Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json)
Hash identifier: /fLE+o1C1hVG7oUjUlJnupyd6tUQVERQ3clYqykBI1I=
Subject key identifier: 48:A7:9B:1F:A5:DC:BE:36:CD:8B:B8:A1:C9:0B:34:11:9B:FC:CC:8B
Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Certificate serial: 019A4EF43B8B0B0B83D33AC75834ADB425E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
Manifest number: 0612
Signing time: Tue 04 Nov 2025 13:00:20 +0000
Manifest this update: Tue 04 Nov 2025 13:00:20 +0000
Manifest next update: Wed 05 Nov 2025 13:00:20 +0000
Files and hashes: 1: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: MX5dHySme5eHpdvApqzcKz8yTDEvrRq4tlQy9r8tX/w=)
2: Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa (hash: 2Xu5Qu43xBBRy4X2ZZ8tBlY4rjWAu0V1llrLDaiQerk=)
3: oaLZxtKD66NwRygInPYpaycKqOc.roa (hash: Ja3SjwoX4eh5IRVh7jPL7K8MqCmfJQ9Q/LWhTt+xawU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:3b:8b:0b:0b:83:d3:3a:c7:58:34:ad:b4:25:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Validity
Not Before: Nov 4 13:00:20 2025 GMT
Not After : Nov 5 13:00:20 2025 GMT
Subject: CN=48a79b1fa5dcbe36cd8bb8a1c90b34119bfccc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cb:e3:f2:2d:77:8c:57:db:73:8f:b1:e1:74:
97:0d:04:3d:37:60:ba:7f:56:69:2f:5b:b9:83:f5:
5c:fe:af:3f:6c:1f:38:29:9f:58:99:27:f3:a8:ea:
b8:03:b9:fb:35:a4:fe:1e:d4:de:a6:29:56:4a:ea:
13:18:b6:6b:1d:d5:a4:30:98:52:7a:c4:8d:1e:33:
ca:fa:23:66:8a:b9:75:b5:32:45:e0:87:ea:e9:60:
13:af:80:63:43:ad:82:37:eb:7f:fb:fb:9e:71:71:
de:2e:e4:bb:32:5a:b3:50:31:18:dc:ba:b6:e5:86:
73:2a:c1:39:b4:c0:ff:81:93:ef:8e:ba:1a:30:5a:
2a:59:26:0a:97:59:5f:71:da:05:2f:97:03:84:fb:
0f:15:66:fa:ed:96:7f:5d:2a:f3:bd:29:2e:9f:89:
e8:56:b8:99:0d:8b:0e:5a:05:aa:b8:8e:c0:55:5b:
51:90:c0:f5:a9:56:2e:dc:b4:16:9e:ea:05:5e:fd:
d0:46:78:22:20:01:f5:d9:2f:d6:4a:e0:1a:66:1b:
b4:5a:a4:86:88:e0:f3:01:37:d4:ba:20:f0:aa:5f:
b0:d4:9a:fd:d1:fe:19:a1:2a:f2:64:22:74:0c:24:
6c:ab:1e:7a:28:7a:f7:4c:7f:98:a4:87:44:d6:2a:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A7:9B:1F:A5:DC:BE:36:CD:8B:B8:A1:C9:0B:34:11:9B:FC:CC:8B
X509v3 Authority Key Identifier:
keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b7:af:25:0e:b7:c8:cf:3a:a2:b7:d1:93:96:5e:0e:a4:02:
13:34:cc:73:7f:16:0e:42:5e:78:25:a4:ee:ec:1d:51:48:6c:
c7:8b:d2:fa:5e:1c:46:d8:37:c5:f0:d9:3c:60:b8:96:bc:5e:
d9:7b:af:68:96:64:24:05:d8:f2:f0:72:66:f4:1a:33:85:85:
55:80:fd:f6:9a:8d:db:d9:11:13:54:86:62:dd:e9:9b:4e:69:
4e:40:0e:e2:93:c0:2c:bd:a0:73:3c:4c:17:7c:c8:92:ea:fb:
3c:f9:e3:dc:3b:23:b5:01:ac:ef:01:b7:4a:4b:59:12:9b:61:
43:8b:95:a6:00:b2:d5:f3:33:4a:57:72:6c:20:c0:b2:2e:f9:
c8:8c:d8:d4:f4:34:85:20:6d:01:96:a3:07:be:b8:c0:c0:94:
af:e4:49:94:9b:27:78:73:e3:ca:ed:c3:e8:c1:de:66:49:93:
b3:48:5c:0b:0a:c8:44:ea:38:b8:70:a0:3a:9f:8f:a1:b6:6c:
7d:93:2b:a9:b1:98:26:d3:a7:57:cf:67:3f:8d:3b:1b:bb:b3:
03:14:5c:d2:b9:35:16:ef:7a:37:77:11:71:81:5f:95:66:5d:
41:77:8b:af:47:e6:39:d2:c1:ef:13:d2:b2:5d:aa:3e:5b:65:
df:da:df:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:53 2025 by rpki-client