Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
File: Qbib03Ns5PAIRzll_a5AdFZ82gM.mft (raw, json)
Hash identifier: o/e1WVHydrIUaxTP+nExiXZnzk9OSlh0oxCxRGrbeZo=
Subject key identifier: D8:93:28:E0:59:40:7E:63:BD:E4:1B:38:6D:D4:31:61:73:68:44:91
Authority key identifier: 41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03
Certificate issuer: /CN=41b89bd3736ce4f008473965fdae4074567cda03
Certificate serial: 0198D66106F0F131F25414D0F1911E271068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
Manifest number: 0BC1
Signing time: Sat 23 Aug 2025 10:02:19 +0000
Manifest this update: Sat 23 Aug 2025 10:02:19 +0000
Manifest next update: Sun 24 Aug 2025 10:02:19 +0000
Files and hashes: 1: Qbib03Ns5PAIRzll_a5AdFZ82gM.crl (hash: F4A2CsnD6NDMWgRb5v/pYw14oF3Sip62LDsUtuNKNoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:06:f0:f1:31:f2:54:14:d0:f1:91:1e:27:10:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b89bd3736ce4f008473965fdae4074567cda03
Validity
Not Before: Aug 23 10:02:19 2025 GMT
Not After : Aug 24 10:02:19 2025 GMT
Subject: CN=d89328e059407e63bde41b386dd4316173684491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d0:6e:36:61:46:7c:98:a1:3d:5d:f8:fd:93:
b6:df:ba:6f:a5:65:30:40:02:f0:a0:63:aa:0e:89:
22:55:09:ec:66:c6:02:62:22:4d:31:ab:6e:a7:21:
b7:33:e0:c2:bc:c6:f8:c1:5f:54:75:9f:8a:89:33:
42:ab:58:61:da:7f:d3:5f:00:56:77:e3:45:f2:f3:
f4:41:94:4c:7c:fe:b4:76:eb:76:7f:9a:7a:fe:06:
26:9d:22:58:4a:a6:f3:74:14:c1:9e:cc:2e:4b:2f:
77:62:ec:30:ba:ee:a4:14:35:23:ae:aa:8a:e3:5d:
b0:78:da:c8:d9:47:98:32:3e:f2:7b:07:06:b7:5c:
70:22:ed:74:a0:b4:6f:03:cf:ff:62:7a:2a:ed:05:
b1:c7:d5:4d:66:01:03:ee:80:aa:2c:c9:66:12:95:
2a:a3:b5:d5:f0:2a:0d:89:05:d5:ef:a6:92:9d:a3:
d6:68:75:e4:b0:3e:93:a3:07:fc:c3:33:d3:bd:28:
90:0d:04:42:32:32:59:5d:f2:30:c9:74:af:0e:53:
04:4e:bf:98:65:4b:93:5c:42:c5:9c:87:8c:97:2a:
1f:84:0d:27:7d:e7:1b:7a:27:d3:6a:02:58:05:f2:
6e:27:f7:c9:29:6d:0c:e9:8b:a9:ea:0a:aa:f2:37:
e6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:93:28:E0:59:40:7E:63:BD:E4:1B:38:6D:D4:31:61:73:68:44:91
X509v3 Authority Key Identifier:
keyid:41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:9d:9a:fe:9e:2b:21:6f:d8:c4:49:0e:71:fa:a7:c1:95:54:
b7:fe:da:59:7a:5b:51:ce:c8:1f:0e:95:32:4b:f1:43:28:47:
45:ff:01:c1:01:f4:3d:8f:b6:fd:cb:02:0f:c6:b3:f8:26:12:
08:97:8a:71:af:29:6f:89:bf:9e:c9:8d:6a:e7:8c:b4:58:cb:
b8:4a:62:d7:e2:f2:0b:dc:8d:6d:13:fd:cb:58:43:87:56:91:
cf:e5:96:96:03:74:35:3e:cd:d9:ed:02:33:9e:29:c0:a1:c0:
83:d0:4d:65:be:55:b2:99:90:36:3e:d3:72:69:f3:40:28:11:
4d:2b:ec:bf:9d:50:6c:c1:7c:81:0a:f8:da:83:f3:b5:1d:9a:
c3:ce:92:51:f0:a4:25:97:2d:62:d7:37:73:4c:d0:5e:c4:20:
ff:98:52:99:71:9a:b2:64:d9:4e:3a:7d:ef:8e:ac:06:0b:90:
89:f9:80:2f:4c:98:b9:16:7d:10:45:d7:7e:49:9d:c5:2d:85:
ad:67:d8:61:c8:7f:93:2b:f1:3b:1c:db:fd:dd:1d:ad:c8:60:
a5:da:02:d3:b4:d9:f4:be:30:89:49:e4:05:97:d8:39:38:db:
7c:f5:79:ac:08:4a:a0:bf:97:a9:de:69:62:fd:77:21:06:a9:
ec:f0:c6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:58 2025 by rpki-client