Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json)
Hash identifier: MyGqTPJ2ny55FbkuA3kh08q4oDnkhf+xAL3rpAcoyOQ=
Subject key identifier: 3F:6C:95:25:2C:66:06:6A:8B:D1:DD:AE:59:AF:01:43:49:93:C8:9F
Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Certificate serial: 019875D2449A6D7FF748CD55B2F3C81F00CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
Manifest number: 051D
Signing time: Mon 04 Aug 2025 16:02:51 +0000
Manifest this update: Mon 04 Aug 2025 16:02:51 +0000
Manifest next update: Tue 05 Aug 2025 16:02:51 +0000
Files and hashes: 1: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: bmt724H1B43rHnBi77IleKlGQI2MDz7nOI5mz2S84cc=)
2: Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa (hash: 2Xu5Qu43xBBRy4X2ZZ8tBlY4rjWAu0V1llrLDaiQerk=)
3: oaLZxtKD66NwRygInPYpaycKqOc.roa (hash: Ja3SjwoX4eh5IRVh7jPL7K8MqCmfJQ9Q/LWhTt+xawU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d2:44:9a:6d:7f:f7:48:cd:55:b2:f3:c8:1f:00:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Validity
Not Before: Aug 4 16:02:51 2025 GMT
Not After : Aug 5 16:02:51 2025 GMT
Subject: CN=3f6c95252c66066a8bd1ddae59af01434993c89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1e:f6:f2:fb:d6:67:be:73:00:fe:78:e7:07:
d2:c9:f7:15:b1:8a:86:27:11:45:41:88:9c:93:b7:
a8:69:12:5b:15:9c:d5:01:28:3c:13:e2:cf:3f:9e:
26:7f:f1:e3:a4:8f:ba:84:0c:ed:3d:84:83:3c:23:
ab:db:98:94:70:a1:f8:e6:78:64:4a:fd:44:92:1e:
e7:c6:c7:cb:8b:72:6c:60:5d:93:bc:a1:20:0d:df:
8d:55:af:7e:29:f3:8f:6c:6c:a2:7d:9a:21:a5:0b:
c3:41:62:26:84:c0:30:da:f8:14:5e:50:15:20:4b:
1f:43:66:3b:4e:a5:6f:f7:ce:27:7b:88:fe:63:53:
9b:2a:b4:10:a4:c0:b8:2f:7e:94:14:ff:22:04:2b:
c5:cc:90:36:dd:fa:20:ae:32:5a:c3:9c:4d:ea:0e:
50:49:67:c5:28:9c:7c:50:4c:28:5b:c6:40:4a:e4:
cb:92:ec:48:53:03:15:d8:67:09:41:4d:9e:95:ee:
7f:7c:a7:25:6b:0f:c6:f6:24:f7:aa:6c:ce:6d:38:
25:a6:d0:97:d0:00:e1:c2:3a:e0:91:53:2d:78:c2:
e1:4e:d8:37:a4:de:1b:1a:e3:f1:b0:3d:fd:42:89:
ba:74:d1:d0:88:b5:57:84:ea:ed:ea:1d:69:ff:90:
9c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6C:95:25:2C:66:06:6A:8B:D1:DD:AE:59:AF:01:43:49:93:C8:9F
X509v3 Authority Key Identifier:
keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ce:69:6c:d9:c3:2c:b4:96:e5:45:2c:34:d0:e8:62:71:b0:
b0:ac:4e:08:13:9c:9e:57:27:53:47:c5:8a:0d:c1:b0:59:0f:
82:95:37:04:72:3a:4b:ab:03:fa:bb:1e:05:ea:a7:38:90:37:
fa:a0:c2:58:d7:7b:98:9d:f7:ed:42:3e:38:ac:3f:6b:a4:4e:
b9:31:2f:f5:b0:e5:7b:91:2b:5b:11:cb:66:14:4c:2d:ec:fd:
7a:0c:87:52:a0:e7:90:42:cb:04:bb:d7:3b:ef:91:b5:29:e7:
ff:0a:78:ae:4c:12:af:11:74:7d:bc:48:d8:bb:69:73:d5:24:
2f:07:c2:70:0b:fd:f6:d2:8b:c5:ce:57:a4:5c:8d:67:a7:91:
9e:70:22:04:ef:6e:04:07:87:a2:78:1c:d5:1f:c0:31:b6:45:
b6:96:f1:d4:2e:18:9d:46:2f:bc:33:08:b0:7b:37:d0:e5:c5:
86:4f:da:1d:fa:00:c9:43:77:23:4e:12:75:1b:a2:24:2c:5e:
ee:68:bf:d7:b4:b8:85:0e:2f:09:c5:61:9a:5f:7d:39:b1:95:
a1:7b:45:4d:c7:75:81:64:5b:10:cc:bc:68:10:7c:95:6a:47:
9d:92:9c:cb:03:6c:6d:1b:0e:a4:21:a7:57:53:b8:73:5c:9c:
82:60:29:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:08:54 2025 by rpki-client