Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
File: QCAZkETFTCN5A_ZW-DsmQMLR30U.mft (raw, json)
Hash identifier: +OUJbagmLDUCU8nhr99NfRM1DAIhm0w5dWHB8cbsuss=
Subject key identifier: 47:F8:C3:3A:0E:19:67:C4:9D:03:F8:37:BC:7B:01:C1:2A:3D:A3:7C
Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
Certificate issuer: /CN=4020199044c54c237903f656f83b2640c2d1df45
Certificate serial: 01978CFF9773540B9AE82EF59C7D61F29821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
Manifest number: 09FA
Signing time: Fri 20 Jun 2025 11:00:50 +0000
Manifest this update: Fri 20 Jun 2025 11:00:50 +0000
Manifest next update: Sat 21 Jun 2025 11:00:50 +0000
Files and hashes: 1: QCAZkETFTCN5A_ZW-DsmQMLR30U.crl (hash: OccmMGjmt9RWNKLb9VA9hlDJbABaiqiDQTRsooIEjz0=)
2: i1vQfq5K6A-H06YMbg-F_fjtfl4.roa (hash: +8kYxsIrdCv4MUOM8YLp4u35KK9tvU6LHvc0dzsNKRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:ff:97:73:54:0b:9a:e8:2e:f5:9c:7d:61:f2:98:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45
Validity
Not Before: Jun 20 11:00:50 2025 GMT
Not After : Jun 21 11:00:50 2025 GMT
Subject: CN=47f8c33a0e1967c49d03f837bc7b01c12a3da37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:b5:a8:47:4b:12:12:21:9a:f3:d9:34:6d:
35:79:fa:f2:d6:ab:7f:97:a1:28:b4:c0:4a:87:06:
c9:d5:ff:d4:66:b1:ad:20:2d:75:52:1d:f2:8a:90:
a0:87:42:08:3c:e8:0e:2c:36:67:27:d4:9a:18:78:
00:01:f7:a0:db:39:3a:5d:d7:11:5e:3c:90:df:39:
93:a5:c0:af:a8:58:c2:98:e2:77:7a:0a:1e:f4:1b:
c8:19:33:ea:92:e3:e2:67:40:c4:23:e9:30:b4:59:
d2:3b:7e:26:6e:ee:4e:de:f6:27:03:12:ba:b8:fa:
5f:42:ff:f7:cf:98:10:ae:4b:61:9e:9f:9d:f6:6c:
5c:82:21:51:ae:34:50:9b:be:e9:77:1f:ee:d0:f2:
0f:16:65:51:75:47:fd:50:fd:f3:83:7b:38:fc:6b:
52:e3:f3:70:d0:a1:5f:a8:da:db:aa:04:80:ba:00:
ff:0c:45:0a:3f:a2:30:fd:90:e6:cc:b1:0b:ec:54:
7d:60:f0:81:9a:a9:c2:9d:63:ea:d0:f5:49:2e:47:
81:1a:5d:70:bb:23:8a:2a:fd:4a:34:c7:70:c5:c4:
b1:fd:08:09:a1:ce:95:f3:8a:83:fe:ed:3b:9f:ce:
2b:c7:d0:25:b1:56:d5:5b:94:e3:84:c6:5a:a4:44:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F8:C3:3A:0E:19:67:C4:9D:03:F8:37:BC:7B:01:C1:2A:3D:A3:7C
X509v3 Authority Key Identifier:
keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5b:f7:fa:40:a3:f3:8c:35:5a:c9:75:2a:a8:11:46:73:f1:
6c:59:b9:b9:c4:7f:b5:8b:c9:22:98:6c:e8:46:46:fa:35:ea:
55:8d:01:59:d5:22:92:cb:fd:05:aa:39:bf:5d:80:b4:9e:f5:
7c:82:33:93:ad:94:f2:49:f4:10:00:c2:ae:60:e7:21:ae:42:
c8:0f:74:44:9d:08:ab:a8:58:39:ba:83:61:6c:71:65:63:b6:
6f:69:2d:a1:37:15:31:08:cb:97:70:9a:5d:3f:7f:cd:83:5d:
f9:1f:c2:1b:ae:18:2c:f6:c3:5d:53:fa:cb:1a:0a:b9:41:bf:
70:e2:e5:61:cd:51:04:2c:b6:3c:a5:32:6c:71:62:76:35:4d:
cc:78:52:0b:98:fa:d3:57:95:86:fc:53:89:53:97:81:9c:08:
8e:95:e5:34:90:d0:45:b7:40:2d:5a:1d:0c:eb:98:71:54:1b:
67:08:e2:36:03:56:59:06:e0:a6:10:e7:fd:f7:17:04:ce:22:
48:2c:54:82:c7:cd:d4:47:bd:8d:3a:7d:b5:ae:36:b8:7a:2d:
9a:70:af:0b:3e:ad:bf:71:db:b0:a5:15:33:27:dd:0c:dd:9c:
b3:29:2e:3a:0b:f2:7a:20:40:21:1e:34:5d:7d:be:5e:b5:47:
b0:df:90:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 17:02:30 2025 by rpki-client