Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
File: qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft (raw, json)
Hash identifier: 7KQFi6QQ46rHVTVQaNHOvpgtfy8WNaDMlXy+Ex8PBBA=
Subject key identifier: 04:BB:0B:8F:E3:3D:37:D3:B5:C7:60:BA:55:75:E9:DD:83:4A:96:F1
Authority key identifier: A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
Certificate issuer: /CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Certificate serial: 0199FCC6A37771A8CE63B7FC522F90BD70FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
Manifest number: 13F8
Signing time: Sun 19 Oct 2025 14:01:40 +0000
Manifest this update: Sun 19 Oct 2025 14:01:40 +0000
Manifest next update: Mon 20 Oct 2025 14:01:40 +0000
Files and hashes: 1: qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl (hash: /QwRp0WtqT2Mrj01ZjdUEI8AL1kLTMH0ZMyzNwtmtPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a3:77:71:a8:ce:63:b7:fc:52:2f:90:bd:70:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Validity
Not Before: Oct 19 14:01:40 2025 GMT
Not After : Oct 20 14:01:40 2025 GMT
Subject: CN=04bb0b8fe33d37d3b5c760ba5575e9dd834a96f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:52:1f:c4:48:62:f3:ab:08:b1:32:24:a7:
9d:43:68:f8:3a:10:d9:41:73:a5:20:08:5d:69:b7:
46:ea:f8:52:19:52:27:65:9b:46:ff:eb:1c:dc:d7:
78:13:93:52:22:3e:52:94:9b:53:13:1a:72:35:f7:
a1:10:65:14:f2:73:cb:ca:19:8c:16:24:67:cc:45:
1c:d8:5c:bd:73:f9:eb:7b:36:0e:14:a8:55:81:b8:
57:55:65:fd:55:b8:78:29:b9:c4:42:a9:2b:da:de:
53:35:5f:ec:b5:87:43:53:fa:04:4a:0b:c2:ef:33:
ca:6c:92:37:78:33:fe:87:85:38:e7:1a:14:2d:0e:
4a:4d:4a:ac:fe:c9:69:c7:d0:ac:be:d1:82:5e:08:
fc:58:42:a0:5d:0c:0b:bb:16:db:7c:b3:a0:1a:86:
3f:4f:a0:c4:6e:7d:52:f2:77:8e:cd:79:42:88:d2:
f9:0f:3b:0d:ea:9a:14:bb:a4:4a:62:9c:47:a2:c1:
c8:1e:31:ba:d8:d2:1d:9d:ff:4f:d7:ef:6d:68:6e:
69:89:25:4b:0b:13:76:8e:69:b3:c0:ec:b0:4e:06:
8c:6c:74:c3:e3:be:cf:a0:b9:2f:70:cd:28:c0:fe:
c0:d8:37:b8:da:16:af:4f:07:34:dc:15:aa:db:d6:
6a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BB:0B:8F:E3:3D:37:D3:B5:C7:60:BA:55:75:E9:DD:83:4A:96:F1
X509v3 Authority Key Identifier:
keyid:A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:db:a4:f2:0b:ca:85:a0:38:d7:40:61:ae:45:fb:e4:42:88:
a8:95:e3:7d:02:a5:88:2a:1e:3e:2c:8c:40:9e:25:96:fd:89:
02:d1:3b:00:a1:60:4d:17:49:3c:24:a4:3c:87:10:23:ee:03:
29:58:2b:bb:18:61:e8:ee:90:e1:98:b2:d9:71:e3:f5:02:62:
d5:ed:a0:e5:97:f4:02:ea:09:26:cc:1a:25:25:00:39:4b:c8:
f5:19:dd:8b:51:f9:b9:9d:1e:7a:23:07:d4:29:f4:d1:44:f1:
39:d8:ec:b6:f0:0c:c2:8f:a3:aa:c7:39:b3:ce:51:da:c6:87:
93:30:4a:b8:2c:11:37:d2:c7:36:17:ef:91:a8:ea:fc:c4:6e:
0d:d3:58:14:fc:4b:02:a8:2b:9e:cb:2d:3d:aa:d3:ed:3d:49:
2d:1a:6f:48:67:91:18:20:4c:3e:88:29:ba:4e:1f:79:ee:50:
15:6b:0d:6e:2d:40:e5:0f:c4:f8:75:05:68:60:d8:eb:0a:d0:
b1:33:47:69:18:b8:51:b0:a4:b5:94:16:e6:9d:c5:63:83:85:
ec:06:22:26:e5:9f:66:bf:7d:b7:06:e1:97:84:6f:d6:6d:66:
a6:10:fb:82:64:df:a2:1f:56:a7:e8:93:73:b6:a4:98:be:b2:
a5:f8:7a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:05 2025 by rpki-client