02:77:d4:5c:0f:04:1a:94:af:bf:
75:ca:d6:27:2b:61:e4:9f:f7:9f:87:70:ab:f9:7c:
22:cb:2e:64:76:83:1e:3e:6f:e0:b9:76:2b:22:88:
ec:92:a6:4f:80:d1:2d:ae:57:b2:5d:0f:5c:e8:b3:
01:b5:f8:4c:d7:ae:af:71:fa:00:ae:aa:29:e6:b8:
be:4f:8c:61:b6:86:ff:d8:f7:18:8e:55:92:c9:01:
28:ff:cc:12:b0:1a:2d:a7:92:40:d4:3e:1b:fd:ea:
86:05:2c:68:f9:cd:bc:33:e6:60:96:e6:a0:8b:28:
7a:20:f9:5c:bd:8c:0d:08:5e:72:de:09:59:90:3b:
2a:a2:e0:cd:c5:2d:17:6a:5d:86:7e:e7:b3:d2:e6:
f8:21:e0:0a:a0:08:81:74:d0:96:ea:7e:0e:ac:38:
b3:f0:29:e4:be:a7:21:66:24:bb:cc:e9:a4:37:f1:
c5:ee:70:64:8d:de:bc:22:f3:8b:8f:66:b2:3f:50:
d8:1f:fd:8f:f7:12:33:b8:c5:8c:d7:95:50:f9:b9:
23:35:57:9b:7c:1b:1a:8c:20:9e:dc:49:23:97:70:
31:cb:9a:79:68:ec:91:b8:78:fd:26:a9:c6:55:51:
be:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:71:02:BD:57:56:78:59:31:2A:95:B0:72:25:11:89:48:6F:EE:B6
X509v3 Authority Key Identifier:
keyid:A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:46:db:9a:16:f6:97:90:be:91:df:2e:22:75:65:e3:f5:dd:
3b:ba:c7:64:a1:0c:67:b1:36:b6:85:d4:69:2f:b4:48:64:4f:
e0:15:88:f0:e8:43:e2:a4:9d:ce:10:27:93:62:fd:71:45:f5:
6a:81:6f:bd:d1:04:46:2d:d9:04:b5:e7:1b:c6:82:66:79:98:
71:46:b6:6a:03:32:55:05:72:8c:c9:94:d3:2f:ef:02:b2:59:
78:27:83:e6:fb:1a:0c:9e:ac:9d:f0:41:1a:ce:42:56:e2:89:
c6:b1:89:91:49:cf:c4:95:fd:ba:e3:75:5a:f5:04:a0:ce:3b:
dd:e0:73:98:2c:a3:d1:84:05:50:7f:d4:b5:83:b1:8f:75:66:
e3:e2:31:20:c7:97:b3:89:e2:3d:23:1f:bd:87:eb:61:a9:84:
45:76:b4:39:32:a9:65:c4:0e:6f:6c:a7:a0:7a:84:e3:00:71:
15:f9:8b:f6:9d:e3:50:33:4c:01:78:f6:22:49:bb:b6:d2:74:
04:35:39:a8:14:e6:4c:01:ec:39:c5:76:bf:fb:39:2e:c1:27:
c3:58:cc:ff:31:88:d1:66:b0:c2:31:18:d5:39:e8:30:f5:35:
28:21:a8:b2:1f:83:c6:0a:60:32:7f:70:e8:54:a7:30:a4:c0:
a1:2b:94:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:55 2025 by rpki-client