Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
File: QCAZkETFTCN5A_ZW-DsmQMLR30U.mft (raw, json)
Hash identifier: SGckzCmziRqtegCMzcf847BtUQbMwAxsl3dE3tvKPfk=
Subject key identifier: A9:78:12:06:F4:75:9D:DE:BE:23:00:B9:8D:4D:2E:EA:72:FF:2B:20
Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
Certificate issuer: /CN=4020199044c54c237903f656f83b2640c2d1df45
Certificate serial: 0199FCC61CB60761BB41F7198FDD93F88725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
Manifest number: 0B3D
Signing time: Sun 19 Oct 2025 14:01:05 +0000
Manifest this update: Sun 19 Oct 2025 14:01:05 +0000
Manifest next update: Mon 20 Oct 2025 14:01:05 +0000
Files and hashes: 1: QCAZkETFTCN5A_ZW-DsmQMLR30U.crl (hash: UjPOR3XIxr4eNH98ZSXxwzX3om6McafERZLFOdTX9uw=)
2: i1vQfq5K6A-H06YMbg-F_fjtfl4.roa (hash: +8kYxsIrdCv4MUOM8YLp4u35KK9tvU6LHvc0dzsNKRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1c:b6:07:61:bb:41:f7:19:8f:dd:93:f8:87:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45
Validity
Not Before: Oct 19 14:01:05 2025 GMT
Not After : Oct 20 14:01:05 2025 GMT
Subject: CN=a9781206f4759ddebe2300b98d4d2eea72ff2b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:4e:f9:cd:7d:9b:b5:96:bc:78:b5:91:7d:
53:69:81:f2:c6:f1:1f:85:b7:08:01:24:52:6c:f0:
89:f6:ac:74:cf:62:0b:de:09:af:a6:ee:fe:21:da:
77:a4:22:bf:9b:e3:76:3c:66:04:bf:45:39:f1:95:
ca:ed:29:5f:2b:18:93:18:7e:3e:ec:a7:0a:3e:5f:
0d:3d:aa:f7:4d:4d:49:9e:e5:e6:50:a5:f4:80:93:
21:72:2d:e3:14:b3:1f:61:d3:12:39:8e:26:ba:a3:
94:09:a3:22:e8:cc:ac:7a:aa:b9:93:76:9c:19:3b:
7e:28:8e:e9:b8:dc:74:00:5c:b0:07:8c:f8:66:37:
86:29:b8:0c:fd:ab:42:d4:31:27:e8:50:7d:8e:ff:
73:00:7e:03:f1:69:fb:09:21:88:80:05:77:49:cc:
ec:51:9d:16:cf:c5:b9:be:0b:7b:bf:8e:0a:3f:bb:
5a:32:8f:c6:3b:4d:56:7a:be:d2:41:5a:f4:2f:6e:
a3:99:75:25:0e:53:9d:85:52:06:ce:33:1f:15:a3:
e0:81:5a:13:69:a6:1e:62:07:53:05:98:71:32:cd:
c4:34:b3:5e:2a:93:bc:ff:f5:f9:9f:88:47:8b:d3:
f1:3d:e6:33:b6:07:bf:80:4f:70:43:7a:70:7e:3e:
7d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:78:12:06:F4:75:9D:DE:BE:23:00:B9:8D:4D:2E:EA:72:FF:2B:20
X509v3 Authority Key Identifier:
keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5d:7b:b8:a4:79:da:bb:4a:37:ec:6b:ef:06:3e:7f:cb:a5:
64:ce:cc:be:c2:a3:3e:c9:53:c5:93:0e:6d:84:6f:6e:c3:2f:
90:c6:dc:63:19:10:3e:46:c2:40:55:30:25:0a:64:d7:96:cf:
22:18:f9:11:74:60:2b:5b:8b:fa:8d:be:94:bc:69:6e:81:c0:
24:4f:3e:e1:63:66:da:e3:cd:e2:ac:58:66:2d:a3:a2:04:e2:
af:93:32:f1:05:ee:99:dd:c9:c3:6f:8f:b8:83:6f:5f:db:70:
12:7c:d3:c9:19:47:ea:05:03:09:2d:07:fb:65:ad:8e:ff:9a:
f7:69:08:cf:24:d1:23:f5:39:39:88:e7:80:a2:75:4a:e7:5c:
9b:0e:4e:9c:0c:9e:a6:f1:aa:b8:31:83:13:34:09:d7:3a:fd:
84:ae:4e:f7:59:46:f9:62:bf:cc:55:32:65:a3:d4:f6:7c:42:
d5:75:29:60:b2:a3:88:d0:cc:d9:f0:2b:a8:c1:5d:22:90:e3:
54:b3:25:45:d9:3c:89:4a:4a:7a:18:78:86:96:cd:77:40:0e:
bc:16:e1:0d:09:10:92:10:e5:5f:3b:89:06:01:aa:fb:a4:09:
08:67:2a:df:4e:13:5c:84:cd:16:59:4b:96:8b:14:dc:17:f6:
77:75:be:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:47 2025 by rpki-client