Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
File: QCAZkETFTCN5A_ZW-DsmQMLR30U.mft (raw, json)
Hash identifier: yf2r7GPlbrYWV6vWhIDgt1FuOVTm6b6IHDi04DXFNC4=
Subject key identifier: 3E:41:19:D1:37:CC:F7:7B:2F:31:12:81:D4:C1:AB:9B:47:1E:72:79
Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
Certificate issuer: /CN=4020199044c54c237903f656f83b2640c2d1df45
Certificate serial: 0197B77CBFB7A61BC8E90DBBC85BD0785BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
Manifest number: 0A10
Signing time: Sat 28 Jun 2025 17:01:35 +0000
Manifest this update: Sat 28 Jun 2025 17:01:35 +0000
Manifest next update: Sun 29 Jun 2025 17:01:35 +0000
Files and hashes: 1: QCAZkETFTCN5A_ZW-DsmQMLR30U.crl (hash: 8z7g5PpsXF9H+17k7el5OpLkVaC74gI75/r8vffVQYA=)
2: i1vQfq5K6A-H06YMbg-F_fjtfl4.roa (hash: +8kYxsIrdCv4MUOM8YLp4u35KK9tvU6LHvc0dzsNKRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:bf:b7:a6:1b:c8:e9:0d:bb:c8:5b:d0:78:5b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45
Validity
Not Before: Jun 28 17:01:35 2025 GMT
Not After : Jun 29 17:01:35 2025 GMT
Subject: CN=3e4119d137ccf77b2f311281d4c1ab9b471e7279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:60:e1:aa:22:9b:dc:87:bd:ce:1f:ce:25:70:
9e:5a:f0:22:4c:6d:48:a7:ea:85:be:72:d3:9e:43:
9b:37:a6:dd:7d:35:69:78:78:ef:fd:07:82:ea:d0:
e3:e2:da:16:b3:d2:d6:15:74:aa:55:e8:fd:55:4c:
83:36:22:57:04:88:bf:97:56:fd:b5:f1:1a:7c:45:
6e:64:50:f6:c4:d5:ae:c8:48:57:84:8a:a6:b2:db:
96:d0:db:89:75:ec:14:1f:16:4b:71:a6:65:ba:4c:
56:05:b1:01:cf:6f:c0:f3:54:72:1f:86:f5:7a:32:
56:18:33:b7:bd:8e:97:ff:e7:f9:97:bb:80:99:0c:
3a:8c:d6:9d:c1:d2:7b:2f:bf:1c:04:d7:1b:f7:08:
d1:2d:96:5d:d4:6e:ac:17:8f:27:da:01:ad:23:0c:
11:c2:60:9c:ba:de:f3:37:44:80:f3:de:94:ff:94:
e8:39:a0:b7:df:f5:1e:eb:08:84:15:40:3f:70:2a:
62:58:14:e8:d8:87:5e:f4:2e:c3:4d:01:89:ed:5a:
c4:ad:89:b2:22:79:b3:4c:4a:7e:3c:ea:64:3e:4b:
5f:7a:bc:c0:34:1f:3a:46:2f:60:0c:ed:50:0b:01:
72:06:74:ee:2f:9b:a1:33:f3:94:42:96:92:f8:02:
b5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:41:19:D1:37:CC:F7:7B:2F:31:12:81:D4:C1:AB:9B:47:1E:72:79
X509v3 Authority Key Identifier:
keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8a:83:ef:35:34:0c:f1:a0:54:6b:20:60:35:a8:f7:88:80:
af:56:82:be:b6:4b:5b:96:78:f1:74:f4:13:4d:43:00:42:82:
1e:21:88:32:8e:16:54:d6:c4:a5:e5:b6:91:75:a3:1a:75:65:
df:fc:ee:c5:e9:96:0b:41:16:d1:0a:f3:b2:73:38:f0:88:10:
98:04:ea:6c:2d:b1:c4:a5:b4:a4:a5:fd:3c:a0:e2:27:bd:6f:
f5:f2:08:8f:07:22:2d:98:d8:f2:45:83:6a:fa:ef:55:38:18:
d7:4e:75:1f:64:a6:b2:e3:d6:89:01:ed:96:87:86:13:4d:23:
f3:d7:e1:b8:19:f3:0e:a6:1a:2a:4f:7a:b4:9b:48:8c:26:1d:
86:eb:2c:f0:dc:4e:a3:57:0f:32:3b:f7:46:7a:21:c4:f8:db:
d6:33:1c:d8:80:a9:53:53:77:07:69:7d:cd:db:80:0e:9d:c0:
3b:2e:c3:b7:7e:9e:c2:4d:4b:21:97:3f:99:a9:d1:fb:34:b9:
6e:ea:24:0b:72:aa:87:4f:f5:cf:f6:17:59:28:30:ca:b1:4c:
33:c1:d7:45:e3:1b:80:88:c9:6b:48:a2:5f:50:04:ea:90:a2:
6a:8b:a5:8d:0b:d7:38:87:d5:4f:67:f1:03:00:87:d2:93:8e:
b8:cb:f9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:49 2025 by rpki-client