Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
File: qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft (raw, json)
Hash identifier: D75JnJRqPlfgyL+/ZZZoSYYyiZlNYUdvqjnVh3PMDto=
Subject key identifier: 3C:75:05:97:33:1F:61:69:3A:29:97:CE:77:42:89:88:7F:19:5B:E9
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Certificate issuer: /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial: 01974A7A9D5797D2A798090113EDB11714B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
Manifest number: 12CA
Signing time: Sat 07 Jun 2025 13:00:38 +0000
Manifest this update: Sat 07 Jun 2025 13:00:38 +0000
Manifest next update: Sun 08 Jun 2025 13:00:38 +0000
Files and hashes: 1: M7QfzJgwvGD37CAu66WgBIA1U8I.roa (hash: 3kI7qcvP/rbXPqQGtR+iUvoIfjNBUlBm7eubuJg9J3I=)
2: qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl (hash: eBnAhRTcFWt19as5HrngFOHnEWYyQ6Z6S8iaB9EdgFc=)
3: tVgSZKCpd3ZATUDRMVn8O1JJW1Y.roa (hash: sNXwCd4RaR/9p6J0OSMx7+ZuraiFfStaotv4IhWktG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:9d:57:97:d2:a7:98:09:01:13:ed:b1:17:14:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Validity
Not Before: Jun 7 13:00:38 2025 GMT
Not After : Jun 8 13:00:38 2025 GMT
Subject: CN=3c750597331f61693a2997ce774289887f195be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:0b:5e:f7:cf:f6:f5:88:dc:89:2d:81:bb:
05:a8:6a:f7:46:15:85:12:f4:ed:2e:04:10:f4:2d:
ba:da:0b:ba:0a:a9:ec:1f:ca:60:78:3c:5b:ea:e7:
e2:46:1a:20:1f:cc:ca:dc:e8:0b:54:a6:0b:5f:3e:
2b:ea:c7:0c:42:b2:45:00:b8:a9:0f:51:99:34:aa:
ec:90:3b:74:9c:5a:1d:99:e5:ba:02:79:39:41:d4:
7a:27:75:a7:0c:6a:23:35:91:54:b3:65:93:ed:f2:
65:60:07:9c:f0:6d:f9:17:53:bc:4d:bd:89:82:8f:
82:c0:0d:41:2b:35:20:ce:9d:34:e0:17:f6:52:46:
74:54:7c:fb:78:e5:8b:d5:81:74:af:15:ff:15:77:
29:7a:1d:69:41:87:8b:31:2f:e3:ec:67:4d:1d:07:
99:cf:6e:3e:78:b6:13:97:0e:7d:e0:26:20:26:c7:
1d:96:95:53:d0:69:39:b6:92:c9:f2:f0:b7:a6:f7:
ea:a2:38:62:3a:c4:e2:3c:c1:c7:b2:df:8c:51:61:
04:24:82:8f:f7:17:ca:ca:12:82:01:57:50:65:f0:
31:35:64:f0:d2:5c:fa:b8:d8:8b:f9:15:19:92:5c:
b6:44:60:ab:19:ff:66:37:2f:e2:1a:8f:b4:dc:32:
97:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:75:05:97:33:1F:61:69:3A:29:97:CE:77:42:89:88:7F:19:5B:E9
X509v3 Authority Key Identifier:
keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d3:9c:1e:2c:b5:01:4a:d8:40:b0:57:16:32:69:97:de:3b:
b6:d0:a0:42:38:19:86:d1:af:31:5e:bd:b3:76:de:b7:b4:6c:
68:4e:ef:c6:09:52:a9:e8:b2:42:1b:a4:f7:d5:f3:22:5f:c4:
2b:f4:f5:72:1b:cc:9c:62:de:98:cd:ed:d3:10:0e:e8:f0:51:
a9:8e:35:eb:c7:c5:11:8f:50:c2:b8:c9:ae:d9:49:8d:61:ff:
34:36:06:c2:80:83:8f:66:0a:9f:c1:b9:80:a9:1c:6c:00:6c:
a4:3c:11:81:7f:01:70:48:c1:79:8c:7c:04:04:64:9e:54:8d:
22:bf:06:b1:74:a3:2e:a5:d5:38:45:9d:63:e8:c3:1b:fe:07:
d2:77:b7:92:a3:95:cd:40:0b:71:35:9c:8d:3f:1a:45:31:43:
37:02:88:f5:a0:b2:b1:8a:eb:a0:89:d2:5a:a5:20:20:3b:29:
91:6a:ab:ca:ca:6b:d9:a0:04:6a:e7:86:e2:f7:2d:af:5e:2c:
2e:d8:15:52:c7:42:77:57:c4:28:48:fc:4f:17:4f:6e:da:a9:
ce:a0:35:a3:4f:39:d6:df:38:29:b2:95:31:d6:a1:63:d7:ae:
28:c2:2c:cd:9f:e6:8a:9d:9c:02:e0:7a:a2:e1:06:3d:86:95:
7e:ad:39:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:09:32 2025 by rpki-client