Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
File: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft (raw, json)
Hash identifier: InZ/IRxOo8Q2JxyGWs4EQd8GyKwPHZe9GIV+PkxZJ+w=
Subject key identifier: 88:98:B3:1C:3D:1D:50:47:22:80:02:EC:79:75:DD:F6:FD:4D:2E:97
Authority key identifier: 41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
Certificate issuer: /CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Certificate serial: 019A71B814AB9A0A4B867928C63A06667EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
Manifest number: 0D2E
Signing time: Tue 11 Nov 2025 07:01:20 +0000
Manifest this update: Tue 11 Nov 2025 07:01:20 +0000
Manifest next update: Wed 12 Nov 2025 07:01:20 +0000
Files and hashes: 1: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl (hash: QxfsKpYwHLHGmMyVLk2cr3bkxpGl9q9fofjNbu3VIzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:14:ab:9a:0a:4b:86:79:28:c6:3a:06:66:7e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Validity
Not Before: Nov 11 07:01:20 2025 GMT
Not After : Nov 12 07:01:20 2025 GMT
Subject: CN=8898b31c3d1d5047228002ec7975ddf6fd4d2e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6d:3c:20:c9:fb:56:87:df:63:f1:be:a7:af:
5d:74:b0:c0:d9:40:0e:81:5d:50:9a:3b:b7:06:21:
16:e0:b3:b1:2f:35:d8:48:81:5f:2f:59:db:89:0f:
5d:28:23:08:64:69:b5:44:e5:02:a9:00:61:36:af:
2e:90:da:5d:49:3b:b6:84:3f:91:7d:3a:34:b3:af:
03:f4:79:d1:9b:4e:7b:93:a4:93:41:78:e9:50:c1:
b2:d9:8f:55:3f:d7:68:b0:15:2b:ff:40:81:70:34:
58:61:f1:e5:83:a4:a9:85:2e:02:f5:bb:75:ec:9f:
4e:5e:9f:3a:dc:bd:46:d2:d4:2a:ec:f8:13:5f:91:
a2:49:97:e5:24:64:2d:27:67:8f:a1:e3:7a:86:7a:
b6:9f:15:61:88:4a:a2:a1:7f:14:38:b5:5b:74:cb:
a4:5d:b4:6f:4c:97:fe:bd:db:60:d9:fe:63:9f:28:
33:a0:08:bd:54:58:df:81:d4:20:5f:93:15:59:a5:
11:dd:f8:09:7e:86:f9:69:80:79:19:37:4f:b7:9e:
54:dc:78:98:22:13:4c:88:b0:76:68:30:c8:53:e7:
55:f7:d8:c6:d9:0b:70:95:c8:a0:ef:e5:05:e6:99:
ff:25:d9:5c:c6:62:f2:49:d0:72:b8:67:0b:a5:9a:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:98:B3:1C:3D:1D:50:47:22:80:02:EC:79:75:DD:F6:FD:4D:2E:97
X509v3 Authority Key Identifier:
keyid:41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:21:a3:d9:19:5a:fb:a6:cf:cd:bb:ae:04:20:91:f7:0b:ae:
d7:48:3b:8c:7c:da:32:57:8b:c8:85:d4:4a:2a:64:1b:43:02:
42:c1:e7:bf:5a:8d:25:f8:8a:0b:19:e7:08:7e:19:a7:2c:29:
20:e0:44:c3:bb:01:ed:eb:2f:f6:59:5f:05:f7:5d:17:ab:de:
9d:8c:17:82:96:db:8b:05:c2:81:1d:82:f6:2c:19:d6:33:2c:
7f:09:91:35:36:98:17:6a:93:ba:54:91:98:69:3b:51:14:ee:
38:c3:7d:cd:e2:55:2f:ee:a7:ea:c4:8b:28:65:1f:1f:67:d6:
75:5f:fb:87:3f:9d:7a:05:44:b2:1f:0d:9b:d0:e9:af:0b:7e:
c8:45:85:d5:82:1d:1c:5b:82:50:d8:78:2b:9a:3a:75:11:3a:
00:b8:34:ec:91:28:95:3f:7b:d9:b8:99:8e:74:9a:51:b2:f5:
c1:7f:4a:f6:60:90:91:42:6e:00:03:ae:31:bd:54:2b:3d:f2:
27:d3:cd:2c:09:56:6b:73:c5:d1:e0:f5:a4:d8:49:1e:9c:e9:
df:7d:2f:3f:86:68:de:48:00:5c:a3:b0:17:6e:38:c9:57:06:
e3:49:18:03:ff:c3:e0:c1:3a:7d:aa:8e:42:3c:3a:b6:7f:53:
6d:e0:00:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:10 2025 by rpki-client