Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
File: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft (raw, json)
Hash identifier: mdlwU4ia1VTdQ2hw2zvPu1CZ0QkUPy5Loztc3J+N5Ls=
Subject key identifier: 2E:C3:4A:B1:E0:D0:73:D9:F3:80:0B:E3:19:B6:78:BB:27:D7:10:3A
Authority key identifier: AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25
Certificate issuer: /CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
Certificate serial: 019A706E09A0FBC157CBBB3EAA23A427CF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
Manifest number: 168E
Signing time: Tue 11 Nov 2025 01:00:50 +0000
Manifest this update: Tue 11 Nov 2025 01:00:50 +0000
Manifest next update: Wed 12 Nov 2025 01:00:50 +0000
Files and hashes: 1: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl (hash: PhubwSo620P7npgMpPILtA+4Qo9rXa4v+zpwCk97lv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:09:a0:fb:c1:57:cb:bb:3e:aa:23:a4:27:cf:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
Validity
Not Before: Nov 11 01:00:50 2025 GMT
Not After : Nov 12 01:00:50 2025 GMT
Subject: CN=2ec34ab1e0d073d9f3800be319b678bb27d7103a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d9:e0:75:24:72:cf:c9:ec:c1:98:4e:14:b6:
3a:99:21:87:c9:3a:bd:2f:45:32:81:2f:2f:31:9b:
f7:f8:9e:63:33:95:02:38:6c:f2:0a:6b:78:64:2d:
f2:11:51:5f:44:58:c3:c6:f4:07:d4:b4:e9:06:bb:
c4:05:8c:c0:31:71:a0:c7:ba:89:86:6d:10:9b:ab:
2d:03:a5:c0:79:36:54:80:a7:9c:d3:13:0e:5b:71:
ea:c3:a8:ff:ec:54:f8:0f:dd:61:db:dd:42:16:cd:
e3:54:a2:50:19:36:ec:a3:54:94:9e:f6:b2:50:03:
a4:78:3b:25:33:25:20:62:88:2b:cb:1a:19:4b:3b:
76:81:8c:84:a7:b2:e8:92:13:6c:12:e7:2c:58:b9:
b4:47:5e:95:76:14:cb:0e:0b:db:7e:11:aa:18:c0:
5f:89:e0:21:fc:0d:f3:e7:8e:98:65:e8:11:4e:dd:
c4:89:57:34:29:75:f0:84:41:7c:21:0f:53:db:f7:
99:fd:ef:a6:a8:b6:c5:a3:fe:43:44:39:75:61:c3:
b7:e0:fc:0b:b7:b2:7b:e9:4e:7c:74:a7:76:d7:69:
41:9c:c6:ed:63:84:19:82:a8:10:b1:77:3d:95:17:
9a:c4:b6:26:8b:96:ff:ff:d5:29:55:ae:17:6c:67:
5f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C3:4A:B1:E0:D0:73:D9:F3:80:0B:E3:19:B6:78:BB:27:D7:10:3A
X509v3 Authority Key Identifier:
keyid:AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b6:dd:a3:4a:a8:e8:c8:1b:7c:b3:17:7c:19:b8:1c:5f:2e:
63:c1:e9:9c:4f:74:ba:6c:8c:8e:c8:07:77:db:49:3e:e0:c6:
5b:c7:ec:e5:0c:ca:d9:f6:44:8a:b9:7c:5e:5c:5e:65:5b:1f:
31:65:75:97:ba:48:fb:c6:0c:d1:f9:67:87:8a:fc:42:1e:41:
e5:85:a2:0f:56:a8:4d:00:7f:49:8f:a7:2c:71:93:48:47:5e:
f0:3c:23:45:ea:7d:1f:5d:cd:d4:f6:50:b1:f3:af:39:a8:e8:
3a:39:a1:54:f6:d4:87:06:ad:89:2f:7a:74:97:da:ef:a7:6a:
25:d9:34:ec:29:e6:04:b7:25:e7:99:87:57:ed:84:40:07:6f:
ba:49:81:fb:d0:37:83:d4:a2:6e:0c:a4:36:60:92:e4:5e:9a:
a5:5b:54:0f:4a:cb:41:83:80:00:94:d0:a6:e4:7a:bc:48:27:
c4:53:fc:58:2b:e9:ee:e5:1b:58:aa:d7:64:fd:84:c4:9a:6f:
6f:4d:22:72:e2:40:41:67:21:15:e9:fd:92:41:04:86:1a:59:
39:14:34:4c:ba:18:c5:48:2c:e9:04:1b:7a:9d:1f:f3:8f:75:
9c:93:d6:bd:67:22:84:74:c5:34:b3:0d:ff:d8:ad:a9:14:9f:
23:94:b9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:21 2025 by rpki-client