Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json)
Hash identifier: 7RUCFMuS95RdWe1akWRjUrKq/U1ZZtOIaHLGHiOp7HU=
Subject key identifier: 34:91:19:A0:59:E1:A2:BC:52:D4:D5:EC:76:12:E9:0E:AE:46:26:51
Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Certificate serial: 0198D4747C81AE8D762D29893C1A785B595F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
Manifest number: 054E
Signing time: Sat 23 Aug 2025 01:04:20 +0000
Manifest this update: Sat 23 Aug 2025 01:04:20 +0000
Manifest next update: Sun 24 Aug 2025 01:04:20 +0000
Files and hashes: 1: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: PSpB+ycBq62oY/ZqyBSeOuMhCZ2uoLOglec1kpG6Vv0=)
2: Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa (hash: 2Xu5Qu43xBBRy4X2ZZ8tBlY4rjWAu0V1llrLDaiQerk=)
3: oaLZxtKD66NwRygInPYpaycKqOc.roa (hash: Ja3SjwoX4eh5IRVh7jPL7K8MqCmfJQ9Q/LWhTt+xawU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:7c:81:ae:8d:76:2d:29:89:3c:1a:78:5b:59:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Validity
Not Before: Aug 23 01:04:20 2025 GMT
Not After : Aug 24 01:04:20 2025 GMT
Subject: CN=349119a059e1a2bc52d4d5ec7612e90eae462651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:ae:fc:5e:c2:90:c5:a8:81:17:90:ae:e8:
98:cd:e8:6f:ac:44:0d:fd:33:88:95:ad:f4:6e:01:
2e:87:fa:0b:53:17:80:b3:0e:09:f7:87:18:7a:ab:
cf:ba:f7:b3:a4:19:96:75:ad:5c:39:40:60:ee:ff:
25:63:1d:a1:ea:31:71:b9:76:2e:f8:1f:73:26:1c:
62:4c:42:3c:f1:17:12:44:fa:aa:c2:48:57:a8:87:
9b:1b:c5:bb:82:64:d9:eb:a2:16:d8:c8:3d:db:ea:
27:8e:1a:4c:e5:1c:70:a8:06:e8:32:1d:ab:fa:fd:
cd:1b:f5:bb:cd:a4:50:ca:34:b8:2d:72:02:61:a3:
ad:40:7c:7b:2d:01:62:d2:30:12:99:1f:9f:69:50:
89:b6:89:c8:ae:e6:07:7e:bb:47:49:7e:be:93:0a:
4c:54:2d:af:1e:f9:e2:28:6a:2b:e8:15:3c:6f:b4:
c4:07:19:65:9b:c1:79:0d:6e:ef:72:89:5d:03:36:
7b:10:95:ff:ae:13:57:fa:64:9f:a2:6c:82:33:da:
9f:e8:c3:df:3e:03:48:c7:f0:c0:c4:51:b0:3a:2a:
bd:ff:e7:fe:d4:74:86:a3:76:4e:f8:06:1a:6a:be:
e0:c5:7a:ec:4e:e8:9f:d3:96:d7:07:49:60:9a:e9:
ef:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:91:19:A0:59:E1:A2:BC:52:D4:D5:EC:76:12:E9:0E:AE:46:26:51
X509v3 Authority Key Identifier:
keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6a:8c:db:e3:90:08:8c:a2:52:22:5b:fa:c9:63:81:de:e6:
b1:59:05:f7:74:c4:28:72:9f:96:d2:8e:e6:73:8d:bd:99:05:
95:b3:2c:5d:11:4b:e0:13:fa:29:0c:04:4d:c0:9b:70:53:74:
ec:e2:ae:71:e2:60:88:45:e8:d9:e6:5f:3d:a5:7c:39:5d:d7:
6c:aa:86:c9:2f:a0:d8:8e:17:d3:2b:a8:31:b3:49:ed:c5:c8:
dc:4c:bd:05:e9:8b:f3:1a:4b:9d:a8:c3:a1:42:c6:cd:9f:53:
49:e8:0d:c6:ff:b3:b7:2c:e8:a2:ee:1e:00:77:dd:f8:99:89:
76:15:1e:38:b6:8f:d7:ad:ce:c0:54:87:7c:18:4b:ff:8f:fe:
af:e2:14:f5:30:64:f3:b9:8a:6e:b9:20:7e:63:79:e3:1f:df:
e5:fb:d4:1d:4b:0c:66:48:26:01:01:92:92:c7:41:a1:04:d6:
14:11:ec:88:67:bd:a4:23:a5:6f:98:49:f1:59:18:ce:31:e7:
7a:2e:f0:c9:48:3a:d4:21:09:52:b7:01:f4:da:0e:d7:60:c8:
12:cb:aa:b0:aa:65:1e:9f:ba:0b:57:43:ff:8d:1d:fe:d8:1c:
14:34:6d:b6:37:fe:7a:af:7f:6f:37:ee:c4:9e:9f:25:e4:b6:
da:f6:8b:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdHyBro12LSmJPBp4W1lfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMjBmNGQ0Yzc1MjhkOGE4MjdlYzcyNDkxOGZlMmRmNTM0
YmQ5MDUwHhcNMjUwODIzMDEwNDIwWhcNMjUwODI0MDEwNDIwWjAzMTEwLwYDVQQD
EygzNDkxMTlhMDU5ZTFhMmJjNTJkNGQ1ZWM3NjEyZTkwZWFlNDYyNjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaiu/F7CkMWogReQruiYzehvrEQN
/TOIla30bgEuh/oLUxeAsw4J94cYeqvPuvezpBmWda1cOUBg7v8lYx2h6jFxuXYu
+B9zJhxiTEI88RcSRPqqwkhXqIebG8W7gmTZ66IW2Mg92+onjhpM5RxwqAboMh2r
+v3NG/W7zaRQyjS4LXICYaOtQHx7LQFi0jASmR+faVCJtonIruYHfrtHSX6+kwpM
VC2vHvniKGor6BU8b7TEBxllm8F5DW7vcoldAzZ7EJX/rhNX+mSfomyCM9qf6MPf
PgNIx/DAxFGwOiq9/+f+1HSGo3ZO+AYaar7gxXrsTuif05bXB0lgmunvewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSRGaBZ4aK8UtTV7HYS6Q6uRiZRMB8GA1UdIwQY
MBaAFEAg9NTHUo2Kgn7HJJGP4t9TS9kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yZjdhNmUtZThjMS00ZjYyLTk1Zjkt
NjRiZmI3OTkwMGQ2LzEvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8yZjdhNmUtZThjMS00ZjYyLTk1ZjktNjRiZmI3OTkwMGQ2
LzEvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGqM2+OQ
CIyiUiJb+sljgd7msVkF93TEKHKfltKO5nONvZkFlbMsXRFL4BP6KQwETcCbcFN0
7OKuceJgiEXo2eZfPaV8OV3XbKqGyS+g2I4X0yuoMbNJ7cXI3Ey9BemL8xpLnajD
oULGzZ9TSegNxv+ztyzoou4eAHfd+JmJdhUeOLaP163OwFSHfBhL/4/+r+IU9TBk
87mKbrkgfmN54x/f5fvUHUsMZkgmAQGSksdBoQTWFBHsiGe9pCOlb5hJ8VkYzjHn
ei7wyUg61CEJUrcB9NoO12DIEsuqsKplHp+6C1dD/40d/tgcFDRttjf+eq9/bzfu
xJ6fJeS22vaLbw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:44 2025 by rpki-client