Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
File: qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft (raw, json)
Hash identifier: 2QPLc9GudaxwY58qM5VL71Zybg5kINaT3oF/JyCAhDk=
Subject key identifier: 9D:FF:0D:49:BF:89:67:E7:67:69:EB:06:3E:14:DC:A1:4B:05:B2:2D
Authority key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
Certificate issuer: /CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Certificate serial: 0198744F9E735BDA309426C9CDA4C9919F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 09:00:31 +0000
Manifest this update: Mon 04 Aug 2025 09:00:31 +0000
Manifest next update: Tue 05 Aug 2025 09:00:31 +0000
Files and hashes: 1: GxaI4hXBc2RYVYOf0z16mvSsnyE.roa (hash: g97pf2epkDk5ZUzae5HXyC8jqAaA5Zg8rR+Lupka6qA=)
2: qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl (hash: myYsgnD9hgZYGTr9RW42di1uItxvdcG4KW0Bca5vi10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:9e:73:5b:da:30:94:26:c9:cd:a4:c9:91:9f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Validity
Not Before: Aug 4 09:00:31 2025 GMT
Not After : Aug 5 09:00:31 2025 GMT
Subject: CN=9dff0d49bf8967e76769eb063e14dca14b05b22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:0f:be:bf:1a:b3:cc:4e:54:fb:ab:b5:88:
68:5a:26:1d:cd:6c:18:72:c0:ec:3f:91:62:aa:e7:
5f:08:8b:ea:d7:5f:22:8a:aa:dd:47:c4:8d:a5:d0:
1f:34:8e:e4:66:5d:69:4c:2a:35:9c:65:18:8b:3f:
2c:64:8d:39:16:2a:30:a3:92:6b:5d:dc:28:78:aa:
ba:e1:1c:d0:ae:3e:6f:6a:0e:e3:46:ff:85:55:88:
94:f3:22:f1:67:1d:82:95:8e:14:d4:9d:21:a2:9b:
32:6c:bb:43:79:c6:5f:f8:d4:6e:f7:0a:d0:e2:67:
42:b4:42:8c:21:7c:2f:a7:e7:40:78:69:b1:0d:5c:
98:fd:99:2c:33:e9:6a:9a:82:43:1b:44:30:cf:3f:
d1:9c:09:47:5e:72:d7:81:a6:94:b1:5c:94:14:90:
bd:fd:df:d7:f1:95:65:9c:8e:f5:2b:fe:86:8e:3b:
37:c5:f6:fb:6e:51:9f:20:bf:36:33:14:fe:8d:f4:
85:6c:95:20:b7:d7:eb:d9:79:ff:fd:aa:33:d9:4b:
0b:ad:a4:e3:fa:b0:ae:be:d2:90:c4:f8:d7:da:c6:
f0:f7:0d:3b:a3:5c:4f:8d:c2:8e:32:be:c1:68:1d:
8e:ed:12:43:67:25:55:64:4d:d3:30:24:c3:92:b4:
6e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FF:0D:49:BF:89:67:E7:67:69:EB:06:3E:14:DC:A1:4B:05:B2:2D
X509v3 Authority Key Identifier:
keyid:A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bd:8e:3d:82:93:58:62:30:5b:c1:0a:02:90:41:1d:92:b3:
37:74:22:4d:ba:16:b2:56:8b:49:16:8b:64:5a:ec:e0:5c:5e:
21:27:ad:c7:d3:d8:64:c6:ee:19:3f:db:42:dc:af:fe:fe:07:
44:54:87:25:74:e0:1b:57:cb:2c:66:0e:0d:e2:30:2c:c5:64:
52:62:f9:c7:38:0e:27:9a:1c:0f:49:ec:4c:28:90:68:05:a7:
19:4f:a5:34:0b:b9:1a:09:39:ed:aa:34:bc:14:fa:8f:10:22:
b2:a2:a8:f0:77:ea:2c:69:91:a0:57:a6:73:6c:e8:77:35:fe:
c1:5f:08:17:49:64:2f:fe:66:36:b7:ac:ba:21:e6:96:f4:c2:
30:4f:71:6c:14:7a:0e:7d:09:dc:3a:23:9d:9f:19:a3:d4:10:
34:8f:24:0f:b0:b9:7e:af:db:d3:56:4b:f5:6d:42:61:db:c4:
c4:4c:ed:59:70:b3:e4:b2:74:4a:9b:fe:1e:12:a6:3b:a4:a2:
f9:47:b8:0d:d9:91:8f:1b:6e:1c:27:6e:2b:4d:ab:a7:74:2d:
aa:da:ed:27:99:82:bf:40:6e:af:80:57:f6:9b:8c:8f:9b:b5:
50:1e:66:64:16:04:a6:e3:17:d4:08:27:8b:f2:31:6a:b4:29:
61:f6:4f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:16:08 2025 by rpki-client