Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
File: QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json)
Hash identifier: DBsqDRQ5SF5WjVyAaHKYmSSe5unC2DWS82yU3E5aJMU=
Subject key identifier: 10:B0:F8:F3:52:98:60:97:15:79:5C:49:92:D7:31:A9:4D:C6:28:A4
Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
Certificate issuer: /CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Certificate serial: 0199239F854183769DD31B88AEF7DD649353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
Manifest number: 0A5E
Signing time: Sun 07 Sep 2025 10:01:20 +0000
Manifest this update: Sun 07 Sep 2025 10:01:20 +0000
Manifest next update: Mon 08 Sep 2025 10:01:20 +0000
Files and hashes: 1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: 1b3Z47FCMskI7FCbvSPvwwBge+q1Jm+LD829wmqfX94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:85:41:83:76:9d:d3:1b:88:ae:f7:dd:64:93:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Validity
Not Before: Sep 7 10:01:20 2025 GMT
Not After : Sep 8 10:01:20 2025 GMT
Subject: CN=10b0f8f35298609715795c4992d731a94dc628a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:12:b0:45:65:92:1f:8a:63:96:14:69:f5:7f:
f7:5d:78:9c:4b:06:37:e0:01:27:74:b1:82:d4:59:
f3:ee:b1:b9:11:94:50:2d:40:b7:23:7c:19:1d:9a:
ad:65:ec:87:d3:2a:78:de:51:47:77:6f:9d:64:cf:
1a:3f:12:41:38:92:9a:c7:80:40:b6:38:11:77:5c:
cb:06:56:af:22:37:2f:69:ef:1f:fc:07:68:13:77:
43:9e:ef:de:31:28:99:ae:92:0f:09:fc:5a:f5:da:
fe:e4:93:57:47:2c:cf:fc:c1:d7:af:5e:52:4d:60:
31:b0:3a:30:af:54:04:a5:b2:36:b5:0b:ca:06:e7:
9e:f9:f7:4b:3b:f5:3d:29:87:a9:87:44:c7:5f:54:
7c:7f:35:1f:60:10:17:27:dd:e3:4c:f8:73:60:ee:
46:70:8f:dd:4a:7e:72:f9:5b:99:0e:ee:e4:41:32:
50:ef:cb:24:07:29:31:08:c4:99:05:6f:8c:73:ed:
fd:3a:64:9a:2a:11:73:e6:aa:fd:af:07:7b:8b:ba:
90:08:fd:cb:5a:4b:f7:c7:2c:d3:e7:68:57:3c:d4:
6b:77:cc:d4:91:13:f6:ec:b8:dd:37:41:7b:6f:b1:
d3:16:25:96:82:61:92:70:5a:47:56:0e:91:a2:8d:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B0:F8:F3:52:98:60:97:15:79:5C:49:92:D7:31:A9:4D:C6:28:A4
X509v3 Authority Key Identifier:
keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:77:b2:ed:db:16:e4:b8:01:d8:06:30:bf:a2:fe:8e:e5:6f:
5c:2e:b6:df:77:4e:0a:33:9a:f7:43:a6:65:31:e5:46:43:c8:
b9:62:e8:b2:94:aa:bd:fe:23:5c:fb:d2:3a:bb:14:1b:b3:6e:
d0:1d:08:84:d1:e5:bf:fd:c4:49:df:e3:3f:ab:b9:98:95:55:
3e:5c:8a:ec:f1:c5:41:f3:53:3f:a7:c5:ae:4d:bc:d6:e0:47:
c2:f7:12:5e:81:91:b9:41:3f:a2:79:be:af:f8:d2:61:3b:98:
42:df:79:ac:49:d6:53:97:f9:b5:53:2c:6a:7b:de:ea:bf:67:
d1:b1:86:a0:e3:f8:e7:f1:3a:77:b6:b6:f4:c1:32:2e:28:36:
89:36:8c:06:d0:c7:14:9d:70:88:6e:21:8f:e3:60:9c:fa:9a:
7c:24:4f:08:d3:3e:25:89:c7:c5:a8:59:b3:fd:f8:c3:23:55:
cd:ee:12:16:d3:2f:4b:94:90:6e:b3:78:0d:b0:0f:18:a6:db:
03:03:7f:f5:d4:86:4d:ce:46:db:7e:94:ab:37:3b:d3:a1:86:
a9:3b:e3:e7:94:d6:3c:d6:bf:25:d8:eb:fd:ca:ec:4a:9f:81:
b8:14:9a:d4:95:b8:fe:6e:f0:37:48:40:a2:29:19:da:e6:7d:
1e:f5:66:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn4VBg3ad0xuIrvfdZJNTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYjI5MDA1MzI0NWIxMTJhNThhNmQ1ODk0ZGZkYzdmNjc0
MjJlOGIwHhcNMjUwOTA3MTAwMTIwWhcNMjUwOTA4MTAwMTIwWjAzMTEwLwYDVQQD
EygxMGIwZjhmMzUyOTg2MDk3MTU3OTVjNDk5MmQ3MzFhOTRkYzYyOGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxKwRWWSH4pjlhRp9X/3XXicSwY3
4AEndLGC1Fnz7rG5EZRQLUC3I3wZHZqtZeyH0yp43lFHd2+dZM8aPxJBOJKax4BA
tjgRd1zLBlavIjcvae8f/AdoE3dDnu/eMSiZrpIPCfxa9dr+5JNXRyzP/MHXr15S
TWAxsDowr1QEpbI2tQvKBuee+fdLO/U9KYeph0THX1R8fzUfYBAXJ93jTPhzYO5G
cI/dSn5y+VuZDu7kQTJQ78skBykxCMSZBW+Mc+39OmSaKhFz5qr9rwd7i7qQCP3L
Wkv3xyzT52hXPNRrd8zUkRP27LjdN0F7b7HTFiWWgmGScFpHVg6Roo32vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCw+PNSmGCXFXlcSZLXMalNxiikMB8GA1UdIwQY
MBaAFEGykAUyRbESpYptWJTf3H9nQi6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yYTg4MzktOGQ4Yy00ZTQ3LThlZjQt
OGM3M2FkOWJkMmEwLzEvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8yYTg4MzktOGQ4Yy00ZTQ3LThlZjQtOGM3M2FkOWJkMmEw
LzEvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHey7dsW
5LgB2AYwv6L+juVvXC6233dOCjOa90OmZTHlRkPIuWLospSqvf4jXPvSOrsUG7Nu
0B0IhNHlv/3ESd/jP6u5mJVVPlyK7PHFQfNTP6fFrk281uBHwvcSXoGRuUE/onm+
r/jSYTuYQt95rEnWU5f5tVMsanve6r9n0bGGoOP45/E6d7a29MEyLig2iTaMBtDH
FJ1wiG4hj+NgnPqafCRPCNM+JYnHxahZs/34wyNVze4SFtMvS5SQbrN4DbAPGKbb
AwN/9dSGTc5G236Uqzc706GGqTvj55TWPNa/Jdjr/crsSp+BuBSa1JW4/m7wN0hA
oikZ2uZ9HvVmjA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:13 2025 by rpki-client