Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json)
Hash identifier: +NIhQ3B7oFgEVYBfwg4Po6Fxy7Hx6Qmfe/MNWs3bSzE=
Subject key identifier: 8B:AB:10:D9:B7:9A:DA:CA:09:15:58:63:0B:A8:83:69:A9:32:83:5F
Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Certificate serial: 0199FBEA8803405BA9C13D237B68C7718FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
Manifest number: 05E7
Signing time: Sun 19 Oct 2025 10:01:15 +0000
Manifest this update: Sun 19 Oct 2025 10:01:15 +0000
Manifest next update: Mon 20 Oct 2025 10:01:15 +0000
Files and hashes: 1: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: poPirAgwk7cKfThrhO0xB+JOZohi9MgnhsbQfHX0gz0=)
2: Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa (hash: 2Xu5Qu43xBBRy4X2ZZ8tBlY4rjWAu0V1llrLDaiQerk=)
3: oaLZxtKD66NwRygInPYpaycKqOc.roa (hash: Ja3SjwoX4eh5IRVh7jPL7K8MqCmfJQ9Q/LWhTt+xawU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:88:03:40:5b:a9:c1:3d:23:7b:68:c7:71:8f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Validity
Not Before: Oct 19 10:01:15 2025 GMT
Not After : Oct 20 10:01:15 2025 GMT
Subject: CN=8bab10d9b79adaca091558630ba88369a932835f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:b5:7c:47:88:a2:73:88:6e:bf:fd:e9:7f:
da:3b:f5:5f:3e:46:d2:02:c1:15:b8:b4:cb:ac:42:
0c:4f:b2:56:23:5e:b8:50:3e:ec:e2:50:b8:50:87:
c4:68:e9:05:94:01:91:81:90:6a:87:8f:97:e7:fe:
87:84:51:29:8e:37:2e:0a:a7:68:3f:5e:6c:a4:d6:
10:7e:8d:53:a9:de:10:48:d5:38:a2:77:62:e8:3d:
6b:a2:f4:91:59:9c:71:be:e4:82:a7:56:01:be:43:
ba:a9:34:86:0f:2a:37:22:fa:f0:0d:5b:98:f2:e0:
c6:1b:aa:da:0f:46:c6:c2:02:b1:09:59:7d:f5:d0:
9a:b7:da:d8:70:18:4f:40:0b:4d:3e:cf:ad:49:92:
d1:f7:f5:67:34:82:9c:97:18:8a:25:90:96:99:10:
0f:47:08:8a:cc:2a:83:b7:23:a4:13:87:88:5a:d7:
1d:63:d2:4c:bf:76:87:db:30:aa:eb:60:40:a6:d3:
da:01:59:e3:9f:f7:ee:1b:ae:66:ed:00:af:c8:df:
66:dc:64:10:a9:9a:7f:34:36:5e:33:d2:06:cf:bf:
10:17:57:e5:1f:72:76:22:b7:9a:cf:cf:04:91:ac:
4e:80:ca:b7:0f:c4:22:bd:fb:b6:fe:9f:e4:52:e4:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AB:10:D9:B7:9A:DA:CA:09:15:58:63:0B:A8:83:69:A9:32:83:5F
X509v3 Authority Key Identifier:
keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:da:52:e8:38:c9:76:8a:7f:f2:cc:2b:e1:c5:ab:13:a1:41:
7c:f8:30:8b:9f:01:1a:fe:df:55:8e:fa:76:77:3f:c6:b2:ac:
44:c7:bc:7a:ac:28:13:69:d1:80:45:d7:c6:00:d9:65:7c:76:
fa:4f:10:37:1a:b7:4b:83:6d:f7:1a:df:ab:87:16:6a:30:a3:
61:e8:98:d3:fb:f6:2a:a3:f9:7d:5a:6f:bd:c2:ac:64:e2:bf:
59:67:6b:a2:b0:62:fd:f8:bb:cc:cc:59:e3:38:f0:9c:35:d2:
50:fd:90:ed:8b:c0:6a:3e:81:eb:5b:dc:ab:df:c4:54:92:fb:
01:31:14:48:25:ca:ff:84:19:8f:18:bf:01:e7:3b:88:b4:d2:
c0:56:5c:67:e0:45:6d:32:ea:3a:0e:2d:14:7f:a1:b0:c2:22:
86:1d:de:b5:55:41:97:28:4b:92:28:19:27:ff:e6:33:ae:02:
96:e7:4b:73:ac:bd:c3:00:3b:73:45:60:35:e2:e0:9c:d3:49:
df:d6:d5:18:bc:b7:55:31:65:01:d2:63:21:5c:ba:7e:af:2c:
c2:32:e7:25:40:d8:47:e1:0d:5f:dc:e7:35:8d:d2:21:8a:2d:
94:78:21:10:9a:3b:04:35:40:4d:16:55:3a:7a:40:aa:12:b3:
15:46:0a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:49 2025 by rpki-client