Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
File: QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json)
Hash identifier: +n7pDBemIeGxbapNh+L4t87SLS6c8hfa5w38bmNc5aY=
Subject key identifier: 71:2E:65:DB:A8:76:1D:D2:90:03:17:17:4B:00:BD:AF:FC:05:76:95
Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
Certificate issuer: /CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Certificate serial: 019873E39B6E7E32471C9CF60A6CA7BE2CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
Manifest number: 0A03
Signing time: Mon 04 Aug 2025 07:02:32 +0000
Manifest this update: Mon 04 Aug 2025 07:02:32 +0000
Manifest next update: Tue 05 Aug 2025 07:02:32 +0000
Files and hashes: 1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: zaZ5yx7d4NIH6uEw9BOzZLKjvK0PvEJZctZxIY84cZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:9b:6e:7e:32:47:1c:9c:f6:0a:6c:a7:be:2c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Validity
Not Before: Aug 4 07:02:32 2025 GMT
Not After : Aug 5 07:02:32 2025 GMT
Subject: CN=712e65dba8761dd2900317174b00bdaffc057695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:ee:e7:ff:c6:f5:f8:95:a4:d6:f8:6a:90:
3d:e0:3b:fe:1f:a6:3d:1a:66:7f:9d:34:71:91:6d:
fb:27:13:d7:a0:d1:95:d5:3a:a0:9b:2a:98:f7:c5:
bc:06:27:8e:ed:f2:d6:af:3f:2f:56:8f:51:39:a5:
51:8d:e6:6e:0c:b7:b2:ef:4c:b5:1c:7a:be:43:b0:
be:c3:47:1b:73:29:ed:22:ea:e8:e6:59:27:f3:40:
4a:cb:e1:46:c4:ed:56:75:a7:10:bb:3b:40:40:4b:
3d:a3:38:9b:e8:67:cb:dd:ad:a0:7c:f9:2b:a7:c1:
90:77:fe:75:de:67:2b:82:1b:09:52:d2:ad:91:c1:
aa:9b:10:ef:6f:f5:68:6a:5f:39:45:24:06:6f:bd:
67:a7:3d:e0:73:93:e3:76:3b:1c:1f:46:5b:fc:bf:
d6:05:92:2b:84:bd:b1:5a:38:f0:8a:83:b4:2c:b4:
34:c2:a3:93:ab:b3:34:1b:62:7b:22:07:b0:71:97:
bd:b4:70:04:9f:d5:f0:ea:51:9d:95:90:e7:e7:3a:
12:99:56:e4:ed:aa:e8:54:9f:b6:60:4a:f8:a8:ad:
10:59:4c:96:0e:97:4a:a4:54:6b:17:e8:e3:db:99:
53:9c:bd:5f:14:8c:ea:2d:5e:95:ce:f0:49:b0:1e:
b1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2E:65:DB:A8:76:1D:D2:90:03:17:17:4B:00:BD:AF:FC:05:76:95
X509v3 Authority Key Identifier:
keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ae:ac:ee:fc:b8:b9:75:8f:06:39:25:00:5d:49:c0:2a:e1:
6b:ca:84:59:2f:49:5d:f6:69:59:31:4c:d3:0c:50:51:b6:77:
b7:99:ec:aa:6d:51:ee:8e:ae:4f:c5:66:72:3f:3d:d5:14:a8:
40:9f:2d:a6:5f:6a:d2:59:78:a4:8a:6d:ff:9f:42:fd:ff:b4:
19:1e:a3:1c:c4:bb:07:eb:5b:27:c1:58:0d:84:3e:b6:90:a7:
b1:2f:95:61:57:a0:ab:6f:ee:5a:52:f4:85:ca:a0:7d:d3:f2:
92:01:4f:1d:3e:81:23:8a:1e:7a:02:38:c8:50:34:ad:1c:ea:
f6:aa:fa:fc:28:07:48:b0:5a:21:c8:9b:52:1f:a5:f4:b3:92:
94:82:cb:e9:82:14:ef:de:c5:33:30:2f:51:35:66:a4:46:fd:
9a:f9:b3:51:7f:9f:bb:1c:02:d6:00:bc:c0:3f:04:b0:7f:8e:
21:23:15:4a:ef:b5:fb:af:9b:d3:a9:46:8e:df:16:4e:f6:f4:
e7:31:b6:b4:89:c2:91:68:de:e4:5f:a7:5d:2d:3b:11:86:1e:
4a:18:40:8c:0a:d3:49:a1:73:c4:43:05:32:b7:90:1b:77:63:
82:06:8a:93:2c:bf:c1:ea:8c:e4:23:5c:02:68:c4:ba:37:a9:
98:10:dc:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz45tufjJHHJz2CmynvizmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYjI5MDA1MzI0NWIxMTJhNThhNmQ1ODk0ZGZkYzdmNjc0
MjJlOGIwHhcNMjUwODA0MDcwMjMyWhcNMjUwODA1MDcwMjMyWjAzMTEwLwYDVQQD
Eyg3MTJlNjVkYmE4NzYxZGQyOTAwMzE3MTc0YjAwYmRhZmZjMDU3Njk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnbu5//G9fiVpNb4apA94Dv+H6Y9
GmZ/nTRxkW37JxPXoNGV1TqgmyqY98W8BieO7fLWrz8vVo9ROaVRjeZuDLey70y1
HHq+Q7C+w0cbcyntIuro5lkn80BKy+FGxO1WdacQuztAQEs9ozib6GfL3a2gfPkr
p8GQd/513mcrghsJUtKtkcGqmxDvb/Voal85RSQGb71npz3gc5PjdjscH0Zb/L/W
BZIrhL2xWjjwioO0LLQ0wqOTq7M0G2J7IgewcZe9tHAEn9Xw6lGdlZDn5zoSmVbk
7aroVJ+2YEr4qK0QWUyWDpdKpFRrF+jj25lTnL1fFIzqLV6VzvBJsB6x3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEuZduodh3SkAMXF0sAva/8BXaVMB8GA1UdIwQY
MBaAFEGykAUyRbESpYptWJTf3H9nQi6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yYTg4MzktOGQ4Yy00ZTQ3LThlZjQt
OGM3M2FkOWJkMmEwLzEvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8yYTg4MzktOGQ4Yy00ZTQ3LThlZjQtOGM3M2FkOWJkMmEw
LzEvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH66s7vy4
uXWPBjklAF1JwCrha8qEWS9JXfZpWTFM0wxQUbZ3t5nsqm1R7o6uT8Vmcj891RSo
QJ8tpl9q0ll4pIpt/59C/f+0GR6jHMS7B+tbJ8FYDYQ+tpCnsS+VYVegq2/uWlL0
hcqgfdPykgFPHT6BI4oeegI4yFA0rRzq9qr6/CgHSLBaIcibUh+l9LOSlILL6YIU
797FMzAvUTVmpEb9mvmzUX+fuxwC1gC8wD8EsH+OISMVSu+1+6+b06lGjt8WTvb0
5zG2tInCkWje5F+nXS07EYYeShhAjArTSaFzxEMFMreQG3djggaKkyy/weqM5CNc
AmjEujepmBDcxg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 13:58:37 2025 by rpki-client