Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
File: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft (raw, json)
Hash identifier: rLz7OdXPim32SYiII0o+jrTelEXtKVF8h8EnIvlNMj0=
Subject key identifier: 0A:C4:ED:76:50:76:3A:26:23:36:E4:1F:69:28:71:D0:FA:91:EF:0F
Authority key identifier: AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25
Certificate issuer: /CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
Certificate serial: 019A4F98E45BD705B923FF41EE70D1946B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
Manifest number: 167D
Signing time: Tue 04 Nov 2025 16:00:11 +0000
Manifest this update: Tue 04 Nov 2025 16:00:11 +0000
Manifest next update: Wed 05 Nov 2025 16:00:11 +0000
Files and hashes: 1: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl (hash: FbA96VgZja7ykbFYP0WAX1ItQ2v4y+5BODwhn2cJ+l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e4:5b:d7:05:b9:23:ff:41:ee:70:d1:94:6b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
Validity
Not Before: Nov 4 16:00:11 2025 GMT
Not After : Nov 5 16:00:11 2025 GMT
Subject: CN=0ac4ed7650763a262336e41f692871d0fa91ef0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:a2:1f:8c:73:0a:10:15:e1:67:53:68:14:
c3:c4:26:33:ef:e0:74:44:32:95:46:b7:e4:72:60:
0a:a5:82:04:66:03:09:10:a3:f7:26:6a:86:90:65:
51:e4:f6:61:b8:f5:41:c1:d6:7b:30:e0:90:60:ea:
20:9b:68:d3:f8:c0:aa:28:8f:65:f8:f9:4e:0f:a0:
f1:b6:35:65:d2:13:56:63:d1:9e:b6:fd:88:ae:97:
f4:d4:e9:f9:4b:d6:9f:52:2e:44:53:8d:18:d1:9a:
03:f4:f9:b4:71:35:50:c3:5e:bd:83:5c:dd:d7:58:
00:1f:eb:76:1d:3b:02:49:59:3f:18:4c:5b:46:4d:
9a:9d:f3:61:56:90:69:d2:29:7f:ed:21:ce:87:af:
52:8f:51:d9:dc:46:d6:c2:8b:b6:8c:69:78:d8:20:
e8:43:b8:0d:4a:90:ef:3d:89:29:50:50:5a:e7:a3:
1b:bf:88:6a:3b:3c:46:ba:e9:49:17:95:44:e0:e3:
83:0e:0c:4b:1a:93:80:3d:7f:38:53:48:27:12:59:
dd:30:6a:46:a1:7d:86:a3:29:2f:fc:6b:a0:36:90:
b6:fe:05:e1:dc:80:0e:e3:3e:33:fe:3c:9f:08:05:
c1:5e:24:19:a5:ef:9c:d0:1e:aa:f2:20:17:18:9b:
c2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C4:ED:76:50:76:3A:26:23:36:E4:1F:69:28:71:D0:FA:91:EF:0F
X509v3 Authority Key Identifier:
keyid:AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1d:60:5a:e3:cc:b0:c9:52:3d:df:39:10:d1:8b:ac:93:17:
4d:d9:e1:cc:80:67:31:2a:73:02:41:b4:77:53:49:12:5c:0f:
88:eb:98:b9:89:04:6f:06:d0:68:b4:d4:a7:66:2b:02:d9:aa:
23:84:c7:1c:80:78:62:ba:18:02:cc:0b:e5:f4:5d:e0:a4:21:
f7:27:6b:a9:71:8a:11:db:e3:aa:92:93:c5:cc:25:ee:1d:e2:
97:0f:68:25:e3:a1:cf:56:b9:50:e4:86:fe:28:98:3c:95:d3:
15:15:48:05:be:73:24:f9:46:c0:83:47:2c:64:ae:04:c8:c7:
49:65:64:f9:4b:2f:98:b1:3a:31:44:51:a5:0f:8b:5e:da:4a:
34:e9:fd:b3:6a:b7:d5:58:00:98:2b:d5:92:42:9a:bb:f7:1f:
40:b5:97:26:f0:f2:b8:e8:1e:90:73:90:cd:55:53:92:57:a2:
a0:0f:c2:1a:1a:e3:bf:9e:85:10:0d:5b:b0:0b:b6:76:db:77:
56:74:4d:06:a5:59:53:bb:b2:79:3a:58:e3:e3:c2:f2:5a:6d:
fe:31:b7:9c:ac:f1:49:9b:6d:60:57:52:bf:b7:a7:b2:66:48:
49:5c:99:b2:cf:41:2f:55:48:80:15:53:46:e0:09:b6:d2:bb:
c8:9a:d1:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmORb1wW5I/9B7nDRlGtTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiM2E5ZDFmYzk5ZjI1MmYyMjU4ZjY4MmFiM2ZjNTgzNWJk
MmY3MjUwHhcNMjUxMTA0MTYwMDExWhcNMjUxMTA1MTYwMDExWjAzMTEwLwYDVQQD
EygwYWM0ZWQ3NjUwNzYzYTI2MjMzNmU0MWY2OTI4NzFkMGZhOTFlZjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvCiH4xzChAV4WdTaBTDxCYz7+B0
RDKVRrfkcmAKpYIEZgMJEKP3JmqGkGVR5PZhuPVBwdZ7MOCQYOogm2jT+MCqKI9l
+PlOD6DxtjVl0hNWY9Getv2Irpf01On5S9afUi5EU40Y0ZoD9Pm0cTVQw169g1zd
11gAH+t2HTsCSVk/GExbRk2anfNhVpBp0il/7SHOh69Sj1HZ3EbWwou2jGl42CDo
Q7gNSpDvPYkpUFBa56Mbv4hqOzxGuulJF5VE4OODDgxLGpOAPX84U0gnElndMGpG
oX2Goykv/GugNpC2/gXh3IAO4z4z/jyfCAXBXiQZpe+c0B6q8iAXGJvCVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArE7XZQdjomIzbkH2kocdD6ke8PMB8GA1UdIwQY
MBaAFKs6nR/JnyUvIlj2gqs/xYNb0vclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXpxZEg4bWZKUzhpV1BhQ3F6X0ZnMXZTOXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zNmI5MmYtNjVkYi00YzBhLTkzNTYt
ZTMxNmFhMWYxNmIzLzEvcXpxZEg4bWZKUzhpV1BhQ3F6X0ZnMXZTOXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zNmI5MmYtNjVkYi00YzBhLTkzNTYtZTMxNmFhMWYxNmIz
LzEvcXpxZEg4bWZKUzhpV1BhQ3F6X0ZnMXZTOXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMh1gWuPM
sMlSPd85ENGLrJMXTdnhzIBnMSpzAkG0d1NJElwPiOuYuYkEbwbQaLTUp2YrAtmq
I4THHIB4YroYAswL5fRd4KQh9ydrqXGKEdvjqpKTxcwl7h3ilw9oJeOhz1a5UOSG
/iiYPJXTFRVIBb5zJPlGwINHLGSuBMjHSWVk+UsvmLE6MURRpQ+LXtpKNOn9s2q3
1VgAmCvVkkKau/cfQLWXJvDyuOgekHOQzVVTkleioA/CGhrjv56FEA1bsAu2dtt3
VnRNBqVZU7uyeTpY4+PC8lpt/jG3nKzxSZttYFdSv7ensmZISVyZss9BL1VIgBVT
RuAJttK7yJrRVg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:00 2025 by rpki-client