Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
File: QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json)
Hash identifier: 6HnkkYuHfTlhbwIELqeDKyR1inPPkWJHtY8zfGMFE00=
Subject key identifier: B2:A4:DB:30:CF:05:CB:72:ED:AA:F3:C9:3C:E4:3B:E9:B1:91:88:FD
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial: 0199FDDA18AF17B8DB02FD87362152E7AAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
Manifest number: 0C78
Signing time: Sun 19 Oct 2025 19:02:32 +0000
Manifest this update: Sun 19 Oct 2025 19:02:32 +0000
Manifest next update: Mon 20 Oct 2025 19:02:32 +0000
Files and hashes: 1: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: IkEkhKXTzigsZf3hgeSn/jbUWF6q7SmrJcsl0wvvpbk=)
2: fB_8Kj8FVwA_pRirxgUk8V0Sdls.roa (hash: goBjhg/MD5RTfp4bLaJFULnPwSaD80DrHVFmGJjDPXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:18:af:17:b8:db:02:fd:87:36:21:52:e7:aa:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Validity
Not Before: Oct 19 19:02:32 2025 GMT
Not After : Oct 20 19:02:32 2025 GMT
Subject: CN=b2a4db30cf05cb72edaaf3c93ce43be9b19188fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:ee:d2:1f:76:38:ee:81:df:f0:9f:b3:37:
55:ac:c8:2b:7a:37:25:09:55:ba:1e:a0:e9:de:da:
79:8a:ac:78:07:30:e4:5d:e7:1c:82:64:8e:91:c7:
b6:e8:7b:ba:9a:cf:95:11:5f:4b:28:24:80:6a:c9:
9a:e5:eb:c1:4a:70:39:c8:ff:58:36:86:71:cd:5f:
fa:72:b3:17:05:23:66:ba:06:c6:7d:5d:cd:44:39:
82:86:81:b5:89:53:32:e1:5e:87:d9:a8:22:a3:f2:
76:16:e0:58:7e:39:ec:1f:d9:5f:69:d8:fb:1d:db:
4e:23:c6:4d:31:54:10:21:ee:63:35:4d:07:fe:c7:
35:42:a4:6e:12:04:18:a6:94:20:cf:25:77:d8:d3:
34:c9:34:72:61:09:76:dc:36:d8:f6:d7:18:e0:c1:
7b:ed:31:79:03:f6:28:49:9c:f8:23:f1:90:d6:bd:
24:3a:20:57:d2:62:86:56:ed:b1:5f:3d:05:46:13:
08:35:3f:7a:06:b3:5c:b7:f5:5f:4a:27:ff:bb:aa:
24:f7:09:4d:68:d6:ee:02:42:32:d3:c9:c8:cc:bb:
14:1c:88:54:5c:22:d8:2c:3d:50:24:30:27:40:1b:
30:f7:2c:9b:cf:7e:d7:5d:ff:8f:b3:d1:0c:1d:25:
e5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A4:DB:30:CF:05:CB:72:ED:AA:F3:C9:3C:E4:3B:E9:B1:91:88:FD
X509v3 Authority Key Identifier:
keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fb:be:93:04:e6:e9:60:43:a2:10:f9:75:02:35:79:9d:59:
f0:e0:48:be:87:17:22:a2:22:41:67:77:1f:bb:45:63:ce:7a:
52:f9:a9:36:29:2d:00:ad:65:40:48:04:80:4a:d1:87:71:55:
71:46:77:e7:48:68:86:55:31:68:17:49:92:51:2c:f6:94:0e:
b1:19:61:5d:43:c4:41:e0:de:e5:f1:65:17:be:75:b7:6b:da:
fb:76:cd:b0:26:0e:90:2d:dc:37:c7:97:95:b2:b9:1c:f0:2e:
12:14:f2:f0:03:ec:2e:ca:ac:42:e2:89:5b:51:60:42:f3:a1:
f0:4e:5f:14:ba:36:0b:29:25:65:26:db:e1:ab:4c:f2:15:e2:
a4:fa:0c:a5:a2:2f:3b:09:85:d7:7e:0d:90:de:2a:c5:aa:cf:
d0:34:16:e4:0c:a2:89:6f:f4:1a:b5:77:85:57:f2:d0:2a:3b:
24:34:4d:58:0e:6f:77:d9:7e:47:fe:02:50:10:c5:67:cf:d1:
67:8b:c9:d7:45:52:15:41:1e:36:c7:3b:a3:49:e6:12:e9:b2:
ef:d8:13:d5:57:10:e9:78:52:aa:2f:81:1b:c2:02:15:ac:8e:
0d:9b:22:67:f0:6d:0e:5c:0c:c1:0a:99:02:20:5c:c1:84:bd:
48:ea:bc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:29 2025 by rpki-client