Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
File: qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft (raw, json)
Hash identifier: vAD72k3s/zaICjcS9L3F1CTmr9253OV1WdoHlUxZHlo=
Subject key identifier: 0D:72:EF:6A:74:9D:0D:1A:A0:0A:AA:C3:DE:CC:49:AF:29:30:C8:28
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Certificate issuer: /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial: 0197B88FAEC0509BBD6FB3934B662C3ACE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
Manifest number: 1303
Signing time: Sat 28 Jun 2025 22:01:53 +0000
Manifest this update: Sat 28 Jun 2025 22:01:53 +0000
Manifest next update: Sun 29 Jun 2025 22:01:53 +0000
Files and hashes: 1: M7QfzJgwvGD37CAu66WgBIA1U8I.roa (hash: 3kI7qcvP/rbXPqQGtR+iUvoIfjNBUlBm7eubuJg9J3I=)
2: qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl (hash: 6ZYxiiI5ilMkeDFIVnuU+NQ3YdpzH08xkj58PIiB1pw=)
3: tVgSZKCpd3ZATUDRMVn8O1JJW1Y.roa (hash: sNXwCd4RaR/9p6J0OSMx7+ZuraiFfStaotv4IhWktG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:ae:c0:50:9b:bd:6f:b3:93:4b:66:2c:3a:ce:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Validity
Not Before: Jun 28 22:01:53 2025 GMT
Not After : Jun 29 22:01:53 2025 GMT
Subject: CN=0d72ef6a749d0d1aa00aaac3decc49af2930c828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:02:c4:76:8b:c4:a5:80:40:ed:54:55:57:
5e:02:dc:3f:47:11:0c:33:87:c6:12:a2:76:d7:fd:
3c:1f:f7:ae:01:e8:31:68:e8:7d:bc:5a:b6:ae:74:
13:f7:15:ad:95:5c:e6:1d:37:52:c9:05:ea:24:af:
cd:a4:be:5e:fc:4a:9c:e2:4f:4e:8c:ac:78:c1:ec:
ff:43:75:b3:77:96:1b:1e:81:9c:a6:20:d5:0e:96:
2d:bd:79:6a:0b:d5:2f:b8:69:f2:ad:26:15:a8:e5:
19:a0:1e:b4:4c:c5:d2:36:c3:b9:59:d9:8f:0b:61:
36:81:64:a3:cd:6e:f3:e5:06:52:a3:f1:cc:7f:d0:
f1:89:41:cf:16:66:bc:34:b5:0d:e4:ff:07:7d:5e:
0e:97:7a:a4:86:28:8d:fb:e6:a4:cc:e9:57:00:ce:
b3:0c:cb:99:3d:15:cd:d1:f6:ea:2a:15:ee:0f:b8:
c1:e6:2d:bf:29:bc:45:68:34:10:54:ec:42:f1:72:
e7:ce:5f:93:87:86:43:0d:12:1c:e8:54:dc:f3:8b:
9d:94:73:80:a8:7c:a7:0b:dc:8f:87:a0:6a:9d:70:
4f:a5:36:37:fc:fd:42:b8:f0:0f:b9:31:7c:17:2b:
b7:a4:cc:9b:de:d0:51:6f:82:39:eb:59:4f:e4:57:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:72:EF:6A:74:9D:0D:1A:A0:0A:AA:C3:DE:CC:49:AF:29:30:C8:28
X509v3 Authority Key Identifier:
keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:32:1e:57:86:cf:8b:75:8a:39:fc:6b:56:d8:ad:45:13:0e:
da:71:e0:4e:e5:3c:e0:d4:74:db:a9:44:07:5a:5b:9c:2d:9b:
51:40:bb:96:95:c6:1d:63:2e:e4:6c:08:a1:d0:72:56:8b:9d:
e9:55:f7:61:e4:16:35:6b:05:79:e6:01:3d:19:74:e5:99:ff:
c4:73:66:55:2e:48:a1:91:80:0f:08:1d:48:96:c6:8b:64:fd:
25:b6:bd:d0:fa:62:8f:7e:08:84:07:00:54:57:8e:c1:66:02:
51:a2:18:5d:ec:0c:7f:a5:a4:41:99:a2:44:36:3c:c8:f4:d2:
e2:e4:97:f6:85:7d:02:14:ac:ae:13:1e:e6:97:f6:0f:0a:90:
8d:d8:7b:fb:26:10:2d:86:9d:08:e8:c9:76:0e:3a:31:ee:2b:
0f:49:3f:40:2e:83:fe:f4:e3:cd:e3:7d:7f:2a:be:6c:80:03:
a0:ea:4d:a1:ed:ee:22:64:5b:8a:34:f7:f2:87:90:6c:cb:04:
8d:a1:f2:bb:70:c5:e8:c7:8a:83:5c:8b:5e:ee:60:4a:cd:a5:
5d:33:f5:70:02:cc:b9:8a:d0:f4:40:ee:4c:f8:a0:8c:20:c2:
8a:29:46:74:c7:ec:98:08:4f:2a:ab:23:da:0b:08:ad:ba:15:
f5:2f:13:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j67AUJu9b7OTS2YsOs5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MjNmZTZkYWQ4YWQ0ZmRhZWU2ZGQ2OTgzYzFlNTVjZGU4
NDgyYTIwHhcNMjUwNjI4MjIwMTUzWhcNMjUwNjI5MjIwMTUzWjAzMTEwLwYDVQQD
EygwZDcyZWY2YTc0OWQwZDFhYTAwYWFhYzNkZWNjNDlhZjI5MzBjODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWwCxHaLxKWAQO1UVVdeAtw/RxEM
M4fGEqJ21/08H/euAegxaOh9vFq2rnQT9xWtlVzmHTdSyQXqJK/NpL5e/Eqc4k9O
jKx4wez/Q3Wzd5YbHoGcpiDVDpYtvXlqC9UvuGnyrSYVqOUZoB60TMXSNsO5WdmP
C2E2gWSjzW7z5QZSo/HMf9DxiUHPFma8NLUN5P8HfV4Ol3qkhiiN++akzOlXAM6z
DMuZPRXN0fbqKhXuD7jB5i2/KbxFaDQQVOxC8XLnzl+Th4ZDDRIc6FTc84udlHOA
qHynC9yPh6BqnXBPpTY3/P1CuPAPuTF8Fyu3pMyb3tBRb4I561lP5Feb+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1y72p0nQ0aoAqqw97MSa8pMMgoMB8GA1UdIwQY
MBaAFKgj/m2titT9rubdaYPB5VzehIKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNQLWJhMksxUDJ1NXQxcGc4SGxYTjZFZ3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wMzg1NjAtMjZkNi00NTVkLWE4ZjQt
OWJmZGYyMjUxMjY3LzEvcUNQLWJhMksxUDJ1NXQxcGc4SGxYTjZFZ3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wMzg1NjAtMjZkNi00NTVkLWE4ZjQtOWJmZGYyMjUxMjY3
LzEvcUNQLWJhMksxUDJ1NXQxcGc4SGxYTjZFZ3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzIeV4bP
i3WKOfxrVtitRRMO2nHgTuU84NR026lEB1pbnC2bUUC7lpXGHWMu5GwIodByVoud
6VX3YeQWNWsFeeYBPRl05Zn/xHNmVS5IoZGADwgdSJbGi2T9Jba90Ppij34IhAcA
VFeOwWYCUaIYXewMf6WkQZmiRDY8yPTS4uSX9oV9AhSsrhMe5pf2DwqQjdh7+yYQ
LYadCOjJdg46Me4rD0k/QC6D/vTjzeN9fyq+bIADoOpNoe3uImRbijT38oeQbMsE
jaHyu3DF6MeKg1yLXu5gSs2lXTP1cALMuYrQ9EDuTPigjCDCiilGdMfsmAhPKqsj
2gsIrboV9S8T1g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:41 2025 by rpki-client