Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
File: qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft (raw, json)
Hash identifier: HJmxKYC4GrWvgJtGZirErHKA5PiCStsZ662FNiklxt0=
Subject key identifier: 07:B9:13:91:0E:34:71:EE:71:6C:63:44:7E:E3:65:95:46:85:2D:A0
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Certificate issuer: /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial: 0198D4723B5C9A171FD53D02297C1C500967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
Manifest number: 1396
Signing time: Sat 23 Aug 2025 01:01:52 +0000
Manifest this update: Sat 23 Aug 2025 01:01:52 +0000
Manifest next update: Sun 24 Aug 2025 01:01:52 +0000
Files and hashes: 1: M7QfzJgwvGD37CAu66WgBIA1U8I.roa (hash: 3kI7qcvP/rbXPqQGtR+iUvoIfjNBUlBm7eubuJg9J3I=)
2: qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl (hash: ufdmuLchLLF3KgZuxpAku8VGqV9ACRGOMNuXBteGAiU=)
3: tVgSZKCpd3ZATUDRMVn8O1JJW1Y.roa (hash: sNXwCd4RaR/9p6J0OSMx7+ZuraiFfStaotv4IhWktG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:3b:5c:9a:17:1f:d5:3d:02:29:7c:1c:50:09:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Validity
Not Before: Aug 23 01:01:52 2025 GMT
Not After : Aug 24 01:01:52 2025 GMT
Subject: CN=07b913910e3471ee716c63447ee3659546852da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:90:18:07:3b:3b:b5:cb:01:49:91:33:eb:
51:c0:05:bd:7a:4b:b4:17:28:2d:18:ef:38:d3:8c:
33:49:3e:31:5f:6d:3f:2d:08:9e:35:64:07:1f:5a:
67:00:a0:fd:19:2f:b4:15:ae:61:51:f6:e3:1d:e9:
70:fe:b0:d5:19:a3:3c:27:6f:64:ca:52:f8:e6:ea:
e6:7d:f9:f5:14:2a:5d:ed:90:75:b1:a7:77:cf:bc:
3a:07:45:5e:17:b8:b8:08:a7:4e:68:72:95:03:db:
39:2e:c5:c4:1b:f6:c9:17:a4:e4:81:6f:57:2a:12:
c1:29:4a:15:69:4d:8a:4e:0a:17:ef:b1:d4:4a:6b:
62:44:08:b8:69:76:58:1c:d0:77:35:30:9c:3a:9f:
81:51:99:a9:c2:62:2e:ef:95:70:4b:b3:6f:15:ce:
90:67:d8:20:0b:ed:38:5e:0d:79:c7:29:26:33:73:
b4:53:ad:54:8f:95:c2:f6:10:32:53:02:1a:09:79:
0a:cf:c8:0e:a0:1c:1d:7c:a8:3c:01:46:64:21:2b:
43:51:81:b2:75:62:75:50:7e:20:9b:f7:d6:2f:87:
4c:61:ff:10:12:87:46:b5:77:2f:67:69:06:88:24:
02:3e:7c:3b:0e:a1:24:72:2a:3f:bd:e8:f7:e9:3e:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B9:13:91:0E:34:71:EE:71:6C:63:44:7E:E3:65:95:46:85:2D:A0
X509v3 Authority Key Identifier:
keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d7:c4:a3:62:fe:33:5c:23:58:66:f8:5c:ef:cc:93:ef:08:
a4:57:18:55:7c:f9:6a:aa:fa:b2:77:1f:b3:2a:42:bb:4d:fa:
db:85:22:56:f9:d6:7e:f0:ef:f0:48:e2:9d:2a:e8:df:f9:72:
0b:77:35:da:24:e2:ad:e3:e4:ae:e4:ed:8f:a4:b2:c6:d5:98:
69:fe:f5:75:aa:93:5e:c0:8a:01:9c:53:37:54:a2:41:36:48:
af:d9:0d:f5:47:3b:13:07:23:23:cc:81:ad:a9:60:c3:d8:7c:
e3:36:5b:87:14:dc:56:11:3f:3a:cb:18:e8:01:d0:4a:1e:07:
41:6b:91:fa:59:6d:17:77:45:c8:73:b5:c1:f0:6c:f8:7b:ab:
3b:23:b9:c4:e2:fa:86:12:a1:54:7f:0d:32:ac:e0:cf:ca:f9:
4b:4c:fc:89:ec:a7:2d:2f:55:1b:46:a0:67:94:51:1c:53:45:
91:ea:2a:29:d4:04:18:d1:b2:ae:4f:6f:7f:32:ff:24:08:64:
b7:26:62:cc:b8:fb:f9:c3:e4:c2:f3:e0:17:bf:d1:46:75:41:
0a:40:42:da:ad:43:52:ce:72:87:7f:95:aa:25:67:fa:d9:6e:
4e:ca:67:be:8b:5f:4c:fd:6d:65:55:9e:b2:7d:f1:9f:5e:f8:
39:d5:b6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:36 2025 by rpki-client