Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
File: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft (raw, json)
Hash identifier: yNk7ndtALtztf9Xh2EQ/7p9YoqEl9ahZorSYmGxgMZw=
Subject key identifier: 41:69:A3:31:C3:A4:FA:3B:E7:D0:56:B2:C9:2B:D1:7C:84:71:30:F2
Authority key identifier: 41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
Certificate issuer: /CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Certificate serial: 0199FDD8D37080D4D769099E51E19670CF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
Manifest number: 0CF2
Signing time: Sun 19 Oct 2025 19:01:09 +0000
Manifest this update: Sun 19 Oct 2025 19:01:09 +0000
Manifest next update: Mon 20 Oct 2025 19:01:09 +0000
Files and hashes: 1: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl (hash: Ol92RO6IVs08sgbm6iPTa4bLd198/9sS8Qx7fTcCD0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d3:70:80:d4:d7:69:09:9e:51:e1:96:70:cf:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Validity
Not Before: Oct 19 19:01:09 2025 GMT
Not After : Oct 20 19:01:09 2025 GMT
Subject: CN=4169a331c3a4fa3be7d056b2c92bd17c847130f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2f:b7:52:a8:3c:2c:a3:d2:a7:b8:58:27:89:
94:69:29:a2:36:0f:be:3f:d6:be:b5:61:65:b8:ee:
86:b1:e6:8e:a8:eb:21:18:ae:8a:da:21:f2:23:18:
90:bb:c7:e7:64:e1:4d:d6:fa:b8:f8:44:39:a9:e2:
0a:c0:d8:62:65:12:c9:f8:d1:51:c0:47:b7:03:87:
83:bd:b0:fe:9c:47:a1:ee:56:7c:32:26:92:c7:7c:
d2:7c:3b:29:29:4a:8a:0a:7d:c7:20:a0:d2:b5:94:
9c:04:63:76:4b:2b:51:c7:68:b8:ac:4e:25:e1:52:
4a:2f:58:7e:09:e0:01:a0:f4:f2:24:4a:ff:68:a3:
6c:5e:8f:d6:10:00:51:25:64:d9:c4:e5:8d:0c:2f:
56:81:c7:8c:7e:b2:d5:b5:31:19:75:91:c1:88:56:
a0:40:dc:a2:a6:46:9e:a0:b6:32:29:0f:5e:9d:a8:
c0:1e:ac:83:78:50:df:bd:f3:ad:22:58:5b:df:72:
86:99:98:eb:55:d0:44:b4:fb:9d:bb:70:9a:81:1c:
f7:0f:f3:cf:a4:fb:97:b8:16:d9:06:ab:b6:a7:08:
a1:76:27:3d:ae:61:bd:af:ad:6e:98:71:a5:10:b7:
72:97:aa:cb:d0:6c:bf:2f:31:b2:1f:2e:e2:b1:a0:
bf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:69:A3:31:C3:A4:FA:3B:E7:D0:56:B2:C9:2B:D1:7C:84:71:30:F2
X509v3 Authority Key Identifier:
keyid:41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:00:d9:a1:dc:cb:fd:a2:56:85:17:52:fa:84:d9:2f:2f:89:
d7:a3:de:2f:78:e2:47:9a:5a:70:c9:48:da:76:cb:12:c9:8a:
79:9e:94:7b:76:8e:55:b2:89:6f:8c:aa:71:98:53:5e:36:9a:
2c:37:04:46:73:ab:71:0d:77:b8:41:7b:b6:80:ad:e8:b2:ef:
eb:80:ea:ba:a1:c3:fb:77:bb:ab:a5:c4:ee:2b:c6:37:5c:5d:
19:5a:3e:fd:4a:46:73:40:6f:ce:2a:bf:f5:bb:8e:fe:b7:7b:
4b:2b:2f:45:ce:5f:74:50:5e:2e:7a:01:ff:d7:42:5a:26:fd:
60:6e:49:30:23:f9:d3:b6:27:26:65:dd:5f:fe:3e:ed:7e:0a:
a7:61:fd:fe:e3:94:c8:f5:23:81:a9:ae:b9:c1:dc:07:ba:81:
6a:ab:f0:37:03:a8:5f:ee:85:1e:83:09:6f:9d:c1:cd:ce:99:
a6:2e:de:47:9d:4c:bd:89:f7:f8:6a:5a:9a:c7:3a:db:0b:66:
86:53:00:c0:34:4b:c2:86:fe:f7:62:95:ce:c3:a0:e5:ba:b2:
0a:74:6e:14:b3:91:d0:1e:3b:22:0d:34:3d:01:3d:90:86:07:
3f:e7:a7:bf:44:51:fa:b2:53:98:d1:30:7f:9e:67:8c:a0:41:
86:a1:7d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:28 2025 by rpki-client