Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json)
Hash identifier: 5+PmcxfzBb6+MLotx+LpCPZ/93Y/qay2eQitoRuiQnQ=
Subject key identifier: 57:DE:F5:69:7C:DF:F8:D2:07:8D:AB:B3:72:9F:D1:58:09:87:FD:B4
Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Certificate serial: 01992F34F29B0869F159FB86EEF45D98FF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
Manifest number: 057D
Signing time: Tue 09 Sep 2025 16:00:23 +0000
Manifest this update: Tue 09 Sep 2025 16:00:23 +0000
Manifest next update: Wed 10 Sep 2025 16:00:23 +0000
Files and hashes: 1: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: ngdApzEDtCAI72KQjH/ca9F+1Mv5pcXqyv0YQUlrJgM=)
2: Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa (hash: 2Xu5Qu43xBBRy4X2ZZ8tBlY4rjWAu0V1llrLDaiQerk=)
3: oaLZxtKD66NwRygInPYpaycKqOc.roa (hash: Ja3SjwoX4eh5IRVh7jPL7K8MqCmfJQ9Q/LWhTt+xawU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:34:f2:9b:08:69:f1:59:fb:86:ee:f4:5d:98:ff:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Validity
Not Before: Sep 9 16:00:23 2025 GMT
Not After : Sep 10 16:00:23 2025 GMT
Subject: CN=57def5697cdff8d2078dabb3729fd1580987fdb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dc:6c:c4:ba:51:d8:3b:d1:96:cb:36:2c:73:
53:7f:b6:03:11:ab:25:29:98:70:67:ad:1a:d1:15:
4c:39:d5:db:89:38:93:11:1b:a8:f8:3e:95:6d:cc:
14:42:78:5b:95:40:c5:28:8b:1b:02:f9:ef:a6:85:
69:56:38:e5:fa:94:b9:8e:c6:a1:d3:c5:92:92:ab:
54:10:dd:a5:13:7c:dd:3d:23:82:f5:02:85:b0:c3:
b5:33:bb:81:19:34:1a:f5:55:bd:90:15:d5:d3:b4:
e8:b2:f8:96:2e:cc:9e:0d:b9:78:a5:48:4f:80:98:
be:61:91:d1:e4:9a:23:44:30:ed:d9:eb:79:6f:2b:
5a:10:ec:d4:f0:25:85:41:79:ce:7d:e7:b3:16:83:
e1:50:a4:61:42:0c:17:81:1c:1d:29:70:c2:96:f7:
24:de:3a:cc:78:3f:56:17:b7:9e:16:23:96:e5:6d:
b5:96:a5:02:c1:ab:e9:1d:4b:fb:dd:29:56:ff:8b:
db:c7:87:99:a3:3c:d2:48:31:e1:d8:3f:b7:0a:5e:
38:27:d3:2a:6f:73:52:20:ce:3d:72:db:a2:d3:f6:
97:66:65:70:ee:0a:32:d2:9d:3a:aa:ed:87:dc:5e:
fe:3f:e9:72:06:e5:49:07:50:71:e2:06:7c:0c:a1:
24:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DE:F5:69:7C:DF:F8:D2:07:8D:AB:B3:72:9F:D1:58:09:87:FD:B4
X509v3 Authority Key Identifier:
keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f4:a3:a0:59:cb:2a:55:ac:8e:44:7e:16:65:01:4e:f3:e2:
c5:0a:5f:f2:c4:0d:e0:c3:0b:b9:e1:bc:81:e9:6c:b8:ef:2a:
54:df:6a:33:cd:0a:20:ff:24:7c:03:e3:3a:03:ad:60:3b:b4:
f8:34:7b:54:43:a1:6c:c3:cf:30:49:49:c4:be:5b:62:0c:d5:
21:4e:54:30:d3:d4:5c:3d:b7:2e:26:cc:6f:c2:88:4f:28:b6:
9f:57:bf:e0:e7:0e:b1:84:01:34:2d:2e:f8:8b:9f:b9:d1:9a:
6d:5f:cf:9a:33:3a:38:b8:ed:9c:84:d4:d4:8e:2f:f6:fa:1a:
5e:f4:ce:e2:0b:13:14:85:0b:b6:80:09:0a:4b:dc:7e:7e:cb:
48:8b:aa:f4:56:9b:2b:dc:f8:b9:88:55:9a:1a:00:3f:4e:37:
6a:6f:6d:57:da:4a:6d:04:43:3f:56:57:08:14:e2:c0:b5:99:
b3:5c:f2:02:49:96:ab:70:79:7a:93:92:ba:34:52:cb:0e:96:
d1:3f:1f:fc:41:ec:7f:b6:53:5e:c9:6a:af:ac:78:04:d1:09:
0f:30:1e:11:61:ad:69:e1:f4:c8:18:e5:3d:a2:62:06:8d:d9:
b8:07:ca:61:35:ac:3d:95:bf:18:60:64:9d:50:f8:33:33:ef:
89:8c:e0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:42:34 2025 by rpki-client