Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier: CFT9BX6JNuoiJUgVTWLeQK3qiZiE+TQXJobtKBNmAPo=
Subject key identifier: 91:8C:D8:B3:68:EE:48:C3:A5:C7:7E:94:36:3F:A8:1D:F6:43:2E:09
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 01974A0CAA0C14AA961C57EC27BC7F3B29A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number: 0347
Signing time: Sat 07 Jun 2025 11:00:33 +0000
Manifest this update: Sat 07 Jun 2025 11:00:33 +0000
Manifest next update: Sun 08 Jun 2025 11:00:33 +0000
Files and hashes: 1: 0moQdaHf0K44uNdLnoszN_NLZl4.roa (hash: zGziV3K+6liMksPEZN4lWjEoRYfjKPi10ixQL7nMxfI=)
2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: iQ7zR2IKOiUYlFkFL7hP2Oy888v6x3Yc0LN7fOv4Ez8=)
3: nz1XOf28Ogcs8fiWug2xbFcdTSI.roa (hash: ztlz9ATge0wUo5eGVXQllv/BlyjO+lbBdkDSEy3I//E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:aa:0c:14:aa:96:1c:57:ec:27:bc:7f:3b:29:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Jun 7 11:00:33 2025 GMT
Not After : Jun 8 11:00:33 2025 GMT
Subject: CN=918cd8b368ee48c3a5c77e94363fa81df6432e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:25:14:10:7b:91:09:4d:72:ba:8f:5e:6b:
c2:fc:45:95:2a:55:42:ba:09:00:bb:23:38:a6:45:
6f:37:74:a8:29:33:a9:58:ea:ea:e4:e7:14:b0:48:
1a:0a:3c:bc:0f:fa:b0:34:02:fb:00:81:63:02:d7:
85:bf:74:a2:6c:90:85:27:a1:c2:3e:4b:1c:ee:7b:
f4:d9:a7:82:b7:19:55:91:78:9f:ea:82:d0:4e:5b:
72:c6:12:47:c0:c2:e8:61:af:e0:ef:33:9a:06:18:
0d:68:d6:cf:04:7c:de:b2:53:35:91:18:db:ee:c5:
ab:3b:42:0d:c3:62:e1:de:4a:19:99:34:05:fe:e2:
96:70:ee:71:bb:52:8c:66:1c:a1:d1:aa:a2:c7:1c:
c0:38:30:63:2f:14:95:5b:51:d3:35:30:29:ef:0e:
43:45:d1:a0:ab:26:fb:fe:f0:22:ea:2d:45:5b:00:
8f:51:1e:9a:5b:55:67:23:58:1a:aa:a6:d5:35:1d:
d7:0e:d5:08:30:eb:25:6f:32:f5:12:53:f8:f7:65:
b5:98:ad:ac:84:fa:1e:75:81:f1:58:2c:f5:fc:2b:
2e:1a:c1:12:73:62:3b:67:d3:a8:73:33:78:09:37:
6c:e3:cd:b5:7b:ce:31:b0:70:b3:c4:97:cb:4d:71:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8C:D8:B3:68:EE:48:C3:A5:C7:7E:94:36:3F:A8:1D:F6:43:2E:09
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:05:03:52:9e:a6:58:f6:dd:0a:9f:93:91:e6:0b:c4:6a:fb:
24:1b:b2:3b:89:14:57:15:0b:a2:dd:03:27:92:ed:2f:ee:5c:
73:e3:b6:2b:5b:e8:46:5b:a7:17:ae:59:34:c2:b2:87:79:9e:
26:52:01:9f:5e:ad:53:1b:47:a0:44:f1:b4:6b:1e:05:c4:2c:
df:94:0f:2b:e4:b8:33:6e:e8:6c:0e:53:fa:4c:35:ff:16:94:
44:fd:d6:15:62:06:51:41:53:1f:19:44:7f:3c:d7:68:d6:dc:
83:e8:89:b3:bb:6f:2a:19:e7:b7:5b:bb:51:f4:cf:8b:27:61:
2f:ae:2f:c6:bc:c3:be:a7:62:64:12:7b:86:b3:b3:69:67:31:
33:c7:69:bc:0d:32:f7:c5:61:3b:d9:19:b6:db:56:bf:69:ce:
06:02:f4:86:36:74:a4:b4:d4:6f:8b:44:be:34:ca:3e:10:31:
9a:39:24:14:2c:88:e2:f6:26:ca:aa:1e:a8:4c:23:c6:94:7f:
4f:f7:c9:7b:57:9b:68:de:e0:ff:a6:18:f3:dd:55:03:ee:76:
40:6d:06:b8:dd:79:e4:e9:97:e6:34:60:e1:7e:ed:ec:07:c1:
d0:67:56:b4:06:c0:d4:0d:51:40:66:9b:40:a2:3a:43:8b:3b:
6c:f4:19:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:02:05 2025 by rpki-client