Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
File: qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft (raw, json)
Hash identifier: DhTKI3ceR4ec6KAlMC20UlkZ4R8WZawL4J9SxNQlfqY=
Subject key identifier: 2F:04:77:EC:E6:7B:48:7B:59:34:F0:4F:D0:D6:CF:03:CE:2A:B8:3A
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Certificate issuer: /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial: 019A71B77AD420BB000EFCD45073DCC66A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
Manifest number: 146C
Signing time: Tue 11 Nov 2025 07:00:41 +0000
Manifest this update: Tue 11 Nov 2025 07:00:41 +0000
Manifest next update: Wed 12 Nov 2025 07:00:41 +0000
Files and hashes: 1: M7QfzJgwvGD37CAu66WgBIA1U8I.roa (hash: 3kI7qcvP/rbXPqQGtR+iUvoIfjNBUlBm7eubuJg9J3I=)
2: qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl (hash: yqFw+DmwjdAWhKMTwlDkAMAM9p9X6uCbNHmRCJFPpWo=)
3: tVgSZKCpd3ZATUDRMVn8O1JJW1Y.roa (hash: sNXwCd4RaR/9p6J0OSMx7+ZuraiFfStaotv4IhWktG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:7a:d4:20:bb:00:0e:fc:d4:50:73:dc:c6:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Validity
Not Before: Nov 11 07:00:41 2025 GMT
Not After : Nov 12 07:00:41 2025 GMT
Subject: CN=2f0477ece67b487b5934f04fd0d6cf03ce2ab83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bc:19:7d:25:9e:47:88:2d:21:ee:80:e9:c1:
d0:04:e9:a7:38:71:c3:3a:ad:f3:9a:72:ac:07:39:
38:20:0f:0f:06:e7:4d:b3:05:ed:b9:63:1e:b6:74:
6a:76:ea:1b:7b:bf:3b:1e:b7:b5:eb:7f:77:65:70:
a6:98:ea:c1:2e:73:e6:8f:aa:a0:25:64:89:37:ed:
7c:bc:93:78:05:e1:eb:6f:e9:75:19:90:19:6c:a6:
d9:38:c8:fa:a6:cb:79:2c:10:c4:d5:69:81:e9:6d:
bf:9d:b5:0f:48:bc:65:c5:66:9d:3c:3e:5b:8f:c4:
cf:f3:d8:0b:6a:4c:9a:4c:98:a6:a4:14:a7:d3:4f:
7f:98:1f:0b:ac:e8:66:d7:74:4c:ba:fd:ad:a7:45:
a6:1f:4d:b3:a5:82:8f:a8:80:74:5e:fa:07:d6:7c:
42:53:54:34:fa:04:34:05:ef:38:f1:10:4e:27:17:
f9:43:de:32:c5:b2:c1:b9:eb:94:da:cd:71:af:72:
00:bd:62:50:b5:1f:68:08:e4:a8:c5:2f:06:be:cc:
3b:4e:23:a1:65:9b:e5:d4:4e:c7:82:7d:40:22:0a:
29:cf:65:6c:b6:b8:ec:8b:f1:04:86:69:1e:15:f2:
3c:ae:7d:06:02:a4:f3:51:41:d5:a2:c4:7a:3b:65:
2d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:04:77:EC:E6:7B:48:7B:59:34:F0:4F:D0:D6:CF:03:CE:2A:B8:3A
X509v3 Authority Key Identifier:
keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:05:f6:63:a3:ef:39:f3:78:ff:10:5a:4e:ce:01:54:26:c2:
54:6c:d1:44:55:13:bc:8c:21:d4:9d:80:67:c2:b5:6e:1f:f0:
da:6a:7c:35:b5:e2:89:cd:5f:c2:b1:65:26:a7:72:65:23:53:
c7:8c:6d:60:4e:bc:bb:2d:8d:61:be:1a:37:a8:12:f6:52:2d:
b6:1d:da:d9:0e:f6:0c:4e:0b:5a:ba:2b:87:38:7a:ea:62:81:
be:8d:e2:6d:59:21:b0:bc:8c:e8:23:6a:7a:75:00:e2:6e:7e:
da:36:a6:82:ed:31:4d:97:9d:6b:f4:de:2f:27:e6:8e:f8:b4:
5a:f3:49:9d:f2:26:50:20:a0:7f:a6:13:14:e5:23:b1:2a:62:
3a:5b:05:59:84:15:7f:2d:17:9f:1a:f7:4d:4b:f4:d9:ac:a3:
46:04:c9:9e:d3:32:c1:4c:f7:55:4f:78:89:68:42:52:75:3b:
7a:35:df:a9:e3:26:1b:a0:27:aa:44:93:c7:2e:b9:fe:64:49:
7b:9c:7d:59:42:7e:c9:bb:f9:1f:a7:90:60:51:1e:a1:73:66:
d6:26:1a:e8:2b:c0:a0:64:f4:81:0b:92:5c:8e:7d:8d:3e:21:
5c:e3:48:40:12:17:70:eb:5d:65:7e:73:3b:49:c3:64:0e:fb:
55:78:59:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:29 2025 by rpki-client