Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
File: QCAZkETFTCN5A_ZW-DsmQMLR30U.mft (raw, json)
Hash identifier: Fri2eTQ03EVE6mV48NAyhdglZWGbX7vjyuh0eVTkl+0=
Subject key identifier: 05:D0:CF:C8:EB:28:86:EC:5A:9C:37:B5:9C:83:FE:58:1E:BA:70:E1
Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
Certificate issuer: /CN=4020199044c54c237903f656f83b2640c2d1df45
Certificate serial: 019A4DE1C811FE54631591D2A253C5E59166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
Manifest number: 0B67
Signing time: Tue 04 Nov 2025 08:00:33 +0000
Manifest this update: Tue 04 Nov 2025 08:00:33 +0000
Manifest next update: Wed 05 Nov 2025 08:00:33 +0000
Files and hashes: 1: QCAZkETFTCN5A_ZW-DsmQMLR30U.crl (hash: LzSMqf0MfShR42DrLX6/8uBKZpOKKPaGI3MT7EZnxYQ=)
2: i1vQfq5K6A-H06YMbg-F_fjtfl4.roa (hash: +8kYxsIrdCv4MUOM8YLp4u35KK9tvU6LHvc0dzsNKRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c8:11:fe:54:63:15:91:d2:a2:53:c5:e5:91:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45
Validity
Not Before: Nov 4 08:00:33 2025 GMT
Not After : Nov 5 08:00:33 2025 GMT
Subject: CN=05d0cfc8eb2886ec5a9c37b59c83fe581eba70e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:7d:ea:cc:b9:e8:e1:91:7b:ad:e6:9a:54:
7d:73:b6:8c:40:94:62:b2:0b:23:d0:7e:5a:cd:5b:
4a:53:c1:57:44:6a:a6:94:5b:51:0e:67:f5:a2:d5:
a3:eb:05:2c:68:c4:9a:d4:fd:55:45:06:71:f5:42:
71:be:a2:98:95:9b:87:0e:8c:f7:34:e5:85:0b:ae:
f9:ff:ff:e3:d2:bc:59:c5:29:d2:9c:85:34:7c:e3:
27:01:90:5d:f7:eb:d0:a7:d5:8e:91:4f:04:6d:ee:
f9:0f:83:c0:0b:6d:31:eb:03:18:f4:4f:e6:cc:bf:
e0:90:b6:a8:70:e0:c9:66:a5:06:de:ee:d8:de:f7:
ae:63:7b:af:7f:f7:f7:03:2a:4c:9f:60:83:0c:1d:
f0:69:c7:cd:d8:e3:a5:02:f9:a4:d1:03:a9:0c:52:
eb:c9:0f:ae:82:b4:a1:48:88:2b:ac:bf:e3:de:9d:
8a:dc:4c:f9:b6:98:0c:c5:81:66:b6:d9:1c:a9:7f:
5e:f7:c9:2a:3d:ce:aa:53:90:31:ff:48:ae:6f:50:
3f:d7:b8:20:4a:b5:ad:18:4b:82:bd:b5:91:09:2b:
b5:92:6a:18:d0:46:2f:70:49:16:9c:1b:e5:63:4e:
c7:eb:1d:27:15:64:b9:9a:87:51:b4:c9:3f:26:53:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D0:CF:C8:EB:28:86:EC:5A:9C:37:B5:9C:83:FE:58:1E:BA:70:E1
X509v3 Authority Key Identifier:
keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b7:4a:f3:95:b1:b1:5e:d3:12:6b:24:02:21:76:dd:3d:91:
d1:7d:4a:2a:20:d3:5a:eb:31:0a:1f:bf:03:70:c7:0f:cd:ce:
81:b8:1a:73:32:21:d8:05:12:fd:79:98:be:7f:ce:0c:a2:b6:
ec:4c:a3:04:43:4a:33:01:08:8b:50:57:92:c2:7b:a4:d7:e5:
27:f1:1a:9b:ce:d3:a4:03:5d:7a:1a:6b:b4:ea:ed:b2:bb:2a:
52:94:65:ec:b3:68:b7:eb:ef:c8:c5:69:37:d8:c5:61:93:3d:
6c:08:79:ec:92:27:61:82:a2:f4:4d:2c:18:15:be:7e:80:2d:
54:5b:d9:d4:67:c7:cb:81:04:60:30:c2:e1:20:c1:af:02:f6:
61:1f:01:54:a9:68:a2:d9:82:5c:b8:00:65:2f:b4:78:b6:30:
13:f9:75:73:98:d9:63:e0:6c:81:fb:e9:22:2f:98:37:af:f6:
95:f5:71:7e:4e:ef:5e:93:d3:fb:92:05:ca:7d:4e:db:b9:e6:
f1:f3:f8:fa:99:81:d2:2f:9b:13:fb:5c:2f:cc:d2:0c:e4:fe:
d8:7a:e5:b6:59:94:d8:5a:be:33:da:2d:ce:f4:37:f6:85:09:
b5:31:9a:3b:a9:80:7f:ed:30:9f:f6:30:5d:8c:ed:fd:c2:35:
5d:ea:40:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:24:31 2025 by rpki-client