Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
File: qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft (raw, json)
Hash identifier: JNFEpUa3h0g9Uu4lyZfwAVd+JDQueJ1zAfZn021lfa0=
Subject key identifier: B8:F5:57:BA:0C:A4:F7:56:A8:85:6C:11:1E:69:B3:92:95:BF:27:94
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Certificate issuer: /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial: 01965537FCC09887AD09459AC3CD95133933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
Manifest number: 124B
Signing time: Sun 20 Apr 2025 22:00:54 +0000
Manifest this update: Sun 20 Apr 2025 22:00:54 +0000
Manifest next update: Mon 21 Apr 2025 22:00:54 +0000
Files and hashes: 1: M7QfzJgwvGD37CAu66WgBIA1U8I.roa (hash: 3kI7qcvP/rbXPqQGtR+iUvoIfjNBUlBm7eubuJg9J3I=)
2: qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl (hash: QSA24PVp8knZTLZXqkZmuWocr6En1pvyq+ryuuOIJkM=)
3: tVgSZKCpd3ZATUDRMVn8O1JJW1Y.roa (hash: sNXwCd4RaR/9p6J0OSMx7+ZuraiFfStaotv4IhWktG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:fc:c0:98:87:ad:09:45:9a:c3:cd:95:13:39:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Validity
Not Before: Apr 20 22:00:54 2025 GMT
Not After : Apr 21 22:00:54 2025 GMT
Subject: CN=b8f557ba0ca4f756a8856c111e69b39295bf2794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:bb:bf:35:1b:bc:50:67:96:06:70:f8:bf:
66:7a:7e:d9:9d:4e:8a:8c:0f:70:42:dc:74:36:33:
b9:d3:45:cb:da:9b:d7:c8:74:d1:48:85:b2:22:24:
e9:87:8b:68:fe:c4:a3:2e:52:05:4f:70:fb:f7:46:
73:fb:31:29:e8:ca:f1:03:c5:4a:a9:83:ce:ee:c1:
c3:ec:fa:ae:36:64:20:02:0a:a2:b1:24:2e:d0:2b:
d4:57:26:f2:ed:09:49:75:37:78:f2:26:e5:3a:5d:
89:d2:28:66:27:bf:35:d8:85:01:73:06:a5:e7:ee:
81:02:8b:c0:88:01:f4:34:73:75:53:f5:cc:01:8e:
2a:7e:65:54:b7:e4:32:d0:24:12:07:e2:22:63:56:
17:98:59:bc:1c:8a:59:59:0a:13:3e:2d:5a:16:89:
a0:9d:a6:05:14:b2:6a:ef:77:d5:b6:34:f6:8f:b3:
95:f9:af:39:3a:8f:14:26:e2:a3:8b:3b:1f:20:00:
c1:66:d7:a6:cf:23:8b:7e:b6:7d:3d:49:c9:93:41:
c5:95:e0:f3:d4:b8:a5:a6:78:eb:e8:5b:d9:43:c9:
c4:6c:38:be:e1:c8:aa:61:67:ec:73:9d:6c:cc:de:
63:bf:e9:9a:75:5e:35:04:c1:ba:00:c7:d8:46:ad:
f8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F5:57:BA:0C:A4:F7:56:A8:85:6C:11:1E:69:B3:92:95:BF:27:94
X509v3 Authority Key Identifier:
keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ff:6c:dc:0f:86:73:65:3b:77:90:ab:63:ca:7c:bb:31:85:
8c:58:2f:c7:e8:a3:17:95:ed:f2:b5:c6:dd:a3:f2:aa:cd:99:
81:e6:ef:55:62:1a:20:33:f7:fd:8b:bc:9f:d9:13:9f:a2:9a:
3b:e6:2d:a8:57:cf:10:ad:75:88:bc:9a:55:07:3e:b6:de:45:
a1:0a:2f:36:03:f4:73:f5:13:4d:89:0e:e4:20:38:41:d8:25:
58:01:8a:1b:47:57:c8:62:1c:c3:71:c2:87:9f:0b:8d:bb:e5:
0e:b3:38:26:9a:98:0e:e2:73:85:b8:15:11:02:72:05:8a:ee:
58:c2:f5:50:a5:f4:d3:1a:4b:9c:1b:25:47:94:bc:14:2d:c3:
89:52:ee:0e:2d:d3:cd:fa:6f:6f:51:ac:eb:31:92:c7:33:2f:
42:b3:e9:1c:30:4f:8e:30:9b:ed:2d:94:55:40:67:ff:22:c3:
d3:31:3e:56:3b:02:50:16:cf:8f:1d:81:97:cc:8f:d5:5a:8c:
f7:fe:e5:fb:b3:26:a1:6e:78:64:d5:60:ff:10:0f:5e:19:5f:
b5:03:b1:02:90:90:03:8e:5f:7a:72:64:de:e7:33:eb:b8:6e:
68:2c:85:6c:98:d3:7a:f0:c8:99:c8:38:f2:59:de:af:77:af:
b2:16:8f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:55:31 2025 by rpki-client