Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
File: QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json)
Hash identifier: 7FzFG4mrNuTFbUzDA9FIt3alpmnXDYFNfVC6mC/G1Xw=
Subject key identifier: A6:B3:84:68:28:E7:3D:2E:01:C9:EF:25:63:10:D5:DE:4D:1D:B8:4D
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial: 01988920A0A7CE6D600704CDD46B576035A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
Manifest number: 0BB7
Signing time: Fri 08 Aug 2025 10:01:13 +0000
Manifest this update: Fri 08 Aug 2025 10:01:13 +0000
Manifest next update: Sat 09 Aug 2025 10:01:13 +0000
Files and hashes: 1: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: drSjj5St9Jk1F6/Db/y8+L/8qTy1mV2LMVFTYnJssRs=)
2: fB_8Kj8FVwA_pRirxgUk8V0Sdls.roa (hash: goBjhg/MD5RTfp4bLaJFULnPwSaD80DrHVFmGJjDPXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:a0:a7:ce:6d:60:07:04:cd:d4:6b:57:60:35:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Validity
Not Before: Aug 8 10:01:13 2025 GMT
Not After : Aug 9 10:01:13 2025 GMT
Subject: CN=a6b3846828e73d2e01c9ef256310d5de4d1db84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:30:25:49:fd:2c:d8:66:52:bf:98:ca:66:
26:87:26:40:40:f6:af:c8:a3:41:df:20:bc:50:80:
71:2d:78:1a:f6:39:f3:00:0e:25:89:5a:d7:ee:a0:
54:7f:28:62:f1:b6:f1:ae:3d:dd:98:2b:a1:cd:cd:
cb:81:6e:74:43:35:6c:3f:64:39:a4:03:43:af:a0:
f8:44:a1:9d:2b:a6:d1:1f:be:ab:55:81:8b:a9:12:
bd:6d:83:32:f8:00:63:41:66:86:5b:7b:aa:4b:a8:
2b:dd:c4:90:b6:c7:b3:6a:72:54:2c:dd:4d:1d:db:
b6:7e:5c:ad:ed:92:24:09:27:6e:9a:6f:21:bf:48:
00:15:6f:0a:c1:34:bb:c3:b9:82:e4:59:ad:00:a2:
b7:43:a5:56:36:3e:9c:42:8c:66:19:7d:a0:25:df:
4c:84:ef:7a:a4:a7:46:59:ae:dc:3d:a4:d0:15:6d:
6e:3a:d9:4a:82:fd:08:3b:22:41:23:ec:4c:e4:cc:
89:64:a9:5d:56:cf:7b:c7:4d:8d:47:90:1b:e0:d7:
b4:9b:47:8f:54:cb:ab:70:23:1d:61:b2:7a:81:ec:
5c:58:5c:08:ab:42:52:f6:4a:a5:20:66:3e:64:b5:
00:f9:a5:b5:d7:35:7c:4d:b5:e9:e2:98:1a:40:24:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B3:84:68:28:E7:3D:2E:01:C9:EF:25:63:10:D5:DE:4D:1D:B8:4D
X509v3 Authority Key Identifier:
keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c2:d0:35:2b:c1:54:ee:e5:5b:57:b2:79:39:d9:dd:99:e2:
c5:a2:d6:0e:0f:0d:80:78:72:af:1c:2e:8a:dd:63:6b:b0:64:
67:aa:e8:19:57:8b:8f:1b:c2:c1:95:e8:ec:ed:ce:e5:a6:92:
86:b6:20:bf:a0:fb:d0:7d:d2:83:bd:f8:37:ff:65:0d:62:f9:
cb:fc:64:c3:0e:1b:44:91:21:3e:70:bc:4d:de:8d:9f:db:df:
46:fd:ba:f7:cd:0b:ce:e6:8d:08:16:5f:4e:bc:17:72:bf:46:
26:71:cd:e9:f2:12:15:2f:54:d7:e9:f2:f3:9e:51:5c:ac:02:
e6:bd:9a:d1:1d:24:4d:90:a9:f0:48:48:d2:fc:b7:81:52:be:
51:80:6c:38:0f:ca:66:47:94:64:03:e8:fc:81:5a:29:96:d7:
cd:89:bd:13:ca:b5:08:17:d5:25:11:3e:fc:80:e4:df:b1:17:
75:f0:95:07:c5:ea:c3:2c:ca:89:1d:64:86:ad:8d:c5:e5:58:
75:cd:4a:c6:41:05:65:08:a0:7d:6e:87:d4:c0:da:04:07:15:
20:b8:09:f3:d2:60:2d:7b:4c:e8:c0:59:1c:de:4d:f7:2d:df:
1e:e7:13:57:a2:c8:1f:89:37:32:bf:12:2e:c3:7f:66:ea:ea:
39:c7:3e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:06:10 2025 by rpki-client