Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json)
Hash identifier: 2RZ4godJLqGwrnqtdygNpg7CEBSVwUfZCQUlGQG6oAs=
Subject key identifier: 81:E9:9D:34:98:65:3C:23:57:ED:30:0A:D8:92:E0:0C:2A:D8:B5:ED
Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Certificate serial: 0197B88F23F84CC92D1C35C906C49FBBB7FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
Manifest number: 04BB
Signing time: Sat 28 Jun 2025 22:01:17 +0000
Manifest this update: Sat 28 Jun 2025 22:01:17 +0000
Manifest next update: Sun 29 Jun 2025 22:01:17 +0000
Files and hashes: 1: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: DJcka3fKft6vh5xjai+Qzdz9kQQKFMIbcIHw8mBmGSg=)
2: Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa (hash: 2Xu5Qu43xBBRy4X2ZZ8tBlY4rjWAu0V1llrLDaiQerk=)
3: oaLZxtKD66NwRygInPYpaycKqOc.roa (hash: Ja3SjwoX4eh5IRVh7jPL7K8MqCmfJQ9Q/LWhTt+xawU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:23:f8:4c:c9:2d:1c:35:c9:06:c4:9f:bb:b7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Validity
Not Before: Jun 28 22:01:17 2025 GMT
Not After : Jun 29 22:01:17 2025 GMT
Subject: CN=81e99d3498653c2357ed300ad892e00c2ad8b5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:56:86:49:16:d7:09:84:49:39:3a:bf:75:ff:
a6:d3:84:72:14:5c:2f:b2:b1:8f:cd:d1:c9:e0:77:
e7:ee:c2:8a:6b:d5:4f:5c:2c:33:5f:d1:42:b6:ea:
db:31:e5:48:43:bb:07:5d:5d:dd:6e:10:14:39:70:
87:94:ab:41:5c:11:40:c4:f0:93:86:94:a3:89:a0:
69:47:e2:88:e2:c0:50:78:f8:fe:99:c5:17:b0:e5:
06:ab:c6:55:26:2d:e2:38:a5:dc:bd:1c:6a:90:bc:
4c:57:f0:f4:47:93:0f:dd:2e:82:7c:e7:11:63:29:
b6:8a:15:87:cb:52:5c:b1:63:13:63:bb:d8:39:fa:
31:e0:af:8f:fb:11:14:ae:d0:e5:a6:f6:58:35:7d:
3f:85:01:e9:d4:fa:4e:8a:41:7f:b8:98:de:8a:f2:
4e:c4:26:09:8a:cd:48:eb:9a:f9:51:2f:16:39:89:
3d:65:92:ad:c5:3c:8f:cc:2d:d7:49:12:79:68:2f:
99:5a:a2:3f:29:85:96:58:d2:2f:e6:fd:9f:4a:be:
a2:f7:7b:25:38:2a:c7:a5:01:15:15:b7:df:9e:8f:
f6:44:70:8f:ea:91:3f:e9:9d:6c:29:92:34:61:e7:
5a:87:e6:03:87:f0:68:7b:a5:94:fe:70:32:0b:2c:
3c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E9:9D:34:98:65:3C:23:57:ED:30:0A:D8:92:E0:0C:2A:D8:B5:ED
X509v3 Authority Key Identifier:
keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:ed:dc:a1:6b:ec:62:7d:2f:de:b8:17:3b:f2:10:3c:ce:7b:
72:ff:c7:6c:0f:70:b8:24:f5:cf:34:e7:1a:87:80:47:ae:3f:
40:5b:98:16:cf:fb:0e:74:be:73:b8:6d:3f:6b:33:f5:de:56:
38:16:08:56:94:b6:e7:cc:6b:b2:2b:54:9e:58:e9:ad:4f:77:
69:24:34:1a:d2:ab:f7:66:ec:f5:2d:c5:0a:66:32:a3:ae:30:
12:6e:68:1a:fd:8a:c6:9b:4b:b5:f9:1c:6a:bd:7c:9e:34:91:
94:ed:32:36:cf:61:ba:88:09:17:b4:8e:94:c3:7a:14:f2:1f:
73:48:28:a7:2b:f3:e2:8b:04:93:16:73:81:32:06:3b:b5:7b:
ee:0d:c0:e9:81:db:ca:d4:d0:07:c3:82:c0:0b:43:07:4c:0a:
4c:69:f3:6f:37:70:68:f3:a9:20:70:e8:d5:02:14:a0:d6:1e:
dd:3d:c5:be:3c:8f:f8:1e:85:cc:5e:d4:43:df:1a:83:99:4d:
88:75:b4:18:8d:0d:b1:6b:c8:c6:fc:57:37:da:63:be:28:be:
a0:4e:6d:b8:8c:4c:fe:86:38:67:42:13:95:38:13:c1:10:a0:
73:8b:74:2d:e0:12:c0:2e:60:47:d2:b5:a4:99:7b:13:33:80:
ae:4f:9a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:31:35 2025 by rpki-client