Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json)
Hash identifier: zRqP6gwjLT0J6U35LDSEjQZabYtYliooFohoCgsDFbs=
Subject key identifier: 9D:0A:DD:31:A9:AE:77:38:DE:DD:F4:F2:56:C6:5F:2B:6C:FF:3C:BE
Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Certificate serial: 019A1CBFD2343D51C292975789CCF6E3B1C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
Manifest number: 05F8
Signing time: Sat 25 Oct 2025 19:02:04 +0000
Manifest this update: Sat 25 Oct 2025 19:02:04 +0000
Manifest next update: Sun 26 Oct 2025 19:02:04 +0000
Files and hashes: 1: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: SZQEFmmkXkK9+EgLWhJorGQKJbiFaPpolLtTl/i7YAg=)
2: Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa (hash: 2Xu5Qu43xBBRy4X2ZZ8tBlY4rjWAu0V1llrLDaiQerk=)
3: oaLZxtKD66NwRygInPYpaycKqOc.roa (hash: Ja3SjwoX4eh5IRVh7jPL7K8MqCmfJQ9Q/LWhTt+xawU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:d2:34:3d:51:c2:92:97:57:89:cc:f6:e3:b1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Validity
Not Before: Oct 25 19:02:04 2025 GMT
Not After : Oct 26 19:02:04 2025 GMT
Subject: CN=9d0add31a9ae7738deddf4f256c65f2b6cff3cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:31:6e:be:88:05:dd:80:92:5b:b9:a1:20:
4f:5c:78:d3:ea:44:98:fa:f6:09:18:a0:1d:f8:31:
0c:31:a4:d1:b1:e5:eb:ba:6b:7b:7b:3b:57:c7:03:
73:00:a9:96:3c:ef:c6:84:45:42:5a:a4:fe:79:04:
0b:d7:64:19:76:0f:9a:56:09:50:a2:be:26:ff:a8:
a7:c0:6c:12:e2:69:af:d4:2e:ed:68:24:3b:17:51:
e6:32:4d:ec:b3:74:a2:af:b8:d8:f4:86:05:7d:de:
41:59:8a:09:ee:b2:bc:59:0d:14:48:24:8c:b0:72:
e9:29:7c:42:ee:b5:db:b9:7d:23:61:19:6d:34:68:
a8:82:4e:24:1d:c1:22:93:14:7e:85:52:56:7b:b8:
63:a7:48:8a:9e:46:fb:a5:cc:86:03:68:02:d3:ca:
2e:c0:78:2c:47:a2:4d:1a:9b:a5:9c:40:d6:40:ef:
fc:54:73:ae:9a:30:35:0d:e6:b6:db:38:cb:00:09:
05:c7:99:f1:5c:3a:f2:bb:47:a2:0d:08:d4:a2:fd:
2a:1e:50:48:e5:90:6d:37:c7:af:da:e5:31:b8:9d:
21:8f:b4:ac:ad:6b:fe:84:95:15:3a:b3:c2:22:da:
6a:24:16:4e:89:a2:40:6b:a4:90:37:24:41:e2:d0:
a0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0A:DD:31:A9:AE:77:38:DE:DD:F4:F2:56:C6:5F:2B:6C:FF:3C:BE
X509v3 Authority Key Identifier:
keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fc:11:31:74:f8:39:d0:b6:20:17:db:3f:f4:0a:db:99:0e:
64:71:95:bb:69:5d:84:47:58:48:88:24:fd:8a:f6:ab:15:f3:
6e:03:0d:e4:e2:0a:ba:56:f8:5a:e5:8f:c6:b8:61:67:88:a7:
c4:ba:0d:bf:d4:69:99:58:4d:56:03:79:4b:07:aa:20:9b:32:
a3:c3:3b:f4:0b:38:a7:ae:80:0f:f2:a0:57:20:6d:79:ff:29:
a5:de:dc:78:2a:48:96:76:97:27:63:89:69:82:ef:f0:fa:de:
fa:13:d5:5b:7a:ba:e3:88:ca:60:72:73:ff:80:f1:c1:9d:86:
58:1b:67:c5:c1:e0:1e:c3:0e:79:28:32:ee:da:6e:36:42:4c:
a6:ac:7d:af:a4:2b:12:75:8f:62:c6:49:82:bf:9a:15:59:b5:
58:1e:b7:b9:50:ee:ad:9f:d0:52:eb:60:b8:3c:24:92:6e:70:
df:ae:63:fc:69:02:3c:75:d0:e1:2e:c9:73:8c:36:8a:99:dd:
6b:5e:25:36:9e:16:40:1b:f1:26:a1:eb:2c:1d:dc:41:89:17:
09:5b:d7:67:f1:82:91:be:c8:ad:a2:71:64:2c:41:15:87:ed:
90:0f:02:73:62:a8:31:ce:c4:42:73:bc:1f:7d:04:2e:f3:e7:
d0:91:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 23:07:16 2025 by rpki-client