Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
File: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft (raw, json)
Hash identifier: kESKwSxZl4T7X1AouydvMMKdJKao6neVH1uOdEgDcHE=
Subject key identifier: 09:0E:5C:91:62:AD:B7:0F:30:1B:23:C5:AF:4C:E9:87:E0:BC:04:31
Authority key identifier: A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
Certificate issuer: /CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Certificate serial: 019A4D73A0E2564068E80433F4A230CA7B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
Manifest number: 0C10
Signing time: Tue 04 Nov 2025 06:00:14 +0000
Manifest this update: Tue 04 Nov 2025 06:00:14 +0000
Manifest next update: Wed 05 Nov 2025 06:00:14 +0000
Files and hashes: 1: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl (hash: zDExKBQRvmrXYLC6oAGO5R99YWvKH+2/kYkd6uiXFpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:a0:e2:56:40:68:e8:04:33:f4:a2:30:ca:7b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Validity
Not Before: Nov 4 06:00:14 2025 GMT
Not After : Nov 5 06:00:14 2025 GMT
Subject: CN=090e5c9162adb70f301b23c5af4ce987e0bc0431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:ad:40:ca:bc:b8:dd:22:85:24:54:8f:16:
50:6c:a5:92:4b:4a:d3:c2:19:86:10:c0:b1:20:9d:
07:c5:21:71:dc:ad:42:90:b4:e9:26:13:16:8e:49:
d8:19:a5:f4:bc:88:e9:59:38:98:88:8f:5e:db:74:
a3:fb:12:a0:39:8f:60:78:87:82:db:38:60:ed:fc:
8e:3d:84:e8:ed:2a:e2:5b:da:f3:64:73:75:fb:a8:
79:70:c0:13:e7:37:c6:c6:a6:16:29:c3:ef:d8:e6:
70:58:ce:14:bf:e2:b7:c2:4c:63:12:84:2b:71:51:
7f:23:66:d2:48:37:96:f0:9d:18:b1:bd:90:5d:f4:
98:57:db:71:cf:1a:5d:23:5f:a6:c2:9c:e5:7a:8e:
5d:c4:39:90:31:f9:cb:80:88:a8:5f:01:6d:2f:0c:
ec:5f:76:29:f4:d3:ff:71:11:be:c6:f1:eb:99:43:
5b:14:b7:5b:db:46:52:02:5d:23:20:4c:cb:8d:d7:
a6:5f:9c:1a:49:d3:c2:68:9f:73:92:aa:61:75:26:
20:eb:7c:70:40:ed:87:fe:cf:1e:57:30:16:3b:a9:
c1:e3:4d:75:4c:a3:50:3c:38:c1:0a:c1:de:4d:33:
17:cd:3e:a7:15:bd:93:c7:db:57:67:3c:95:f6:84:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0E:5C:91:62:AD:B7:0F:30:1B:23:C5:AF:4C:E9:87:E0:BC:04:31
X509v3 Authority Key Identifier:
keyid:A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f6:1b:5a:e7:fa:cb:35:58:64:fe:b2:c2:18:2d:ca:92:cb:
78:a3:cc:96:f5:e7:72:d7:26:8f:33:56:c3:30:e8:ff:3a:68:
66:27:92:b0:77:64:a4:b8:9c:5a:3b:18:e9:4c:3a:56:55:43:
67:7b:a7:84:49:6a:e6:60:6a:7f:49:05:b4:66:67:d7:f1:7c:
c0:3e:92:83:00:2b:8d:6f:99:db:37:8e:6a:b6:ec:25:7d:38:
4e:ac:df:d5:84:15:27:86:a0:38:18:02:eb:7b:47:6a:c9:3a:
28:1a:f0:5f:22:5e:2d:e4:42:d8:76:eb:ef:8e:03:c0:4e:16:
52:cb:8e:c3:87:f3:51:37:91:62:c5:11:4a:d9:5c:7f:f1:c6:
b2:c7:5a:5b:18:27:bc:63:0f:51:8c:97:40:65:b6:f2:cc:41:
d7:7f:fe:fd:10:93:ec:fd:d1:80:5e:2c:aa:23:bd:b9:82:e9:
8f:f2:bf:1f:3b:97:b6:3e:e6:39:06:ce:b4:75:3b:13:fa:0d:
f4:98:77:62:54:6f:11:c3:c3:3f:20:73:28:cb:b8:42:db:27:
14:6f:d9:f2:89:e0:0a:e3:9e:8d:19:6e:82:a5:c0:96:9e:fa:
cc:ab:37:3d:e1:1c:1d:3f:26:61:9d:62:70:4b:91:82:d5:a5:
50:b0:65:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:46 2025 by rpki-client