Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json)
Hash identifier: hNkMI/mWGS46yAVmRmTuVFCQIBpefgR3A49A9h532ro=
Subject key identifier: 7A:3E:FA:11:4A:E6:67:4E:06:D2:49:B1:17:64:1A:52:57:FC:47:14
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial: 0197481E89953AA306408A567317BDB9689E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
Manifest number: 0C9C
Signing time: Sat 07 Jun 2025 02:00:50 +0000
Manifest this update: Sat 07 Jun 2025 02:00:50 +0000
Manifest next update: Sun 08 Jun 2025 02:00:50 +0000
Files and hashes: 1: 6rV9eDtLqjrWZLXprUqcr99pZaA.roa (hash: dlsrhoQ5PwXdAjp/9r3Vgwhl3pAOBofCxgLlYlDOE18=)
2: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: 6mRa+kfUlv6BQriwFHEnhv3UpBFbC70sw3FsljfoIP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:89:95:3a:a3:06:40:8a:56:73:17:bd:b9:68:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
Validity
Not Before: Jun 7 02:00:50 2025 GMT
Not After : Jun 8 02:00:50 2025 GMT
Subject: CN=7a3efa114ae6674e06d249b117641a5257fc4714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:a8:06:03:6d:cd:fa:fd:ec:29:72:f5:f0:
21:e8:32:e9:ca:e3:17:61:1b:c1:70:f9:a2:84:b2:
d0:77:d1:13:80:37:60:95:79:2b:c6:94:7f:c5:17:
62:c7:b0:a0:6f:9e:c8:f0:10:0b:5d:35:fd:9b:65:
98:4b:f7:1b:b2:6e:a5:e1:14:af:03:1d:0d:e0:88:
b9:97:41:d1:0f:1a:87:9c:1a:5f:f9:c7:ab:21:93:
ae:e3:48:b2:53:ee:c7:72:dc:15:e5:22:2c:68:e8:
81:87:8d:ff:0c:6b:5b:a7:3d:56:f4:69:5a:dd:6f:
c4:76:87:6d:98:8a:5c:3b:f2:67:73:68:29:05:3d:
96:cb:7f:67:d8:31:b4:a1:82:a0:fd:8e:ef:46:68:
25:08:b2:3a:8e:c4:63:96:7c:a9:14:72:29:76:74:
cf:6b:d0:3a:a5:b1:e0:69:73:0a:d3:f4:63:39:c2:
27:f4:5f:40:82:0e:21:4d:fb:3b:a6:0b:e5:83:30:
fe:f9:98:a2:89:2e:70:d2:27:62:78:59:9c:75:8d:
8d:d9:62:5e:d1:ef:8e:73:a8:d5:29:e8:30:c1:19:
ec:8e:80:89:24:c4:15:7c:19:0e:49:19:4b:9b:df:
94:12:32:95:48:cf:af:9d:7e:9e:51:b2:e0:41:2b:
9f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3E:FA:11:4A:E6:67:4E:06:D2:49:B1:17:64:1A:52:57:FC:47:14
X509v3 Authority Key Identifier:
keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2d:a2:07:4d:00:f8:05:dd:b4:ad:f5:81:1f:49:64:84:a4:
58:53:e4:5a:99:29:e8:16:79:1e:bf:11:b5:c4:03:6d:67:5b:
57:f5:06:b3:fa:cd:b7:ac:4b:cd:3e:c9:02:15:9e:25:fd:d9:
54:af:0a:20:b8:86:52:0c:02:81:9b:81:01:7e:59:31:0e:fb:
c1:02:42:93:3b:8f:3e:f7:04:b5:fb:79:fc:b7:20:e8:c7:fd:
a5:71:2f:99:e5:5b:9d:a7:5b:f0:74:c8:ee:6f:4c:61:04:0e:
93:1c:93:de:e2:db:59:a7:d2:bf:cf:93:05:1f:52:61:b9:22:
46:bb:fa:3a:0a:b1:04:a4:f1:63:d0:63:62:9c:63:db:15:fa:
b8:84:2d:7f:b9:3f:6f:7f:50:83:3d:57:ba:e3:c7:aa:66:a0:
04:99:97:c0:d1:8f:cd:0c:45:95:6e:4e:e7:17:96:45:31:05:
98:12:fc:0d:2a:ca:29:59:d2:1f:0f:39:04:ca:9f:c1:18:fb:
c7:2a:a4:b1:b9:c1:4c:df:16:e2:b6:69:80:74:79:cd:76:ac:
d6:95:6d:10:cb:ce:c9:b9:de:a7:c4:a8:c8:f0:11:4d:9b:6b:
af:06:40:bd:25:62:c3:75:ee:71:31:84:5d:07:6c:de:42:54:
e1:9a:90:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:42:21 2025 by rpki-client