Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
File: QCAZkETFTCN5A_ZW-DsmQMLR30U.mft (raw, json)
Hash identifier: QC8XT+mB7+80FDYwylibyLx0WYm2quhiv2UbYwAK+uU=
Subject key identifier: 93:D1:34:A7:30:4D:D0:72:25:80:9C:52:F9:A6:C9:B4:27:B2:EF:B5
Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
Certificate issuer: /CN=4020199044c54c237903f656f83b2640c2d1df45
Certificate serial: 019855DF7430A9386EE62111B88FA5BD494B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
Manifest number: 0A62
Signing time: Tue 29 Jul 2025 11:09:24 +0000
Manifest this update: Tue 29 Jul 2025 11:09:24 +0000
Manifest next update: Wed 30 Jul 2025 11:09:24 +0000
Files and hashes: 1: QCAZkETFTCN5A_ZW-DsmQMLR30U.crl (hash: PNpHuAjtczBb+JghaOvdl7FtLbGN4Sp0EwwCDmfse2w=)
2: i1vQfq5K6A-H06YMbg-F_fjtfl4.roa (hash: +8kYxsIrdCv4MUOM8YLp4u35KK9tvU6LHvc0dzsNKRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:df:74:30:a9:38:6e:e6:21:11:b8:8f:a5:bd:49:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45
Validity
Not Before: Jul 29 11:09:24 2025 GMT
Not After : Jul 30 11:09:24 2025 GMT
Subject: CN=93d134a7304dd07225809c52f9a6c9b427b2efb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:77:04:60:17:32:9b:d1:19:ff:29:f0:07:47:
61:57:03:21:7f:8c:a5:b2:9c:fa:86:c2:c3:50:8c:
b6:03:9f:5e:46:03:d8:51:49:c4:3d:3d:47:bb:09:
78:93:37:57:75:bd:c4:6c:dc:b1:3c:79:1c:a5:87:
d8:49:a4:f6:d8:68:45:fc:7b:47:c0:70:b5:b4:73:
5a:c1:18:8c:02:44:d7:79:25:2a:2a:b0:b5:c9:7a:
87:93:9e:e2:8e:0b:47:5a:fd:89:8b:6c:ce:fa:75:
18:85:cc:ce:72:fe:14:f1:80:ea:5b:8a:e1:76:3a:
61:d4:3a:a7:62:cd:c8:19:65:75:c9:91:2b:f9:07:
65:57:07:3b:e2:23:92:ae:aa:5c:fe:76:5d:a1:8a:
18:2a:53:b2:ca:33:64:68:b7:19:2e:13:e3:f2:5d:
cb:07:2d:fd:b4:a9:60:29:a0:60:c4:08:c4:0e:5d:
6d:5e:15:b5:a2:6c:ce:5d:61:e2:c3:a8:72:b2:c9:
21:d2:54:0f:ac:3b:bb:84:af:e0:45:2c:e7:ca:38:
37:33:65:7b:8b:0b:03:f9:23:43:d2:79:57:ff:22:
a6:a9:2c:95:22:24:e0:f1:c2:26:91:a3:78:f2:9b:
f2:c7:6c:13:60:7d:a9:36:21:5b:46:ab:a2:c2:70:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D1:34:A7:30:4D:D0:72:25:80:9C:52:F9:A6:C9:B4:27:B2:EF:B5
X509v3 Authority Key Identifier:
keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cd:8d:42:9c:5d:ee:1a:aa:df:b6:c2:66:c7:61:09:4e:b3:
68:01:30:fb:d2:bb:ed:cb:de:31:8d:ef:9e:2a:50:50:b6:f0:
80:76:c8:53:8a:3e:ee:fa:6e:ff:0a:83:26:6b:0d:70:20:b7:
67:e3:43:22:b9:7c:a9:50:7d:82:4a:64:c0:3b:d3:6f:3e:bc:
cd:66:ef:f1:98:2e:35:3d:4a:1e:dd:dd:9c:8d:20:59:ec:26:
2c:5b:57:71:b7:cc:e1:54:9c:4e:c5:5a:66:b2:45:50:9f:41:
41:02:61:dd:d0:c6:7d:56:ee:14:1d:9f:e9:77:68:c3:b6:98:
4a:5c:c5:f3:65:b7:3c:36:52:7e:70:7e:19:f8:3f:16:06:0d:
c3:2b:02:e0:df:29:1a:73:d1:6f:c8:56:23:5f:91:49:a2:22:
97:63:f3:0d:cc:ab:93:9d:56:c0:bb:92:63:78:dd:f4:95:ca:
2d:1b:e0:43:3a:b0:08:10:e0:7c:20:4b:45:fc:ca:df:09:ec:
2c:89:f6:a5:07:2d:05:69:2b:12:97:a4:eb:b6:5c:2a:15:04:
3d:ac:b3:f0:df:b0:19:39:30:d7:1c:ec:44:52:20:8c:b4:66:
df:b0:3e:4b:42:d7:86:90:8c:fd:57:f4:05:e2:f2:98:67:2e:
b3:26:b4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:50:52 2025 by rpki-client