Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
File: QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json)
Hash identifier: izWON3awfFjTGOZsVnwbjOj7Qn/QkoKr8D+OyCNyXZ0=
Subject key identifier: AE:3A:5A:8B:F2:01:F7:37:3D:9B:06:27:07:23:D9:23:75:62:9C:6C
Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
Certificate issuer: /CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Certificate serial: 019A71B7CC78672F65F499F989109A3F0454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
Manifest number: 0B0B
Signing time: Tue 11 Nov 2025 07:01:01 +0000
Manifest this update: Tue 11 Nov 2025 07:01:01 +0000
Manifest next update: Wed 12 Nov 2025 07:01:01 +0000
Files and hashes: 1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: IIV2wiMCOkGe/4Ha0zNOUJzj6hEeI2lkgdR8S0E62ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:cc:78:67:2f:65:f4:99:f9:89:10:9a:3f:04:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Validity
Not Before: Nov 11 07:01:01 2025 GMT
Not After : Nov 12 07:01:01 2025 GMT
Subject: CN=ae3a5a8bf201f7373d9b06270723d92375629c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:94:28:7a:75:2d:d2:03:13:78:47:86:12:
ef:4b:93:b8:35:4a:c0:9f:6e:ea:da:3b:75:58:e1:
a9:11:d3:39:d8:f7:12:3f:30:22:b9:cd:41:03:07:
2e:01:b3:91:13:f4:8c:a9:1d:78:29:c0:f4:d6:dd:
d7:75:e1:6b:d4:1a:79:58:9b:05:ac:ed:53:17:cf:
63:fd:ac:68:cb:0b:05:47:c0:3a:02:b0:76:4e:f0:
dd:74:87:d4:33:a0:71:2f:99:85:d7:ad:3e:74:9c:
fa:bf:21:8e:3f:3b:d8:7e:d4:b2:d8:b5:3b:ce:cf:
dc:d8:6a:15:4f:11:e4:be:22:aa:93:4d:ec:84:8f:
08:21:bd:10:eb:79:84:fa:a7:9f:0a:5f:95:a4:1e:
37:7d:79:73:ca:dd:44:eb:69:ee:b2:55:3a:c1:2d:
e4:b3:6d:29:d7:68:59:0a:5e:d4:f4:8b:f7:6c:98:
64:92:0a:77:c1:51:5d:4c:ac:5d:4f:a2:15:eb:c7:
fa:5e:fa:b6:a3:67:e9:b9:28:53:bb:00:b3:b7:50:
b7:c1:37:c7:91:45:42:0a:59:4f:10:cb:0b:09:e0:
f6:f9:aa:0c:ea:8e:6a:76:93:12:70:59:94:d5:d3:
39:19:3b:fc:89:fd:9e:06:0b:09:1e:4d:32:61:39:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3A:5A:8B:F2:01:F7:37:3D:9B:06:27:07:23:D9:23:75:62:9C:6C
X509v3 Authority Key Identifier:
keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0c:ab:db:f9:1f:62:19:ef:e1:af:24:86:3a:9b:88:97:b5:
e4:6e:24:6b:98:9d:fe:b6:3a:ac:01:df:13:99:c0:08:f3:48:
e0:ef:3c:c8:db:91:bb:2b:5e:6c:f0:a1:e6:38:5b:63:4a:db:
3d:86:94:3f:f0:39:14:72:b9:81:ef:52:9c:3f:86:d5:67:a6:
74:e0:5b:5b:35:39:c4:db:70:14:c1:4c:66:39:33:b7:92:d1:
d0:99:47:51:3c:c6:c5:7c:6d:c1:3d:a6:e4:4b:28:c8:e1:11:
13:df:73:5c:ee:0d:4c:e4:55:db:eb:7e:66:dd:e5:cd:fc:5f:
b8:1a:70:e3:44:dd:1c:a0:88:23:d6:82:f0:7d:d4:e6:41:fb:
37:99:21:dd:7c:8a:ed:3d:42:d9:61:ec:ea:b6:b9:f0:da:43:
b2:2a:f2:20:b5:47:6e:75:5f:9b:ce:29:79:d0:a7:a3:2c:44:
0e:1e:c1:7b:ea:d1:c9:c9:5f:b3:d0:5a:3c:98:82:ee:0f:5a:
45:84:a9:c8:03:73:68:53:3c:c9:51:37:ef:bf:9e:cb:29:1f:
31:f9:fe:6d:f1:3d:10:16:b1:83:84:5c:8b:c9:39:eb:0d:8a:
79:b8:17:85:51:a8:53:fc:6f:d6:3a:b3:7b:d5:76:6c:ef:9d:
40:9e:58:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:01 2025 by rpki-client