Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
File: QCAZkETFTCN5A_ZW-DsmQMLR30U.mft (raw, json)
Hash identifier: Y8+zC7YR37MYkVzJnFUIyvrJvh2idPgWys9PdmO30pI=
Subject key identifier: 31:D5:E5:E0:F7:76:81:83:86:35:C7:EC:09:06:2C:17:2D:EB:84:F4
Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
Certificate issuer: /CN=4020199044c54c237903f656f83b2640c2d1df45
Certificate serial: 019A2B1F3B63C14579EA268A29022A9E2EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
Manifest number: 0B55
Signing time: Tue 28 Oct 2025 14:00:58 +0000
Manifest this update: Tue 28 Oct 2025 14:00:58 +0000
Manifest next update: Wed 29 Oct 2025 14:00:58 +0000
Files and hashes: 1: QCAZkETFTCN5A_ZW-DsmQMLR30U.crl (hash: Ep7V+mRMpDIi2mm675d27qMevaho/nDgMknm/Td2TeY=)
2: i1vQfq5K6A-H06YMbg-F_fjtfl4.roa (hash: +8kYxsIrdCv4MUOM8YLp4u35KK9tvU6LHvc0dzsNKRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1f:3b:63:c1:45:79:ea:26:8a:29:02:2a:9e:2e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45
Validity
Not Before: Oct 28 14:00:58 2025 GMT
Not After : Oct 29 14:00:58 2025 GMT
Subject: CN=31d5e5e0f77681838635c7ec09062c172deb84f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:cb:f1:cc:97:af:27:80:2d:8b:a3:99:0f:
b0:13:43:f6:79:96:03:76:2f:65:95:c6:44:0d:fc:
79:71:b4:db:ca:15:ee:3c:e1:c4:62:de:eb:63:81:
58:9c:3a:c4:4b:f3:d5:7b:ca:5a:2f:69:af:95:94:
b6:6e:00:99:0b:60:42:d3:ab:9d:b8:ae:a0:7c:9a:
ca:7c:c9:78:10:9e:a5:50:e0:83:76:f3:0f:59:da:
e1:69:cf:0f:e1:39:c6:0d:91:dc:f0:cd:4f:25:70:
ad:de:90:32:e8:f8:91:3a:70:48:4b:fe:77:fe:5e:
96:99:a9:ee:f9:dd:17:4e:a5:dc:c4:d0:29:29:7d:
ba:02:a4:c1:09:02:9d:ff:39:3c:59:29:12:1d:80:
97:6f:e1:b9:19:5b:f3:0d:f1:17:3c:0f:23:56:24:
6c:93:9e:07:cd:b3:0b:dc:26:94:07:91:76:b1:48:
1a:ce:e9:9b:94:4b:4e:6e:3d:06:a5:56:05:cb:7e:
18:2f:36:55:b2:27:98:c3:91:e8:70:51:e7:c6:bf:
5c:77:0d:bd:5f:be:b1:19:52:06:3b:0c:b1:22:62:
b5:4a:9b:bc:b6:42:5f:49:23:9f:77:25:11:8d:18:
33:03:d4:28:2e:9e:24:87:02:79:55:b9:27:c6:c3:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D5:E5:E0:F7:76:81:83:86:35:C7:EC:09:06:2C:17:2D:EB:84:F4
X509v3 Authority Key Identifier:
keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3b:d8:83:d6:a5:5f:27:25:6d:09:47:c8:08:5c:7c:80:1a:
14:fd:41:6e:12:8c:d2:c3:b7:a6:13:12:2b:81:7c:5b:93:22:
a8:7a:ea:45:44:dd:14:b2:e5:70:8f:61:e8:0b:29:63:53:3c:
b9:b8:95:66:57:35:97:2c:23:2b:16:f6:a1:ba:8c:2c:1a:e0:
46:04:fc:f9:84:bc:a8:ba:98:e5:69:51:58:cd:3c:a5:bf:2d:
ac:32:f3:04:60:4e:e4:a3:9a:39:e8:a8:b0:78:24:4e:f2:66:
ff:ed:dd:d5:6d:78:fb:95:dd:31:a8:05:8c:e2:ee:a8:8b:12:
cc:bd:e7:54:5e:60:d1:a3:09:86:52:6b:0c:ad:3a:8a:67:b6:
8a:3f:18:a5:a6:39:bb:17:df:7d:e2:58:97:48:65:14:fd:b2:
05:39:44:e8:b0:38:73:3c:eb:a8:78:b8:8c:ed:e0:ab:96:3f:
d2:8f:3d:bf:a5:2f:ac:32:a9:66:35:d4:74:c0:90:b8:72:ea:
7c:e3:8d:9e:e6:fe:04:ac:9f:47:07:1a:4f:dc:86:02:ff:52:
e6:a8:52:5e:2b:d4:93:b8:79:5e:84:2a:c1:d7:c1:d7:83:2c:
39:28:8d:a9:bf:61:8b:6e:a8:ef:b6:27:0a:15:b3:10:80:45:
bc:4b:ae:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:01:41 2025 by rpki-client