Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
File: QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json)
Hash identifier: aMgyjnbPo6bMD1+sSlpPH1ZEXSwvMfTJp01otFaeB+Q=
Subject key identifier: 63:10:A9:62:B2:CF:D1:FD:4F:19:78:C7:01:76:69:D6:DC:34:CD:89
Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
Certificate issuer: /CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Certificate serial: 019A52D2366E01E6544C6B710012F507827F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
Manifest number: 0AFB
Signing time: Wed 05 Nov 2025 07:01:39 +0000
Manifest this update: Wed 05 Nov 2025 07:01:39 +0000
Manifest next update: Thu 06 Nov 2025 07:01:39 +0000
Files and hashes: 1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: AhA6xCjZkacQ7OgR4fDyhBz0zgNqIo8PdeClJBER304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:36:6e:01:e6:54:4c:6b:71:00:12:f5:07:82:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Validity
Not Before: Nov 5 07:01:39 2025 GMT
Not After : Nov 6 07:01:39 2025 GMT
Subject: CN=6310a962b2cfd1fd4f1978c7017669d6dc34cd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:3f:f4:82:67:0e:24:af:5c:0f:4b:3b:9a:
7b:6f:4d:35:84:49:e6:57:93:f8:56:89:8f:77:f8:
6e:c9:5e:ce:5a:7f:c1:22:2d:43:ed:d8:70:73:67:
1b:60:39:3d:85:5b:43:46:a1:ea:7c:fc:7f:8d:60:
96:ed:42:b7:60:6a:74:34:29:38:30:7e:c4:e9:b5:
28:04:d3:e5:2d:ef:e4:57:dc:6d:1b:ce:6d:ff:b8:
65:a2:8e:6a:90:82:c1:17:39:30:e8:e4:12:ce:e4:
45:14:9c:95:b5:3b:e1:67:ac:fa:53:b4:0a:30:11:
70:b1:3f:b1:f6:db:0e:5b:22:68:73:35:0d:8b:06:
65:e6:0f:c8:e8:2e:85:15:08:43:fe:c3:1a:6e:a8:
4e:fc:97:0c:18:f0:83:be:ce:aa:1b:ec:54:2c:99:
a9:d0:ce:14:a4:46:c3:d5:03:01:af:81:78:bf:4f:
1c:6e:bd:c2:2c:bd:e5:d2:38:2a:ae:06:c2:ec:a6:
a3:24:c4:47:91:8f:54:93:7c:88:ea:a1:61:fa:7c:
1b:0d:d3:ff:61:e9:5d:ff:f2:c8:bf:89:cc:d6:75:
41:d4:26:45:0a:8c:7d:30:0c:f8:df:e1:51:e2:e0:
5c:de:90:40:3d:9a:63:a6:06:ad:86:f7:09:c6:65:
0c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:10:A9:62:B2:CF:D1:FD:4F:19:78:C7:01:76:69:D6:DC:34:CD:89
X509v3 Authority Key Identifier:
keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e4:c7:47:ef:1c:e0:3d:59:0e:29:0f:41:f8:02:52:40:60:
4d:b6:16:6b:1e:81:d3:a2:be:12:51:b0:c1:98:91:e1:0a:3c:
df:2d:32:ed:8a:13:b1:f3:26:51:6e:d5:05:7f:cd:60:16:79:
c5:13:bf:ac:33:9c:c1:36:2a:86:a2:34:4c:8e:41:b2:f1:85:
a2:31:5c:5f:2f:92:16:25:43:c1:db:79:f9:4c:59:88:c2:d9:
24:cb:71:e2:35:9e:aa:d2:0c:65:5b:c8:0b:96:1f:7e:8a:5b:
fc:c0:68:a8:45:f6:f6:15:78:cb:a2:81:3d:55:07:be:e8:4d:
81:80:ff:2b:03:e2:7e:58:19:7c:97:9a:5b:6a:44:2b:e8:97:
e7:38:8c:9e:40:f5:ad:47:12:6a:9f:4e:73:15:2a:ed:7d:c3:
7a:6b:82:3a:6e:8e:1e:e8:81:57:79:19:09:bd:92:59:90:25:
03:7e:72:60:a0:ec:11:d4:56:57:70:ea:dc:89:e9:8a:0d:ce:
1d:d2:2c:45:3c:41:3e:86:3e:97:b8:61:1c:60:82:d4:42:cf:
51:41:b8:ca:27:06:02:11:7a:9a:c5:25:1b:0d:11:5e:38:43:
69:5e:54:8f:22:4a:71:d9:1d:50:f7:5c:fc:d0:02:47:96:fc:
da:12:31:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0jZuAeZUTGtxABL1B4J/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYjI5MDA1MzI0NWIxMTJhNThhNmQ1ODk0ZGZkYzdmNjc0
MjJlOGIwHhcNMjUxMTA1MDcwMTM5WhcNMjUxMTA2MDcwMTM5WjAzMTEwLwYDVQQD
Eyg2MzEwYTk2MmIyY2ZkMWZkNGYxOTc4YzcwMTc2NjlkNmRjMzRjZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGo/9IJnDiSvXA9LO5p7b001hEnm
V5P4VomPd/huyV7OWn/BIi1D7dhwc2cbYDk9hVtDRqHqfPx/jWCW7UK3YGp0NCk4
MH7E6bUoBNPlLe/kV9xtG85t/7hloo5qkILBFzkw6OQSzuRFFJyVtTvhZ6z6U7QK
MBFwsT+x9tsOWyJoczUNiwZl5g/I6C6FFQhD/sMabqhO/JcMGPCDvs6qG+xULJmp
0M4UpEbD1QMBr4F4v08cbr3CLL3l0jgqrgbC7KajJMRHkY9Uk3yI6qFh+nwbDdP/
Yeld//LIv4nM1nVB1CZFCox9MAz43+FR4uBc3pBAPZpjpgathvcJxmUMVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMQqWKyz9H9Txl4xwF2adbcNM2JMB8GA1UdIwQY
MBaAFEGykAUyRbESpYptWJTf3H9nQi6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yYTg4MzktOGQ4Yy00ZTQ3LThlZjQt
OGM3M2FkOWJkMmEwLzEvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8yYTg4MzktOGQ4Yy00ZTQ3LThlZjQtOGM3M2FkOWJkMmEw
LzEvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+THR+8c
4D1ZDikPQfgCUkBgTbYWax6B06K+ElGwwZiR4Qo83y0y7YoTsfMmUW7VBX/NYBZ5
xRO/rDOcwTYqhqI0TI5BsvGFojFcXy+SFiVDwdt5+UxZiMLZJMtx4jWeqtIMZVvI
C5Yffopb/MBoqEX29hV4y6KBPVUHvuhNgYD/KwPiflgZfJeaW2pEK+iX5ziMnkD1
rUcSap9OcxUq7X3DemuCOm6OHuiBV3kZCb2SWZAlA35yYKDsEdRWV3Dq3Inpig3O
HdIsRTxBPoY+l7hhHGCC1ELPUUG4yicGAhF6msUlGw0RXjhDaV5UjyJKcdkdUPdc
/NACR5b82hIxpw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:55:58 2025 by rpki-client