Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
File: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft (raw, json)
Hash identifier: TEDLdZrqrCvr6moeEaRNRFGHW2DblOr9PT5gfBViQDI=
Subject key identifier: 63:06:08:6D:73:31:97:76:CB:05:C2:2B:00:1F:E2:FD:A1:15:83:01
Authority key identifier: 43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
Certificate issuer: /CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Certificate serial: 019A270B536A87D22B9B4F39A596702C7C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
Manifest number: 16F4
Signing time: Mon 27 Oct 2025 19:00:44 +0000
Manifest this update: Mon 27 Oct 2025 19:00:44 +0000
Manifest next update: Tue 28 Oct 2025 19:00:44 +0000
Files and hashes: 1: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl (hash: hm0fijqVMuAwrwna9+FeRIaeW0gHcTfMeT89NpkBwpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:0b:53:6a:87:d2:2b:9b:4f:39:a5:96:70:2c:7c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Validity
Not Before: Oct 27 19:00:44 2025 GMT
Not After : Oct 28 19:00:44 2025 GMT
Subject: CN=6306086d73319776cb05c22b001fe2fda1158301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e7:5d:9a:3b:60:b0:95:12:1f:b0:5d:e3:9f:
aa:c1:97:ff:53:12:0e:f6:44:30:9d:4e:cc:9e:45:
5f:ab:58:16:e8:a2:60:e3:1b:72:93:82:a9:0c:d2:
1f:d1:18:cd:22:ab:8f:fb:2e:bc:52:45:03:a4:54:
ce:ed:e1:ff:7c:d1:6d:cd:c5:22:ce:ad:11:86:ad:
f9:10:25:c2:41:2e:e6:ce:4c:10:ad:10:f1:55:96:
72:68:1a:5d:9e:86:ec:8f:2f:7a:79:53:1f:09:c1:
ab:b6:b1:ea:8f:2f:55:02:42:dd:0f:ed:00:bb:f1:
1e:23:79:c7:da:be:2c:14:ad:fd:24:34:67:b2:d9:
6a:b6:18:22:eb:cf:85:f2:7e:d4:95:ee:ba:dd:e5:
dc:50:19:f4:ae:7c:d5:24:80:ce:b1:6e:f4:65:62:
16:c2:cc:89:79:08:10:58:3d:c1:b8:c0:94:5e:9c:
6a:ad:76:67:2c:65:11:83:79:db:2b:f1:da:48:75:
67:c1:f7:5e:0b:4c:d0:d2:fd:ef:15:f3:6c:1b:9a:
15:71:74:cc:35:ea:46:2d:13:82:73:18:76:7f:32:
02:ff:0f:93:ab:b6:0e:b0:0a:7f:b1:62:75:1d:49:
de:c2:fc:86:1b:4f:75:aa:fa:2b:a5:11:c1:04:52:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:06:08:6D:73:31:97:76:CB:05:C2:2B:00:1F:E2:FD:A1:15:83:01
X509v3 Authority Key Identifier:
keyid:43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c5:b1:fe:0f:91:38:bb:13:d4:a3:72:7a:64:db:9a:90:b6:
f1:bd:51:6e:f5:b6:02:18:04:d0:cd:86:84:bd:f4:98:98:e0:
14:20:c6:00:14:14:ee:4b:24:9a:cf:b3:fe:c7:17:ee:36:9b:
e3:66:8a:be:b3:58:46:e3:dc:28:d1:9b:14:8f:5e:0b:0f:e7:
8e:dc:49:7e:e7:4b:86:f2:4d:88:65:12:c1:fa:1c:1d:3a:bb:
94:62:15:2b:ea:50:16:02:f1:57:60:60:9d:f6:4a:61:b1:6c:
52:b3:f9:f7:c8:06:8c:80:6d:78:0a:66:0c:00:a2:db:e6:04:
9c:78:cd:3f:d9:13:a2:55:3f:c2:c0:a4:b3:b2:5b:b5:e8:cd:
16:46:bd:12:dc:42:cd:6b:e5:70:c3:cb:c4:de:08:a9:7c:9b:
6b:47:5f:06:37:2c:7a:24:d2:aa:fd:30:88:fb:c2:9c:65:c4:
b0:f7:16:13:17:52:96:aa:9f:e6:27:fd:e8:37:55:8a:a2:4a:
55:20:28:74:07:39:e5:43:d1:dc:2c:8b:85:02:f9:8c:19:e4:
f0:68:34:a1:c2:b5:3f:2d:f9:50:bc:48:1a:e9:14:66:23:b3:
51:1f:f7:93:6c:1e:c5:f3:28:4c:93:f8:1d:c5:54:b3:b7:13:
58:bc:b7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:38:28 2025 by rpki-client