Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
File: qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft (raw, json)
Hash identifier: 6cdLOSxc2kuKuTvXvnqAaAZa5tttfqviugOHZwUxxxQ=
Subject key identifier: 18:A0:F2:37:15:ED:23:A5:B5:B2:0F:E1:83:CC:73:71:81:22:CA:19
Authority key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
Certificate issuer: /CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Certificate serial: 019678684B2078E7EA457380BD6A1750DEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 18:00:22 +0000
Manifest this update: Sun 27 Apr 2025 18:00:22 +0000
Manifest next update: Mon 28 Apr 2025 18:00:22 +0000
Files and hashes: 1: GxaI4hXBc2RYVYOf0z16mvSsnyE.roa (hash: g97pf2epkDk5ZUzae5HXyC8jqAaA5Zg8rR+Lupka6qA=)
2: qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl (hash: TFGZyh2vrP3PBG4ZdX3sB8pUlYafynpZOVmi3oQUE0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:4b:20:78:e7:ea:45:73:80:bd:6a:17:50:de:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Validity
Not Before: Apr 27 18:00:22 2025 GMT
Not After : Apr 28 18:00:22 2025 GMT
Subject: CN=18a0f23715ed23a5b5b20fe183cc73718122ca19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8c:83:4a:a8:1a:29:5c:22:2a:78:84:45:76:
6d:64:9c:b2:5d:3c:ca:1f:e1:a4:cc:d2:5c:07:c3:
f3:59:ae:b5:c0:a8:ec:ef:ed:a8:32:87:93:90:aa:
84:d8:5d:7c:8c:35:53:99:19:76:60:7b:9a:bb:24:
af:34:25:2d:79:86:18:73:94:b6:25:f1:95:24:12:
eb:b5:b6:91:d1:a9:f0:ec:ad:d5:2a:c4:e5:ff:3c:
18:42:dd:da:6d:3a:3c:f9:ec:5d:19:07:db:da:ef:
d0:27:21:e8:13:12:f9:f6:98:3d:79:72:c1:3c:33:
92:a5:06:bb:50:b9:da:d6:52:da:dd:93:ad:bc:26:
b9:e3:77:df:3f:40:35:e3:9c:48:13:a4:76:a8:68:
0e:ef:db:9d:b3:f6:a2:1c:bf:01:cd:a1:91:33:5a:
6d:be:84:eb:a4:75:c0:db:f9:b4:e6:1d:d4:ce:2a:
6d:26:31:88:fc:7d:81:5a:37:ba:28:95:a7:d7:de:
40:c3:b9:49:61:d1:fa:88:de:3a:cb:af:13:72:d9:
0b:ac:1f:2e:19:f5:e3:48:7e:fe:0a:a6:3a:e2:fa:
9d:57:97:eb:7a:8f:b5:c7:d0:b5:a3:32:9c:7d:ce:
22:01:60:ec:23:f5:ab:cd:b1:95:2a:33:de:15:75:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A0:F2:37:15:ED:23:A5:B5:B2:0F:E1:83:CC:73:71:81:22:CA:19
X509v3 Authority Key Identifier:
keyid:A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bc:10:f3:a7:80:a1:74:55:1c:06:68:5b:e6:c3:07:60:c3:
35:99:5a:99:6f:45:70:8f:a4:d4:20:92:7e:5f:9e:b5:71:9e:
12:2a:36:45:6b:2b:bd:ab:59:88:5e:33:c9:8c:92:e4:83:66:
47:db:ce:9a:92:57:48:2b:5e:8b:c6:8d:37:c9:71:8c:c3:78:
e9:43:da:d1:93:8d:f5:33:b6:e2:ab:57:b9:fb:70:61:eb:0e:
96:63:2e:b6:f7:a0:99:ae:56:01:e1:37:bc:c0:02:5e:87:9f:
62:87:f0:7e:57:0e:cb:2f:66:a0:d7:d4:ed:d5:b3:c1:d8:fe:
3f:6c:4d:0c:32:ee:ce:63:bd:48:ce:28:e7:23:6e:8e:58:69:
63:6d:53:de:32:aa:f2:70:5d:a0:7a:05:e9:60:a1:c0:cb:bf:
f8:e5:53:56:f1:de:17:9f:0e:73:a8:52:eb:69:30:92:e4:45:
ba:19:8b:01:89:5e:f6:54:00:da:2f:d8:ce:60:d6:6c:b2:77:
26:a2:49:5a:a7:18:4d:23:1f:2f:57:1c:26:7c:cc:02:81:71:
cc:d1:07:f9:56:38:33:9a:3d:38:a9:d6:13:cc:e7:ab:2b:10:
49:9e:37:7d:ff:bb:1e:fd:4b:ee:da:3c:95:7b:23:01:75:1a:
5b:f6:a6:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aEsgeOfqRXOAvWoXUN62MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YzE4N2JjN2E5ZTg4NTMzNWE3ZWI5YjBhNDM4ZmU4MTFj
MDM4NDcwHhcNMjUwNDI3MTgwMDIyWhcNMjUwNDI4MTgwMDIyWjAzMTEwLwYDVQQD
EygxOGEwZjIzNzE1ZWQyM2E1YjViMjBmZTE4M2NjNzM3MTgxMjJjYTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IyDSqgaKVwiKniERXZtZJyyXTzK
H+GkzNJcB8PzWa61wKjs7+2oMoeTkKqE2F18jDVTmRl2YHuauySvNCUteYYYc5S2
JfGVJBLrtbaR0anw7K3VKsTl/zwYQt3abTo8+exdGQfb2u/QJyHoExL59pg9eXLB
PDOSpQa7ULna1lLa3ZOtvCa543ffP0A145xIE6R2qGgO79uds/aiHL8BzaGRM1pt
voTrpHXA2/m05h3UziptJjGI/H2BWje6KJWn195Aw7lJYdH6iN46y68TctkLrB8u
GfXjSH7+CqY64vqdV5freo+1x9C1ozKcfc4iAWDsI/WrzbGVKjPeFXVEjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBig8jcV7SOltbIP4YPMc3GBIsoZMB8GA1UdIwQY
MBaAFKnBh7x6nohTNafrmwpDj+gRwDhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWNHSHZIcWVpRk0xcC11YkNrT1A2QkhBT0VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xYjgxNGEtZDM4OC00YzY0LTgzMDIt
MzcwZDFmZDQyNTRiLzEvcWNHSHZIcWVpRk0xcC11YkNrT1A2QkhBT0VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8xYjgxNGEtZDM4OC00YzY0LTgzMDItMzcwZDFmZDQyNTRi
LzEvcWNHSHZIcWVpRk0xcC11YkNrT1A2QkhBT0VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLwQ86eA
oXRVHAZoW+bDB2DDNZlamW9FcI+k1CCSfl+etXGeEio2RWsrvatZiF4zyYyS5INm
R9vOmpJXSCtei8aNN8lxjMN46UPa0ZON9TO24qtXuftwYesOlmMutvegma5WAeE3
vMACXoefYofwflcOyy9moNfU7dWzwdj+P2xNDDLuzmO9SM4o5yNujlhpY21T3jKq
8nBdoHoF6WChwMu/+OVTVvHeF58Oc6hS62kwkuRFuhmLAYle9lQA2i/YzmDWbLJ3
JqJJWqcYTSMfL1ccJnzMAoFxzNEH+VY4M5o9OKnWE8znqysQSZ43ff+7Hv1L7to8
lXsjAXUaW/amYQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:37:35 2025 by rpki-client