Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
File: qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft (raw, json)
Hash identifier: ebKIRcoCQ1yd0bFp2IificgUrk5bCVUQ2iL+SNS2rNo=
Subject key identifier: 53:45:67:F9:20:3F:89:21:9A:23:D2:B6:39:0E:15:76:D5:E0:38:21
Authority key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
Certificate issuer: /CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Certificate serial: 0197B70ECB09DB4A18CD307470E06288A5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:29 +0000
Manifest this update: Sat 28 Jun 2025 15:01:29 +0000
Manifest next update: Sun 29 Jun 2025 15:01:29 +0000
Files and hashes: 1: GxaI4hXBc2RYVYOf0z16mvSsnyE.roa (hash: g97pf2epkDk5ZUzae5HXyC8jqAaA5Zg8rR+Lupka6qA=)
2: qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl (hash: U6H7xkzKHtwlza5vRXLqbHVL3vKSthlUrtndVaD2yBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:cb:09:db:4a:18:cd:30:74:70:e0:62:88:a5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Validity
Not Before: Jun 28 15:01:29 2025 GMT
Not After : Jun 29 15:01:29 2025 GMT
Subject: CN=534567f9203f89219a23d2b6390e1576d5e03821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:5d:91:5e:d9:33:ab:ee:94:3a:d2:8a:6c:
a3:88:ab:84:52:9f:63:a7:3c:81:fa:8f:43:da:b0:
47:23:32:ac:9a:33:09:cc:ce:b5:d0:9e:ca:a2:a4:
c5:50:54:45:c1:3f:46:20:d4:b0:ae:d5:c6:d2:e8:
36:92:a8:d6:38:51:96:e1:b0:28:0a:46:47:81:13:
ce:79:eb:c0:ca:13:58:12:68:3b:c8:c9:23:56:f1:
72:c7:bd:9a:f5:a3:38:f6:89:d1:d0:61:44:df:c1:
74:ca:d8:bf:14:53:52:5a:48:5c:5c:ef:4e:5c:b8:
b5:f0:8e:1f:2b:9a:74:4b:00:54:fe:07:05:79:51:
b9:6a:8a:cb:25:ed:fc:13:58:b2:13:59:16:20:ae:
aa:6c:b6:76:7f:df:0a:aa:2e:85:f2:e4:14:2a:80:
51:13:16:56:db:30:4d:8f:ec:b1:66:7e:8c:8b:12:
4a:16:88:aa:0a:5e:f1:d6:87:73:2c:75:59:a1:c9:
8e:94:a8:eb:83:ed:d7:69:c4:ab:2d:e6:da:d7:79:
7d:c4:21:b2:49:bf:2c:1c:6a:f0:c2:32:67:77:88:
e4:03:90:61:90:db:30:4f:5f:c8:8a:40:01:f7:37:
13:c8:c7:79:62:cd:68:b4:06:45:b8:63:37:69:01:
c4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:45:67:F9:20:3F:89:21:9A:23:D2:B6:39:0E:15:76:D5:E0:38:21
X509v3 Authority Key Identifier:
keyid:A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:9d:cb:2f:b9:76:19:ff:75:b6:86:fd:19:de:27:ee:31:bc:
2f:9d:e2:e5:f3:92:5a:c7:7e:d5:03:9d:84:f9:fd:72:87:a5:
c2:d1:50:d0:bd:91:6f:63:cf:d0:57:47:85:4b:1b:96:99:6c:
0c:f4:de:b0:c3:da:c3:99:9f:44:84:d6:ce:0b:0e:5a:5e:0b:
9b:f3:5d:1b:ae:d6:e6:b7:98:c0:32:56:98:88:01:cf:ab:5a:
01:23:4f:e2:c1:29:c7:96:9a:6e:92:f1:f3:40:67:88:29:4d:
3d:7b:ee:af:b7:da:73:38:c5:ef:cd:f6:d7:ce:ca:58:3b:21:
d0:2c:7f:e6:27:74:ea:6b:55:14:94:80:80:7a:e3:00:51:43:
e3:c7:85:22:12:8b:3a:ea:6b:f0:ec:ec:78:d1:f2:b0:08:4c:
bb:b6:1e:5c:42:f3:e9:50:16:f8:f9:16:26:c3:53:b1:28:b8:
a5:34:11:3e:dd:b8:65:29:5f:f2:2c:e0:b2:fc:8a:25:92:a5:
68:47:a7:5e:e7:a5:9b:1f:20:06:62:90:db:34:4a:ae:42:c3:
60:c7:db:36:22:08:58:16:23:39:7d:93:bc:58:b8:8e:cf:c7:
38:4e:04:2a:4d:31:24:c8:55:d0:ed:8b:61:b7:3a:74:0d:e0:
cb:22:02:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DssJ20oYzTB0cOBiiKX6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YzE4N2JjN2E5ZTg4NTMzNWE3ZWI5YjBhNDM4ZmU4MTFj
MDM4NDcwHhcNMjUwNjI4MTUwMTI5WhcNMjUwNjI5MTUwMTI5WjAzMTEwLwYDVQQD
Eyg1MzQ1NjdmOTIwM2Y4OTIxOWEyM2QyYjYzOTBlMTU3NmQ1ZTAzODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr49dkV7ZM6vulDrSimyjiKuEUp9j
pzyB+o9D2rBHIzKsmjMJzM610J7KoqTFUFRFwT9GINSwrtXG0ug2kqjWOFGW4bAo
CkZHgRPOeevAyhNYEmg7yMkjVvFyx72a9aM49onR0GFE38F0yti/FFNSWkhcXO9O
XLi18I4fK5p0SwBU/gcFeVG5aorLJe38E1iyE1kWIK6qbLZ2f98Kqi6F8uQUKoBR
ExZW2zBNj+yxZn6MixJKFoiqCl7x1odzLHVZocmOlKjrg+3XacSrLeba13l9xCGy
Sb8sHGrwwjJnd4jkA5BhkNswT1/IikAB9zcTyMd5Ys1otAZFuGM3aQHEGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNFZ/kgP4khmiPStjkOFXbV4DghMB8GA1UdIwQY
MBaAFKnBh7x6nohTNafrmwpDj+gRwDhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWNHSHZIcWVpRk0xcC11YkNrT1A2QkhBT0VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xYjgxNGEtZDM4OC00YzY0LTgzMDIt
MzcwZDFmZDQyNTRiLzEvcWNHSHZIcWVpRk0xcC11YkNrT1A2QkhBT0VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8xYjgxNGEtZDM4OC00YzY0LTgzMDItMzcwZDFmZDQyNTRi
LzEvcWNHSHZIcWVpRk0xcC11YkNrT1A2QkhBT0VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwJ3LL7l2
Gf91tob9Gd4n7jG8L53i5fOSWsd+1QOdhPn9coelwtFQ0L2Rb2PP0FdHhUsblpls
DPTesMPaw5mfRITWzgsOWl4Lm/NdG67W5reYwDJWmIgBz6taASNP4sEpx5aabpLx
80BniClNPXvur7faczjF7832187KWDsh0Cx/5id06mtVFJSAgHrjAFFD48eFIhKL
Oupr8OzseNHysAhMu7YeXELz6VAW+PkWJsNTsSi4pTQRPt24ZSlf8izgsvyKJZKl
aEenXuelmx8gBmKQ2zRKrkLDYMfbNiIIWBYjOX2TvFi4js/HOE4EKk0xJMhV0O2L
Ybc6dA3gyyICGg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:15:52 2025 by rpki-client