Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
File: qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft (raw, json)
Hash identifier: jQx4lbdCcMH19zvqmFC2LLIMue/cf8foq5yEZtgJJ6U=
Subject key identifier: 34:FD:1D:C3:AE:BE:6F:BE:FA:D3:D0:A9:31:4E:75:91:0E:A5:9C:CC
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Certificate issuer: /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial: 019681A3618BA96D5E6EFBA84C7052CBBA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
Manifest number: 1262
Signing time: Tue 29 Apr 2025 13:01:30 +0000
Manifest this update: Tue 29 Apr 2025 13:01:30 +0000
Manifest next update: Wed 30 Apr 2025 13:01:30 +0000
Files and hashes: 1: M7QfzJgwvGD37CAu66WgBIA1U8I.roa (hash: 3kI7qcvP/rbXPqQGtR+iUvoIfjNBUlBm7eubuJg9J3I=)
2: qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl (hash: sVv7c9Z2z9T4sZXNXjeqI8jkULG1v01acrb00ZYWz70=)
3: tVgSZKCpd3ZATUDRMVn8O1JJW1Y.roa (hash: sNXwCd4RaR/9p6J0OSMx7+ZuraiFfStaotv4IhWktG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:61:8b:a9:6d:5e:6e:fb:a8:4c:70:52:cb:ba:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Validity
Not Before: Apr 29 13:01:30 2025 GMT
Not After : Apr 30 13:01:30 2025 GMT
Subject: CN=34fd1dc3aebe6fbefad3d0a9314e75910ea59ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:ad:3b:7b:4b:0d:7e:45:89:0c:f0:74:5d:
51:3f:3f:75:61:07:00:9c:9e:d7:28:7a:02:27:cb:
e2:11:bd:c2:f5:32:75:ee:85:c4:1e:18:7f:8f:77:
ec:5f:f8:33:1e:02:0b:20:88:96:a3:b6:cc:af:8e:
32:30:84:6b:7e:e6:dc:94:8b:08:54:7b:88:e4:35:
a9:cb:d2:8f:ac:ea:eb:80:7c:2e:06:63:3a:5d:ce:
08:9d:81:91:1c:54:87:2f:7e:aa:45:09:5c:e8:3c:
fd:70:db:fc:56:3b:6d:4b:b1:4a:9c:e5:52:8b:86:
1c:a4:1f:01:f3:e0:d2:01:32:cf:b2:77:2a:33:ec:
bd:c7:14:af:0f:e9:44:3e:90:d6:c1:61:b9:77:e4:
e7:97:a8:9f:13:c3:74:07:3d:f1:fb:b4:d0:88:b2:
dd:21:04:ca:91:fa:37:20:89:04:4b:45:b8:e2:9b:
a4:8e:11:56:bb:ea:a3:38:fd:4f:0f:6c:63:11:a5:
ea:25:80:00:a4:72:12:29:53:e4:d1:ba:82:64:0b:
0b:b6:0b:18:d1:1f:db:d5:aa:52:11:02:df:c0:bd:
ad:bf:2b:20:71:fd:1f:c8:f4:84:23:5e:70:fb:c7:
62:a7:56:47:d8:a6:6b:2a:3f:dc:60:c5:bf:12:b8:
b2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FD:1D:C3:AE:BE:6F:BE:FA:D3:D0:A9:31:4E:75:91:0E:A5:9C:CC
X509v3 Authority Key Identifier:
keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:00:69:33:67:84:dd:02:59:4e:34:66:f5:c4:fd:e6:1c:cd:
b5:91:4b:0a:fe:af:06:b1:6f:b9:d2:09:37:17:d7:7b:c6:f8:
79:4f:93:10:6a:14:17:76:2c:c6:f9:1e:39:d3:54:c5:18:56:
f7:9d:b1:b6:70:33:ba:24:ac:b4:c0:69:e7:37:47:b9:92:35:
36:be:55:6f:23:66:b3:7c:22:b1:7d:35:aa:4c:3d:5d:87:7b:
c3:b6:b3:56:b0:bf:4a:e8:64:e3:2d:4d:2c:9b:0a:e8:6e:ce:
c2:a9:0f:ff:4b:f4:35:04:34:a9:e6:04:ec:ae:ad:20:c6:0a:
36:8d:43:92:78:69:4d:e7:fe:0e:ec:f1:44:5e:24:32:6a:c7:
99:30:1a:e8:3d:9b:50:3d:e6:5b:02:be:25:30:5a:10:6d:e2:
c0:a8:08:29:e4:0c:6e:bb:27:46:f8:e5:d0:f2:e9:2d:56:77:
ef:b6:9c:b7:be:16:5b:d6:6e:6d:76:b6:6e:e0:07:ab:3d:31:
65:c0:3a:6f:91:e5:16:1c:f1:3d:90:3c:c7:4c:1a:56:2f:9b:
8f:50:cc:ae:62:b6:c6:6e:fa:48:1f:8a:97:cf:52:f1:95:1f:
24:6c:15:6f:2c:2a:ad:48:01:24:6b:f3:9a:6a:44:6b:07:54:
64:ab:bc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:13 2025 by rpki-client