Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
File: qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft (raw, json)
Hash identifier: WTneA4O5EAZmbwnAuJfkPx5gRBWGiJUXKwArUvsBabI=
Subject key identifier: 46:7D:57:6F:D9:A6:D4:E2:2D:C7:75:5F:BE:98:5D:BF:39:6D:25:3A
Authority key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
Certificate issuer: /CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Certificate serial: 0198D6CCD5CFD9E6CCCF5444C818B6863E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 12:00:04 +0000
Manifest this update: Sat 23 Aug 2025 12:00:04 +0000
Manifest next update: Sun 24 Aug 2025 12:00:04 +0000
Files and hashes: 1: GxaI4hXBc2RYVYOf0z16mvSsnyE.roa (hash: g97pf2epkDk5ZUzae5HXyC8jqAaA5Zg8rR+Lupka6qA=)
2: qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl (hash: f/dUFp2xYaSW56xIXEnqQYdlnGATbg1h52XqSnwEboc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:d5:cf:d9:e6:cc:cf:54:44:c8:18:b6:86:3e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Validity
Not Before: Aug 23 12:00:04 2025 GMT
Not After : Aug 24 12:00:04 2025 GMT
Subject: CN=467d576fd9a6d4e22dc7755fbe985dbf396d253a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:47:20:ac:de:d4:63:f8:70:99:2c:83:26:
e9:5a:e4:9c:99:2f:09:ab:f2:a8:bc:bf:2f:40:a0:
86:e0:a4:04:08:98:f3:52:70:24:60:59:af:89:5b:
2d:4f:fa:7a:03:36:d5:9d:18:7d:09:0d:94:ea:24:
6e:87:10:cb:e2:8e:30:68:b0:7b:d5:ea:6e:c7:a5:
af:5b:43:81:23:1f:02:82:90:a0:e9:19:e5:58:9a:
55:c7:ae:cd:33:50:c3:64:62:5d:ba:4d:1a:42:b3:
c5:53:a0:36:eb:24:46:b2:65:ae:9b:c1:0f:12:fa:
32:32:62:9c:14:1e:cd:5c:92:77:00:81:97:3f:45:
82:1c:a6:98:3b:b0:f4:a9:5c:5a:35:11:74:e4:8e:
49:a4:84:58:d7:b3:cc:e9:b0:90:a9:ed:1c:92:fe:
44:8a:e3:bf:eb:5e:4d:b6:57:b7:43:0e:12:3e:89:
99:fa:64:c7:1c:9a:b6:88:0d:a5:e7:60:50:d5:2c:
d8:90:51:3e:da:f8:17:e1:d5:bb:d2:d9:d1:a5:2a:
dc:3c:8d:c1:a8:ab:69:12:7a:b1:97:1b:16:76:2b:
8c:24:ed:c6:34:dc:7b:4e:fc:70:22:61:8d:be:f6:
a8:eb:4f:a5:62:26:5c:2a:69:76:25:23:28:f1:08:
28:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7D:57:6F:D9:A6:D4:E2:2D:C7:75:5F:BE:98:5D:BF:39:6D:25:3A
X509v3 Authority Key Identifier:
keyid:A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bb:ef:b3:40:15:16:9b:95:57:26:bd:4f:12:dd:55:27:62:
c7:51:73:53:7c:85:b6:a9:30:20:c9:bf:23:8f:ac:dc:41:0c:
65:a1:c9:a0:b7:74:5e:d1:e0:c2:d2:ef:c7:86:78:ec:ec:0f:
d8:e3:ff:68:6b:c1:88:af:07:9c:51:2a:98:5b:08:73:55:33:
04:16:0f:59:a9:97:39:dd:8a:1d:9d:61:f6:19:c2:97:68:c9:
ba:e8:4d:ac:e0:91:b8:f2:7c:da:17:ed:95:35:00:ae:6c:7d:
f3:93:19:9e:8c:42:a0:39:59:ed:70:35:2f:ba:b5:99:c8:86:
e8:1f:8e:ff:20:c6:a2:a5:6e:0f:e4:54:b1:f0:6b:b7:1f:67:
9c:da:5a:37:43:4c:5d:6c:1f:43:46:5b:97:b3:2a:37:3e:6d:
0a:87:51:f9:28:df:62:5d:2b:0b:3e:2e:7c:20:b4:f7:70:5a:
00:92:2d:3c:36:84:c6:01:ae:6e:b7:c9:04:0e:af:1f:3f:df:
04:69:43:dc:0a:6f:8f:20:86:9b:1e:9e:fd:60:30:c9:10:ac:
a0:83:bc:98:d5:87:24:f2:fb:c2:17:0f:17:d2:95:67:73:ab:
ad:7c:05:5d:65:53:9b:c1:4e:24:9b:06:be:ab:04:6b:df:31:
24:cc:a2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:20:36 2025 by rpki-client