
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
File: Qbib03Ns5PAIRzll_a5AdFZ82gM.mft (raw, json)
Hash identifier: blUDaU9+zN0FUAZnMZ3QB/oS350MZqWX9PlWWqKk63M=
Subject key identifier: F2:8C:EC:B4:B3:51:70:16:D7:2E:0E:F9:46:B0:E3:30:5E:67:14:68
Authority key identifier: 41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03
Certificate issuer: /CN=41b89bd3736ce4f008473965fdae4074567cda03
Certificate serial: 019923A07FC66B7ABF240B3F31CB104D25B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
Manifest number: 0BE9
Signing time: Sun 07 Sep 2025 10:02:25 +0000
Manifest this update: Sun 07 Sep 2025 10:02:25 +0000
Manifest next update: Mon 08 Sep 2025 10:02:25 +0000
Files and hashes: 1: Qbib03Ns5PAIRzll_a5AdFZ82gM.crl (hash: BDiwaU2+tAXbVi5WH1lKM4RPhwZqaQ38gT+FoE5dlIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:7f:c6:6b:7a:bf:24:0b:3f:31:cb:10:4d:25:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b89bd3736ce4f008473965fdae4074567cda03
Validity
Not Before: Sep 7 10:02:25 2025 GMT
Not After : Sep 8 10:02:25 2025 GMT
Subject: CN=f28cecb4b3517016d72e0ef946b0e3305e671468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:b5:9f:07:bc:6b:36:05:c3:ee:a7:2e:22:
4b:c4:04:27:3a:01:26:b2:27:57:a1:d6:16:de:94:
f5:23:b3:6c:bf:e9:48:ae:1a:fa:6e:ed:d7:2e:98:
71:9d:03:d2:2a:da:63:40:32:df:78:1f:ef:b7:db:
9c:fc:e7:92:9e:60:ae:33:11:e5:47:d3:94:96:1c:
2b:8a:08:d4:51:4f:19:64:7e:1d:a0:7a:4c:02:2a:
10:f0:b2:9c:e8:83:88:b3:9a:7a:16:80:ce:30:01:
bc:6c:ac:11:a0:03:14:ed:08:b6:bd:b7:cd:37:12:
8b:2b:eb:77:7f:47:e3:a4:07:9a:87:29:0d:d1:b4:
11:a6:be:21:a7:eb:c5:04:8d:49:c0:b1:82:60:3d:
fa:d5:77:bf:57:d1:cd:13:db:64:2d:c7:6c:ce:68:
fd:97:57:57:23:f2:c4:27:a0:67:98:f4:db:08:2a:
ea:11:e3:13:01:12:c0:9c:b4:03:5a:ae:a5:87:31:
15:4d:16:6f:ce:f9:4b:84:82:b2:b1:64:7f:41:29:
fd:93:02:f5:86:b1:74:06:99:ab:3e:c0:2b:63:46:
1c:78:b0:62:a5:14:ee:91:7d:18:ff:dc:7e:3c:db:
65:a7:b9:b2:af:cb:81:c3:40:8b:b5:72:ea:b7:be:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8C:EC:B4:B3:51:70:16:D7:2E:0E:F9:46:B0:E3:30:5E:67:14:68
X509v3 Authority Key Identifier:
keyid:41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:d5:85:d6:90:21:16:2a:76:2a:61:76:4c:22:a2:f5:e9:b9:
f4:9e:d1:a9:80:7c:7a:e2:ce:b7:0f:f6:70:ce:67:91:ce:1d:
a3:4c:7d:f6:4f:8c:65:27:09:85:10:27:7e:d0:68:69:d8:5c:
84:64:39:57:4a:cf:3c:61:b6:0f:f2:37:7e:7f:4a:6d:43:75:
15:74:4d:07:35:ef:1f:cb:22:a3:9a:60:24:e7:42:11:97:64:
89:98:02:06:ac:2b:16:f4:e0:c4:3e:de:78:db:12:e3:48:04:
ea:f4:37:be:8b:b3:1e:6f:98:fa:ad:c8:66:73:86:82:2d:62:
6c:6f:7d:e7:13:f1:0c:ac:e0:6e:2c:39:c9:1c:93:c9:81:d9:
d2:2a:89:c5:03:99:27:dd:03:c9:b8:05:47:79:48:f6:df:38:
9d:e2:f5:16:3f:99:17:51:7e:84:c0:93:47:61:a6:81:de:91:
c6:5c:0b:98:51:e9:34:93:8f:38:b6:d6:90:80:20:b2:bb:45:
5e:e5:bb:3f:c2:d3:d4:d6:d1:2f:14:68:98:b1:c7:98:01:8a:
35:17:60:96:2d:d1:92:17:a9:ec:0b:6f:35:f5:39:21:bb:d3:
9d:24:41:66:72:31:f7:c6:b4:a9:88:83:9a:ea:9d:1a:d1:19:
a8:d1:49:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:38 2025 by rpki-client