Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json)
Hash identifier: mfhqaOZim6HKeogoM2L595+4isuMfrNSncwp0ZP7ajE=
Subject key identifier: 38:E9:C6:3D:58:B7:7C:23:24:7D:EB:53:78:97:3C:76:90:F9:56:4A
Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Certificate serial: 01974A436E91772E538DB649F0777C0B092C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
Manifest number: 0482
Signing time: Sat 07 Jun 2025 12:00:22 +0000
Manifest this update: Sat 07 Jun 2025 12:00:22 +0000
Manifest next update: Sun 08 Jun 2025 12:00:22 +0000
Files and hashes: 1: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: zmLqYqR51KE+wDQu35TMmS8d50fsjqPDFrGclKmOwtk=)
2: Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa (hash: 2Xu5Qu43xBBRy4X2ZZ8tBlY4rjWAu0V1llrLDaiQerk=)
3: oaLZxtKD66NwRygInPYpaycKqOc.roa (hash: Ja3SjwoX4eh5IRVh7jPL7K8MqCmfJQ9Q/LWhTt+xawU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:6e:91:77:2e:53:8d:b6:49:f0:77:7c:0b:09:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Validity
Not Before: Jun 7 12:00:22 2025 GMT
Not After : Jun 8 12:00:22 2025 GMT
Subject: CN=38e9c63d58b77c23247deb5378973c7690f9564a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:4f:a6:49:32:86:04:f1:cd:6e:f3:ae:67:
58:7b:ea:bf:72:76:20:35:24:e2:b1:6f:c3:7e:29:
9a:6b:72:6f:60:e3:c1:31:cc:13:24:67:42:d2:fa:
6f:84:f5:5a:66:69:4c:06:38:f2:ea:33:22:f8:d9:
cc:f6:8d:81:4b:91:b5:71:e9:bf:b0:53:a5:e4:63:
0d:37:ed:40:aa:44:24:14:96:39:e4:03:02:72:70:
96:26:bc:c8:c2:38:da:3c:3b:f4:a6:3c:9a:0c:56:
2d:07:a3:f8:8d:60:86:5c:14:39:36:41:bb:b0:bf:
e2:c7:5a:fa:97:12:1d:4d:2c:5a:1c:47:77:18:6e:
5e:26:27:ab:41:88:54:a1:c8:54:96:ff:4f:fb:97:
55:f9:a6:75:db:00:73:c5:08:1d:ef:70:b4:32:b3:
b3:76:17:fa:2c:4c:47:25:21:97:32:af:8c:32:b7:
84:7f:1f:b6:59:0e:1c:84:9c:ee:c1:70:f7:38:2c:
32:c4:88:73:df:ca:d8:a3:79:8b:ee:7f:40:eb:d6:
3f:48:08:94:c0:24:a2:1b:11:20:39:25:f9:ef:32:
50:02:5e:7a:85:2f:92:17:68:89:4f:7d:90:ca:a7:
41:61:47:53:d6:68:75:e9:28:73:f0:58:ea:81:a7:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E9:C6:3D:58:B7:7C:23:24:7D:EB:53:78:97:3C:76:90:F9:56:4A
X509v3 Authority Key Identifier:
keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bb:d6:93:64:9f:44:c9:89:60:71:d5:1f:50:79:84:e9:84:
7b:8b:f4:9e:2c:ae:5f:f3:5a:88:50:88:7b:95:59:09:f2:31:
58:93:d8:dd:59:e8:5b:14:26:74:ac:6b:04:06:75:69:b4:0a:
0a:11:19:2c:67:9a:3f:0f:c5:b5:6f:8b:33:bf:d4:24:d3:5b:
e5:0b:41:ff:0f:6c:dd:50:c8:9f:27:d0:3a:26:f0:33:8a:d2:
0f:1a:db:12:7b:db:5c:a0:5f:af:63:71:2e:22:ff:05:fb:23:
59:2b:9d:aa:07:76:b2:24:ec:51:6d:0c:47:4f:ea:26:8e:09:
87:56:6b:c2:64:08:b6:0f:a0:61:fc:8e:53:b3:74:0a:e5:ad:
d3:d5:21:75:f4:2a:ee:51:37:61:6c:66:b7:81:ae:1e:3e:0a:
6c:a6:50:ec:9b:89:10:ad:4f:4e:45:d5:2b:99:df:55:d0:1f:
50:54:82:c4:c8:15:61:30:1d:3a:0c:1c:89:64:e0:25:2e:5b:
bb:15:e7:54:a5:2f:b9:b6:e5:f5:52:57:de:b8:2e:10:61:3b:
39:78:70:6f:60:0d:dc:69:52:e7:71:51:99:fc:9f:f4:13:cc:
53:ea:b8:25:8b:d2:67:53:5a:9c:c4:a4:8f:bb:2c:46:e5:5c:
9e:1d:86:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:18:15 2025 by rpki-client