Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
File: qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft (raw, json)
Hash identifier: 0e63eMQwiUAx17kjmrEYUco5jAhbA3Uvg6qalI3+CwY=
Subject key identifier: 60:57:21:9F:1A:82:5B:FB:B8:74:E7:C9:6A:F5:8C:2B:19:0E:B9:B9
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Certificate issuer: /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial: 019A50E36B9EF36F9740518E7932E0057D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
Manifest number: 145B
Signing time: Tue 04 Nov 2025 22:01:12 +0000
Manifest this update: Tue 04 Nov 2025 22:01:12 +0000
Manifest next update: Wed 05 Nov 2025 22:01:12 +0000
Files and hashes: 1: M7QfzJgwvGD37CAu66WgBIA1U8I.roa (hash: 3kI7qcvP/rbXPqQGtR+iUvoIfjNBUlBm7eubuJg9J3I=)
2: qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl (hash: 5/Z1xJgexRQNSmq35sHey4BQXGgJ2lC6J7E2h6c7H28=)
3: tVgSZKCpd3ZATUDRMVn8O1JJW1Y.roa (hash: sNXwCd4RaR/9p6J0OSMx7+ZuraiFfStaotv4IhWktG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:6b:9e:f3:6f:97:40:51:8e:79:32:e0:05:7d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Validity
Not Before: Nov 4 22:01:12 2025 GMT
Not After : Nov 5 22:01:12 2025 GMT
Subject: CN=6057219f1a825bfbb874e7c96af58c2b190eb9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:44:66:53:2a:de:16:46:80:3f:d0:ac:34:6a:
a0:aa:cb:74:7d:f0:4b:52:b0:5b:fa:73:c1:0b:1e:
74:0a:e8:0e:ca:3f:a0:e1:21:9c:5f:9b:fe:00:96:
63:5f:1a:d7:7d:fe:be:1c:60:ba:a8:c6:22:f4:50:
2d:9b:8f:5f:3a:d2:d1:ef:00:eb:4e:3e:c4:ae:39:
07:5a:e2:7d:36:91:54:0f:3e:c1:65:2f:e1:c3:6a:
b9:fe:24:6f:68:8f:b2:ab:cc:a6:27:db:98:ae:43:
c7:c8:92:c2:e1:04:e1:e5:82:ab:00:64:8f:dd:64:
e2:27:de:97:33:aa:10:12:8b:70:8f:1a:70:4a:0c:
62:cf:f3:bf:e6:e3:a1:b2:85:43:53:ed:78:da:48:
48:c6:23:0d:80:d4:e5:6d:dd:4b:ad:fe:68:19:e8:
06:91:8b:0f:57:0a:fb:7c:f0:8d:e0:07:d4:55:0f:
ef:90:64:8e:04:e5:ec:dc:a6:30:10:03:74:9a:63:
15:65:ca:15:7c:ed:9f:53:4b:21:34:9b:73:05:ed:
27:3b:15:c8:52:8f:28:15:35:fb:24:66:7e:82:68:
66:fc:03:4d:65:31:02:2e:4a:78:7f:5c:55:49:5b:
67:9c:09:df:5a:b3:ab:b0:8d:78:81:46:bf:92:12:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:57:21:9F:1A:82:5B:FB:B8:74:E7:C9:6A:F5:8C:2B:19:0E:B9:B9
X509v3 Authority Key Identifier:
keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fc:7b:1b:84:a8:da:82:92:07:43:a3:30:40:7b:69:3e:27:
e6:5f:0f:df:40:36:27:92:47:55:7b:52:28:04:6c:15:6e:49:
db:23:1e:68:16:19:98:45:43:77:49:b3:9c:97:0c:05:bc:e7:
48:2b:d5:a8:f6:01:0e:28:d0:b7:05:3f:79:a1:1a:a8:a5:0e:
9a:1b:df:c1:f9:fe:55:d7:8d:03:17:d3:90:9b:24:70:80:61:
46:15:47:24:a9:9c:ea:8c:f8:a4:cc:6d:f6:b5:05:e3:c3:f3:
f3:1a:0e:75:65:4f:2f:1a:e6:cb:03:cb:00:58:26:32:ef:04:
a0:fd:ca:78:f5:ed:4d:d7:3a:34:74:fe:bd:7d:48:e9:84:99:
54:86:e2:67:ee:16:bd:f6:18:c8:fd:3f:ef:a2:a6:ee:a6:41:
43:02:e4:0c:b2:00:2e:92:e7:c7:e1:22:e0:b6:74:46:a2:cb:
28:93:ea:f2:72:f3:e1:77:58:f4:7a:6b:d7:03:a3:a9:ea:41:
3c:74:8a:e3:bb:75:7c:34:44:1c:b3:34:f6:0e:d5:e6:db:0c:
83:ea:47:25:23:68:63:02:c6:56:f5:91:0d:ea:66:93:1a:13:
fe:ef:68:b6:cd:e7:84:c2:ca:ba:d9:14:92:0d:32:19:70:a6:
71:a3:18:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:51 2025 by rpki-client