Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json)
Hash identifier: VPiEJ8AnGm7Fc5QBNf3k5t8H+SbSihFj88HW4mKCtvw=
Subject key identifier: 61:37:05:3F:B1:EE:6A:1C:9C:88:A0:3E:CF:F4:59:A1:1D:6B:5E:B1
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial: 0197B820E968076F1E6933A26440D41111F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
Manifest number: 0CD6
Signing time: Sat 28 Jun 2025 20:00:53 +0000
Manifest this update: Sat 28 Jun 2025 20:00:53 +0000
Manifest next update: Sun 29 Jun 2025 20:00:53 +0000
Files and hashes: 1: 6rV9eDtLqjrWZLXprUqcr99pZaA.roa (hash: dlsrhoQ5PwXdAjp/9r3Vgwhl3pAOBofCxgLlYlDOE18=)
2: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: ZY+lyy75y+l0aQvt26t5gM7B572iLr9fDWKXvEH65Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e9:68:07:6f:1e:69:33:a2:64:40:d4:11:11:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
Validity
Not Before: Jun 28 20:00:53 2025 GMT
Not After : Jun 29 20:00:53 2025 GMT
Subject: CN=6137053fb1ee6a1c9c88a03ecff459a11d6b5eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:c2:f9:1b:bc:27:2b:f3:8b:07:d9:bf:50:
1e:f5:19:e2:b2:5c:ae:8b:26:ab:a0:6c:94:00:1f:
05:0b:7e:7a:f1:9a:c8:38:97:c9:a4:b8:db:2c:bf:
05:8d:3d:49:1c:0f:35:bd:2d:30:04:f5:f3:2c:0e:
16:03:a1:6f:7c:fd:f3:5d:42:ff:df:75:b1:68:ae:
ab:58:dd:5e:29:99:62:fc:81:a7:d6:4e:e5:d2:29:
b1:ce:14:fa:34:c3:66:ca:10:65:71:1d:03:0c:2d:
1b:ee:be:7b:8b:af:04:e2:52:ba:56:85:81:2c:28:
42:57:ad:24:fd:e2:7d:5d:12:43:df:c7:59:1d:e6:
66:67:db:3f:1d:9e:45:0b:05:21:7b:55:51:17:0a:
d3:05:af:eb:d0:2b:d5:aa:e0:43:20:79:49:1a:90:
5b:0c:34:f1:cd:0e:db:ce:b1:69:35:59:94:1a:62:
f9:9e:79:64:96:14:aa:26:c1:19:d7:8b:29:4e:ab:
43:e5:b8:88:42:9b:44:15:b1:b4:dc:46:71:1a:53:
8a:15:45:da:42:b2:a0:f5:10:26:9d:a1:bf:7d:ca:
e7:92:47:79:08:95:57:ec:e4:88:5e:af:d6:a2:d5:
14:b2:fa:78:b1:78:6c:45:8b:67:db:a3:17:9f:e4:
d6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:37:05:3F:B1:EE:6A:1C:9C:88:A0:3E:CF:F4:59:A1:1D:6B:5E:B1
X509v3 Authority Key Identifier:
keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:99:0e:11:70:77:3e:c8:cf:6a:bb:3f:ce:7d:46:41:fe:60:
bb:f4:30:4f:eb:de:7c:e6:b4:5f:ea:13:86:bc:c7:c1:1f:17:
58:42:99:09:5c:c2:29:95:8a:1a:51:03:77:b0:c9:2d:59:45:
c8:cd:f1:d2:25:3f:9f:72:c6:a6:4d:d9:d5:8e:6f:bd:f5:81:
38:00:18:42:7e:36:66:39:4e:e6:60:42:39:25:e9:9d:8b:90:
2d:89:77:26:aa:12:e8:52:46:e6:fd:8d:07:f6:a1:49:ef:7f:
a4:7a:0f:a8:74:32:19:78:25:8e:2a:cc:80:34:5c:21:66:2e:
df:0a:13:55:52:6f:22:33:89:e8:9d:dc:6e:77:7b:08:51:4f:
15:82:22:1c:92:3a:5a:66:7d:41:b6:4c:71:8f:aa:5d:6c:5a:
de:13:90:54:f1:59:e9:fa:84:91:58:05:28:92:66:c6:fb:5c:
4d:29:cd:fb:d1:ba:22:0f:15:3a:fd:52:ce:b7:6c:f8:71:a6:
77:72:9e:dd:97:65:27:5a:b8:2b:7c:d0:83:48:27:51:44:b4:
5f:00:fc:00:2b:dd:45:a0:44:fb:28:3a:b4:e9:a9:20:d3:35:
20:99:4a:b2:ed:86:df:35:59:14:e3:ae:26:a4:c1:23:dd:94:
5d:15:7b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:00 2025 by rpki-client