Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
File: qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft (raw, json)
Hash identifier: 67qA7DPdBPRLrmG662GAyqvWC0qBpX9dIZ912wLT9bM=
Subject key identifier: EF:28:01:7F:88:3E:9F:62:6B:FC:D4:B0:19:05:3F:7C:75:ED:68:59
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Certificate issuer: /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial: 019776E624490DD279A0B154CA97267F6A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
Manifest number: 12E1
Signing time: Mon 16 Jun 2025 04:01:23 +0000
Manifest this update: Mon 16 Jun 2025 04:01:23 +0000
Manifest next update: Tue 17 Jun 2025 04:01:23 +0000
Files and hashes: 1: M7QfzJgwvGD37CAu66WgBIA1U8I.roa (hash: 3kI7qcvP/rbXPqQGtR+iUvoIfjNBUlBm7eubuJg9J3I=)
2: qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl (hash: eLNU01xD0f93GNtuEF8uqyNnIYhERH01EatyhVr5DCg=)
3: tVgSZKCpd3ZATUDRMVn8O1JJW1Y.roa (hash: sNXwCd4RaR/9p6J0OSMx7+ZuraiFfStaotv4IhWktG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e6:24:49:0d:d2:79:a0:b1:54:ca:97:26:7f:6a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Validity
Not Before: Jun 16 04:01:23 2025 GMT
Not After : Jun 17 04:01:23 2025 GMT
Subject: CN=ef28017f883e9f626bfcd4b019053f7c75ed6859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:5e:54:15:cd:00:78:64:97:b5:8b:4b:06:
27:29:03:4f:12:69:9d:85:e9:20:9e:1d:ae:ad:74:
00:bc:9f:bc:13:b0:c6:90:6a:08:44:bb:2a:bf:4c:
b3:c9:bb:bd:3d:f2:5d:bd:9d:e4:a8:54:86:6e:99:
32:a1:10:5e:38:e1:58:25:c4:7a:45:24:52:86:05:
2f:94:83:fd:72:df:be:16:55:47:dc:78:a2:a0:62:
d8:1d:c1:76:86:26:be:36:96:2a:80:e1:98:c3:d3:
d0:50:c5:1e:29:c3:28:10:9a:f4:04:a3:ec:0a:6c:
3e:36:32:e2:ed:85:f7:97:7d:6c:75:89:e7:8d:7f:
f0:14:ad:bb:22:49:e9:bd:09:34:ad:77:08:27:b1:
36:8f:9d:f2:d8:bd:69:d2:bf:aa:08:24:21:d8:1c:
52:6f:c0:95:5b:83:54:52:13:04:e2:6a:71:13:c1:
f2:ea:14:a1:ec:bb:b4:6b:b5:66:6d:d2:55:22:ed:
bc:5d:55:f0:fa:e3:3c:91:94:15:8f:b8:df:7f:1a:
96:d5:ec:29:cc:c7:b2:88:4c:b2:8f:44:36:d7:97:
0d:5b:14:71:58:31:97:33:27:61:7b:73:42:cd:d2:
68:5c:43:7b:18:c3:80:e0:eb:08:0a:c3:80:62:27:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:28:01:7F:88:3E:9F:62:6B:FC:D4:B0:19:05:3F:7C:75:ED:68:59
X509v3 Authority Key Identifier:
keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:86:65:8a:6b:19:e6:eb:e4:c7:1f:1b:ca:a0:00:9f:c9:18:
5c:24:19:7a:2d:82:e6:76:ff:cf:f4:76:7c:89:d6:c7:4b:6c:
3a:6f:80:64:19:f9:3a:af:9d:df:98:c0:2e:df:77:58:31:8a:
81:61:b8:84:c5:0f:2b:54:9f:fb:16:f8:c8:de:f8:cc:c0:2b:
75:a9:21:d4:a7:c9:15:3f:be:0c:76:76:30:73:18:b1:da:c5:
80:44:0b:a9:1d:f3:4b:40:7d:9f:15:87:40:24:b0:e5:5e:bf:
ad:b2:aa:30:4f:50:d3:cc:25:bb:44:0a:80:7d:57:c1:a1:8b:
57:23:0a:99:45:38:7c:d2:ca:6d:06:54:ef:73:be:80:8c:27:
e5:35:ac:12:df:6d:b7:04:eb:cd:99:00:26:a5:99:fe:51:68:
83:cc:2f:17:c2:1d:e5:34:cc:f4:11:a4:66:bd:07:d7:41:ca:
92:10:2d:71:ea:57:eb:4b:e0:9a:79:8d:7c:ef:12:bf:fd:e2:
b3:cf:99:a5:d9:94:d3:0e:8b:41:36:7e:34:39:22:3b:5a:0a:
99:38:12:87:60:ec:ff:f2:aa:44:0f:f6:a1:75:8f:f9:e1:f1:
19:b9:60:c0:6b:c7:96:cb:23:4a:b1:2c:09:f6:f9:5e:70:b6:
f4:94:ba:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:49:09 2025 by rpki-client