Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
File: qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft (raw, json)
Hash identifier: tRSx1NPTBMElH73Gynwwgarux0uoHLR1wkO1hnr3dGY=
Subject key identifier: 86:B3:E6:5D:9C:6C:E1:E0:A3:F7:48:E5:42:D7:F9:2F:E2:81:E7:36
Authority key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
Certificate issuer: /CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Certificate serial: 01976F99EF06F90714605FADBD6A2A428F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 18:00:48 +0000
Manifest this update: Sat 14 Jun 2025 18:00:48 +0000
Manifest next update: Sun 15 Jun 2025 18:00:48 +0000
Files and hashes: 1: GxaI4hXBc2RYVYOf0z16mvSsnyE.roa (hash: g97pf2epkDk5ZUzae5HXyC8jqAaA5Zg8rR+Lupka6qA=)
2: qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl (hash: XLx+gj5ZweHaEo1jkyvyZAEKPjFg0s58bq8l9SCjdRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:ef:06:f9:07:14:60:5f:ad:bd:6a:2a:42:8f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Validity
Not Before: Jun 14 18:00:48 2025 GMT
Not After : Jun 15 18:00:48 2025 GMT
Subject: CN=86b3e65d9c6ce1e0a3f748e542d7f92fe281e736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:97:c5:1b:26:f3:3a:ca:4e:0b:e2:e4:57:
ce:3a:35:93:70:8d:77:ea:f6:d8:31:aa:8e:4d:09:
34:d8:1a:36:1a:37:83:ca:ff:a0:df:b8:31:63:20:
17:55:33:3e:3e:48:0b:23:9c:3b:f5:cc:58:8e:c5:
c0:a7:c7:b6:92:9f:7b:4b:36:86:8f:13:1a:cc:32:
81:63:c5:6b:47:24:6f:78:ec:2f:3c:47:38:1e:f3:
99:db:5e:2a:95:fc:02:11:29:95:9e:ed:26:b0:f7:
9c:a7:05:89:28:b6:96:aa:ac:48:79:20:c6:c6:b5:
58:9f:05:02:d1:27:1b:92:4c:05:12:9f:a9:55:c2:
01:f3:a3:14:0d:63:57:de:83:b4:e2:7a:bc:24:4e:
07:05:b4:f4:0f:e6:12:f3:a1:70:fb:7c:e9:23:e7:
71:bd:e4:f0:4b:a6:38:6d:33:74:87:f5:a0:6f:73:
05:95:bf:b5:90:1d:20:dc:39:e6:e6:55:55:3b:34:
33:ce:70:35:d7:4e:12:69:77:1a:45:2d:bb:dc:69:
c0:51:5d:6d:f5:e7:e5:c6:b4:33:82:77:b6:ca:48:
04:28:aa:a7:cf:df:9d:e5:ca:a5:6c:26:b8:54:d3:
85:65:88:49:ea:ac:02:48:56:01:df:7c:84:10:49:
0f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B3:E6:5D:9C:6C:E1:E0:A3:F7:48:E5:42:D7:F9:2F:E2:81:E7:36
X509v3 Authority Key Identifier:
keyid:A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f3:82:a5:b6:68:0e:0b:d9:36:6d:a7:3e:2b:2e:a4:3b:7b:
1d:b9:33:12:be:82:c9:3b:92:e2:13:b2:30:27:77:08:10:41:
0e:09:3a:b1:92:e2:e1:e0:f6:a7:a8:62:f1:19:f0:1f:df:e3:
78:54:1a:7e:b8:6c:07:bf:bf:1f:df:7c:18:1d:27:86:e7:55:
9b:fa:d9:84:98:fd:c6:9a:44:28:c2:b9:b9:ad:a7:87:8b:7e:
6c:e0:ae:99:c1:9c:8b:03:7f:e5:37:22:fa:82:f3:cb:c0:76:
f9:e4:ee:7d:18:22:f2:bd:5d:28:56:a0:c0:8f:83:30:f1:7f:
ac:74:e1:5e:ae:44:cc:22:2e:83:22:4b:d4:da:8f:8d:ef:cd:
7a:81:bc:08:58:bd:23:7d:4c:ee:e0:ae:26:ca:1f:9c:b6:7e:
d9:ca:e7:7a:54:3d:b5:12:5e:eb:b5:f8:9c:53:e7:9d:a8:df:
df:40:a2:48:87:1d:2e:66:22:9e:ca:49:6f:13:5c:b6:de:37:
b8:fd:b2:c7:59:3d:34:00:3b:5e:b5:d2:2c:01:81:ea:bd:ef:
c6:9f:ff:d8:a9:22:7e:3b:d5:f1:13:cc:66:08:30:a5:eb:bb:
c7:de:2f:5a:cf:1d:c7:63:90:43:a5:4a:84:ad:8e:51:1c:29:
eb:e6:87:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:24:49 2025 by rpki-client