Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
File: qcxE1_HQ3Apavyd2SVth3kgZkl8.mft (raw, json)
Hash identifier: MMy5/Cv6PtV1wj1fX+Cm24fuENutnAtoKMpMVRcb18Y=
Subject key identifier: 64:7E:1F:1F:E0:72:3F:FA:14:3E:43:A6:62:6B:30:C5:BB:D6:E6:A4
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 0197B77C414CF63380E5CC334FD945276354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
Manifest number: 1152
Signing time: Sat 28 Jun 2025 17:01:03 +0000
Manifest this update: Sat 28 Jun 2025 17:01:03 +0000
Manifest next update: Sun 29 Jun 2025 17:01:03 +0000
Files and hashes: 1: Jo7QZBDB32wXW0Iw1K7QdXNowZk.roa (hash: K7AhFGZtd/rNskeYTg//KKyYm9N8IOSqZd1eL/nYFI0=)
2: qcxE1_HQ3Apavyd2SVth3kgZkl8.crl (hash: vJ82g8ng9wUxTONX5Sv1dFdJ50JKqcw3NxN6yWDo8bI=)
3: s7SwYsQxw0lQy1OCUyDcPA5nRsQ.roa (hash: oInMskbU1ysq45NZWBKPFPJeOmbD2WauFvK9W3eBwaY=)
4: vFfYVEKCcc2PyT6NhaZHTqsCyRc.roa (hash: IviSD1XdrOD9s0OcxHYtTVilTBOr8uyUO7SjAFCSO3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:41:4c:f6:33:80:e5:cc:33:4f:d9:45:27:63:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: Jun 28 17:01:03 2025 GMT
Not After : Jun 29 17:01:03 2025 GMT
Subject: CN=647e1f1fe0723ffa143e43a6626b30c5bbd6e6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:28:1c:0a:b8:63:35:d5:36:cc:a6:dc:3f:
96:a9:9c:38:91:6c:11:d3:55:02:ec:f4:a1:93:06:
13:7a:ab:0d:b6:d8:00:6a:e6:04:41:ec:c9:cc:34:
33:a1:bf:90:7c:a4:34:5b:4c:ae:26:37:c2:bd:3a:
d1:5d:fe:64:02:95:ab:6d:f9:95:d2:5a:05:9a:d8:
cc:bf:ef:79:2d:6a:70:fa:2f:46:cf:9d:0d:35:9a:
57:4e:42:d5:e3:69:09:fc:4f:80:85:bb:e6:cb:17:
31:51:07:bc:31:27:84:ad:03:17:8f:a4:69:da:8b:
5a:fc:a6:44:6e:17:64:0f:75:d9:89:c2:8e:b0:42:
6e:c3:a9:0e:f0:71:ac:b3:cc:78:44:c0:cc:75:0c:
24:87:0e:b7:85:66:d3:87:8c:d3:bf:17:ca:ac:eb:
33:9a:fe:97:5d:6c:87:73:37:df:34:38:5e:4f:31:
c8:18:cb:6e:00:f4:e6:e3:a2:94:af:04:ee:5d:8d:
3c:13:a8:01:e1:5c:3f:45:8a:ac:7c:ec:0a:d6:5b:
a6:f7:0c:31:6f:21:52:85:95:5e:c5:e1:74:98:17:
f6:ae:dc:c7:bb:83:ac:46:c4:59:a0:7d:41:3e:29:
37:ca:ab:12:97:ac:15:d0:a8:4b:6c:c6:3d:0a:ae:
00:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7E:1F:1F:E0:72:3F:FA:14:3E:43:A6:62:6B:30:C5:BB:D6:E6:A4
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d3:38:28:8b:c0:40:45:1d:b3:87:45:7e:c7:55:32:9f:77:
27:6a:b2:3e:e2:e1:fd:42:8c:ef:0d:b2:b8:b6:19:b6:06:7b:
a0:f9:aa:79:48:7e:2d:c7:f0:3f:4b:e1:29:11:0a:f6:cd:4e:
2e:c4:2b:a8:88:b6:f0:bc:63:4e:f5:3f:27:0c:ed:b9:d3:12:
b0:36:26:d7:8d:6f:7c:5b:53:a5:e3:0d:dc:af:87:52:45:52:
6f:46:9e:d8:05:23:7e:04:15:e6:bb:61:5c:c9:e3:6e:a7:33:
31:df:0f:f7:d7:b1:fa:07:34:10:a4:44:f3:18:9c:ac:b1:32:
13:bf:45:1e:f3:4e:62:1c:83:f9:33:3d:39:37:42:76:0b:5d:
2f:01:7e:76:48:a1:40:60:53:b0:36:12:b0:ec:42:44:4c:6c:
c8:3e:48:b7:81:5b:84:9e:35:f3:bb:bb:84:fb:17:20:aa:ba:
71:4a:3e:7a:86:2c:3d:76:96:1a:37:41:be:ea:55:48:de:39:
ce:31:7c:64:43:3c:65:dd:8a:ca:fe:9f:5c:ea:73:43:6e:f4:
34:78:e4:6c:91:73:6d:fa:70:5c:dd:4f:9e:f4:f4:35:8b:35:
f2:fb:db:69:1c:0d:14:88:8a:0f:f3:26:dc:51:fa:21:77:d0:
1e:89:d2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:25 2025 by rpki-client