Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: qbh/A6owSTiFQQ8LUN2q22dM3KXvwBdU8XCdlNluo3w=
Subject key identifier: BE:F9:74:18:FB:D7:CA:C4:7C:37:C8:D6:C3:3E:2C:DB:6A:89:14:4B
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 01976DAC3AB192DDCACE40F4F6BC1B49B06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 09:01:33 +0000
Manifest this update: Sat 14 Jun 2025 09:01:33 +0000
Manifest next update: Sun 15 Jun 2025 09:01:33 +0000
Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: P2DAMXOL6Pn9ijahBvYunzwC6F9qy8nXqouSlzlIGN0=)
2: osrkqaQb3qx2EG4vPDrSx-jUbRs.roa (hash: 60lpTHLn4dLpnmjc421kdUFig6Uy9lDHTrD8OxkZHo4=)
3: xkbe7-bpi_soiL6y9FjVY-pZjq4.roa (hash: DD/O2GJZO7TOSqwXXJo222/YwW4YcV/75ci14nBdOpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ac:3a:b1:92:dd:ca:ce:40:f4:f6:bc:1b:49:b0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Jun 14 09:01:33 2025 GMT
Not After : Jun 15 09:01:33 2025 GMT
Subject: CN=bef97418fbd7cac47c37c8d6c33e2cdb6a89144b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:ca:73:a6:44:40:e9:dd:d3:c1:94:96:f6:
31:76:13:d1:1d:0e:af:cc:33:7a:e1:dc:f0:e7:47:
e7:67:fb:e0:33:a9:8e:6a:44:01:cc:86:f8:92:19:
3f:70:6e:d0:a1:b3:9e:0c:d9:7e:2c:bc:dd:60:89:
90:89:c0:1b:f9:fd:17:b6:5a:ba:a2:c5:db:e2:73:
37:87:9a:cf:9b:55:c3:b5:5b:f9:41:4d:3f:a9:75:
9d:b8:41:d0:98:b2:c1:84:69:a9:23:20:52:07:c2:
cc:cb:67:a1:4f:13:88:7a:fe:f2:c6:f2:c0:48:f8:
c4:cd:ca:b6:05:88:1a:84:4d:a5:4f:4f:82:5d:ec:
9d:53:ad:fc:c8:86:b2:c3:a1:6e:09:b6:6f:1e:85:
ce:9c:0e:63:f6:a0:d2:b0:5a:71:d4:64:ad:a3:60:
da:55:58:ff:c2:72:27:37:55:35:34:de:59:aa:4c:
41:ce:41:c9:2c:83:fd:0a:27:ef:df:46:b5:d4:21:
14:c0:57:58:95:23:3e:0c:64:2b:2b:27:89:36:a6:
23:1c:43:19:a7:d3:ad:6f:77:22:01:65:67:77:ac:
5f:17:02:6e:80:fc:52:20:79:59:b5:d6:3d:3a:41:
70:56:14:1c:8f:d3:f0:22:80:b7:07:d7:c4:4f:8f:
f8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F9:74:18:FB:D7:CA:C4:7C:37:C8:D6:C3:3E:2C:DB:6A:89:14:4B
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1c:04:14:e9:12:2a:6f:0d:6e:58:f3:c9:c6:0a:65:0e:07:
e3:02:c2:89:e2:90:7e:b7:55:6b:4d:96:73:89:f2:00:45:c6:
0c:92:55:b3:19:25:90:e3:00:9c:44:06:11:9f:0a:ef:a6:ff:
2b:f8:5d:18:e6:64:54:8f:66:3b:40:6a:ef:72:4e:0e:17:2f:
42:31:a6:1a:46:88:f3:c4:f8:20:4d:92:26:7e:60:6e:1d:a4:
5c:fe:1f:f4:3a:e2:d0:9c:8d:e4:74:8a:27:51:27:9c:03:4a:
ef:5b:82:f5:41:0b:e5:74:2f:ec:6e:61:35:b0:02:d5:0d:12:
4d:49:94:e3:a2:cb:74:8c:a7:9b:9f:9a:06:6f:29:c2:bd:00:
08:b8:64:76:13:2e:32:fa:4f:27:51:bd:f2:b0:e6:f3:46:01:
c6:f6:8c:7c:94:5d:35:00:7f:8a:27:fb:fe:f2:c4:51:3d:5b:
79:1d:8c:ff:07:b7:8f:07:7d:cc:66:40:8c:1c:85:d0:9a:1b:
ef:89:fc:3c:55:d5:12:80:38:ec:b3:be:e9:bb:ff:a7:75:9a:
83:06:ed:9b:e6:e5:03:40:9f:9c:c2:f7:94:eb:5b:d5:d7:8b:
db:fc:23:f3:be:8e:93:e0:7e:90:98:60:97:72:78:59:7a:dc:
ca:ea:1e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:47:32 2025 by rpki-client