Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
File: QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json)
Hash identifier: c6V+tcYEs1wYe33hI4x4fhvIFK5GHnTVTKfag5MnBuU=
Subject key identifier: 54:10:A2:9C:9A:37:38:B0:4D:FB:97:7C:4F:EA:73:24:D5:95:A5:09
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial: 019A285489B75D21A860C00AABA769A7E462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
Manifest number: 0C8E
Signing time: Tue 28 Oct 2025 01:00:20 +0000
Manifest this update: Tue 28 Oct 2025 01:00:20 +0000
Manifest next update: Wed 29 Oct 2025 01:00:20 +0000
Files and hashes: 1: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: n0/n0pD1P8oXv/SXQpYM/k3o/CdanpAsz47mNE96Si4=)
2: fB_8Kj8FVwA_pRirxgUk8V0Sdls.roa (hash: goBjhg/MD5RTfp4bLaJFULnPwSaD80DrHVFmGJjDPXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:54:89:b7:5d:21:a8:60:c0:0a:ab:a7:69:a7:e4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Validity
Not Before: Oct 28 01:00:20 2025 GMT
Not After : Oct 29 01:00:20 2025 GMT
Subject: CN=5410a29c9a3738b04dfb977c4fea7324d595a509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:48:82:ee:1f:6a:8a:39:5b:94:82:2c:d9:f4:
96:47:5c:28:1e:2e:19:e3:f1:6a:53:6e:21:99:64:
71:ee:b2:d4:4c:cd:11:f8:63:24:de:b1:0b:30:9c:
8f:71:4a:80:dd:b5:6d:a7:bc:ed:7a:b8:10:36:ef:
54:f1:71:2e:db:c3:f4:9d:7f:5f:57:7e:cd:b7:b3:
cd:91:60:c5:74:fd:ef:33:6d:0a:da:59:81:01:d1:
6e:49:f0:9c:3d:0f:50:ac:17:1a:ce:01:0d:27:66:
57:e0:26:c7:f6:98:08:62:82:73:1f:9f:63:ab:ad:
be:aa:aa:ef:83:8e:b0:ff:ba:a1:c3:fe:9f:be:7a:
69:b7:e3:bd:ce:a0:1f:32:71:96:a4:62:d0:8e:df:
a3:72:95:0f:74:07:2f:1e:1c:a6:af:5c:2d:73:0d:
65:06:5c:8a:83:5f:c7:c2:69:19:1e:5a:71:04:10:
52:38:cf:4c:85:e8:67:c5:55:77:6d:0d:13:6d:db:
3a:dc:2e:7a:75:fb:e1:12:a4:d4:70:f9:78:d3:d9:
d5:1b:fe:2b:9c:cc:87:1c:86:03:fd:2d:0d:13:af:
cb:2a:36:e6:7f:e4:13:18:27:20:08:df:1c:59:b5:
45:5a:d6:b4:e0:97:58:e0:15:2a:7f:f8:77:d9:8b:
31:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:10:A2:9C:9A:37:38:B0:4D:FB:97:7C:4F:EA:73:24:D5:95:A5:09
X509v3 Authority Key Identifier:
keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:13:00:df:4f:23:ae:85:f4:33:56:6b:67:b5:24:7e:7d:73:
31:db:9e:cb:fe:1b:ef:66:84:6f:4d:9a:d8:40:9f:36:ca:4d:
7c:ee:c7:e6:1d:8f:b1:e0:6f:89:71:b0:78:24:29:9a:0c:50:
90:a5:c3:57:41:f1:bb:6e:10:30:9a:ab:13:94:3b:73:d8:0a:
aa:8e:24:e6:e5:b6:64:39:87:22:1e:aa:67:cd:27:f8:99:7a:
38:28:a1:4f:e4:5c:7e:9b:bb:5a:cc:3b:bd:10:ca:16:f3:24:
52:06:da:ad:95:22:61:ef:bc:97:d1:55:93:e4:79:33:fc:cb:
fa:98:c6:af:37:9e:41:b9:1e:be:f6:39:f6:d5:77:3f:df:bc:
d2:05:ad:aa:44:45:dd:02:51:bb:e4:98:fc:3e:37:11:73:39:
d1:af:0e:c4:67:c5:08:34:74:44:14:25:45:0a:c2:2d:cf:6a:
41:12:66:71:ba:e0:fb:2b:df:44:b3:b1:40:4d:07:cf:f6:e5:
98:1f:be:9e:af:05:90:b5:94:45:08:04:59:82:34:89:64:1b:
ee:3a:48:96:0e:c0:e5:d4:34:0d:bc:1f:27:77:73:78:cf:93:
b6:0a:42:1f:0d:ec:0c:c9:49:bf:5b:bb:34:5d:dd:66:83:91:
74:58:6d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:58:24 2025 by rpki-client