Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
File: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft (raw, json)
Hash identifier: 4s5CG3UQI2FOrMOUc3WoZ3QobYGGcsSP8aKBYSF4Ks4=
Subject key identifier: B9:79:20:7C:94:5E:27:A3:D3:4A:F0:AF:26:30:0F:EA:5A:17:40:DD
Authority key identifier: 41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
Certificate issuer: /CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Certificate serial: 0198A04D3406A7BB0ACFDF1DE7951BFBE5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
Manifest number: 0C3D
Signing time: Tue 12 Aug 2025 22:01:10 +0000
Manifest this update: Tue 12 Aug 2025 22:01:10 +0000
Manifest next update: Wed 13 Aug 2025 22:01:10 +0000
Files and hashes: 1: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl (hash: NafxGeyqNEWJDjrwmlF0DLDOfNPvMt4OS4oU3DvAQ2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:34:06:a7:bb:0a:cf:df:1d:e7:95:1b:fb:e5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Validity
Not Before: Aug 12 22:01:10 2025 GMT
Not After : Aug 13 22:01:10 2025 GMT
Subject: CN=b979207c945e27a3d34af0af26300fea5a1740dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:f6:8d:1b:fa:6f:ca:cf:02:dc:b8:47:29:
9a:30:52:6f:ca:69:ab:7e:b1:19:cb:42:1c:bf:cc:
1e:70:a1:c6:b6:4d:57:27:12:5b:7e:9e:10:15:62:
12:16:c9:a7:ee:2f:a7:9f:3f:81:86:22:69:63:90:
5f:ad:af:aa:b6:6f:26:b4:ac:6f:78:cd:b0:bc:68:
3c:e4:f3:74:fc:45:19:c3:77:82:31:a9:bb:cc:ec:
ec:c0:9a:6d:9c:81:bd:91:df:df:3c:89:92:0a:e0:
a4:ce:61:19:30:49:fc:b1:30:c6:b9:cf:fd:13:d9:
a8:de:a8:07:13:b7:f0:3f:4e:64:38:26:ed:9b:5d:
d3:7c:f4:43:fb:33:2e:f9:e3:de:f5:dd:6b:e0:33:
ad:4e:d3:1d:32:ef:a9:88:2e:07:26:74:08:8a:b9:
0a:59:0b:47:d8:7f:ea:9e:1b:aa:8e:69:86:48:fe:
60:b4:07:90:e3:49:11:18:13:34:4d:97:fc:97:d9:
39:5e:2d:28:4e:29:b2:3b:15:72:66:33:a7:c0:c0:
7d:67:94:a3:13:bd:ec:34:59:75:ba:64:5d:3c:71:
dc:17:06:a5:a0:ea:0b:43:e9:47:5e:47:b7:f9:38:
eb:e0:d4:8b:51:da:43:7d:31:aa:39:2c:51:8f:87:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:79:20:7C:94:5E:27:A3:D3:4A:F0:AF:26:30:0F:EA:5A:17:40:DD
X509v3 Authority Key Identifier:
keyid:41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:45:79:c1:31:c5:f0:39:cc:25:0e:c6:74:51:39:5c:bb:a6:
11:6b:a6:48:48:be:e4:de:a9:fe:aa:1f:4a:a6:54:66:9f:bc:
8e:1d:67:93:1b:96:2b:0c:37:42:9d:70:28:fb:98:6e:b1:52:
94:0a:a7:32:5b:fb:80:fb:d2:df:9f:0e:a5:e8:f8:29:42:9e:
42:b7:da:12:22:b9:ec:1c:a0:6a:7b:4e:19:a0:8f:c1:f0:c0:
50:3f:24:56:28:c8:c7:f7:88:21:1d:53:b7:f2:df:5e:1e:ca:
cf:6b:41:c6:73:3d:0a:66:de:26:c8:d7:63:ee:32:18:06:5a:
f9:42:95:67:a6:2b:43:53:e9:3b:27:84:43:15:f0:a9:b5:f6:
84:55:8d:aa:41:8a:ae:a9:c5:ef:06:f4:4c:f2:94:e2:e2:d6:
8c:0d:30:90:a1:04:84:9f:dc:3a:a7:28:95:8f:8f:19:23:0e:
5c:95:73:8c:14:fe:ba:be:fc:98:96:e0:99:84:0d:7a:5b:e0:
de:8f:71:34:f7:a4:b9:d1:f6:0c:4c:96:99:d0:47:31:68:02:
e1:78:65:f3:20:0b:ca:ec:45:e1:5f:50:ca:8f:d2:75:94:42:
77:c5:89:5e:67:0d:f4:21:0f:51:ec:bc:0a:be:ed:78:e7:96:
e0:5b:9b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:07 2025 by rpki-client