Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
File: QL_SbwstE2mcNW7Di5bGqCXSG2o.mft (raw, json)
Hash identifier: SkkYOsbn9kmgi2qrxdjLZiz8th99TWt4tJuprVMfvxc=
Subject key identifier: CD:B6:27:AD:A5:8D:B0:2D:28:9E:4B:2B:CD:5B:A0:D3:21:40:80:93
Authority key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
Certificate issuer: /CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Certificate serial: 01964F6C85F72EA6A5AD95F7E335E16C9B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
Manifest number: 0660
Signing time: Sat 19 Apr 2025 19:00:34 +0000
Manifest this update: Sat 19 Apr 2025 19:00:34 +0000
Manifest next update: Sun 20 Apr 2025 19:00:34 +0000
Files and hashes: 1: QL_SbwstE2mcNW7Di5bGqCXSG2o.crl (hash: GpLF8OHtHBscrNm6QV7NL2z3WM/aPGOdoH8yrW5OUHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:85:f7:2e:a6:a5:ad:95:f7:e3:35:e1:6c:9b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Validity
Not Before: Apr 19 19:00:34 2025 GMT
Not After : Apr 20 19:00:34 2025 GMT
Subject: CN=cdb627ada58db02d289e4b2bcd5ba0d321408093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:36:6b:03:f8:25:47:92:08:d1:97:b9:22:
49:cf:07:6f:ab:a8:75:84:b1:92:ec:53:71:ee:4c:
fd:7d:bd:c7:a5:ae:df:3e:7b:31:61:23:5a:b2:62:
6a:66:63:79:40:c2:4c:8a:2b:87:ad:be:27:66:5f:
d8:65:79:e6:d1:f1:c8:01:f6:b9:88:41:4f:00:73:
03:52:27:2e:b9:8f:b1:44:fd:eb:b7:cb:bb:d1:8d:
e9:07:de:53:50:05:ca:85:fa:db:69:89:40:df:3d:
d2:8a:27:47:c7:19:57:aa:55:d3:d8:48:db:87:19:
d5:4f:06:29:7c:f8:ad:60:32:16:3d:3e:e8:0e:38:
98:a9:e0:fa:09:06:83:8b:70:2e:b0:7b:74:b1:96:
3f:30:5d:81:bb:35:4c:57:eb:9a:b8:be:8b:be:c3:
20:b3:87:5b:af:46:f6:3f:40:93:e4:65:95:63:0f:
6e:72:e7:8b:cd:7d:57:ee:5f:3b:3d:5d:be:32:cb:
b7:6d:24:e2:6f:0f:aa:7e:7b:a1:72:df:04:75:28:
34:42:e3:38:3c:0c:d8:d3:56:ce:53:e3:91:ef:b7:
f1:03:ba:3d:65:fe:1d:d9:c1:4d:d7:c0:4e:3a:e3:
a1:31:fb:86:5e:e5:19:6b:3d:8f:1c:99:70:f2:87:
62:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B6:27:AD:A5:8D:B0:2D:28:9E:4B:2B:CD:5B:A0:D3:21:40:80:93
X509v3 Authority Key Identifier:
keyid:40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5a:d8:04:25:9f:6b:7b:3e:47:36:a7:1d:9b:ff:4e:af:6f:
ed:16:47:23:ce:e5:cc:c8:35:ad:bd:c9:20:fe:1f:6d:ea:48:
9a:c5:25:db:66:a8:68:ba:0a:fa:72:de:f2:e6:db:46:7b:d9:
72:cb:d0:3e:71:b1:00:06:c7:9a:3c:19:6b:4d:da:14:0e:10:
39:23:19:cc:50:ff:d2:88:7d:80:59:bc:a6:05:e9:a9:79:e4:
5c:e3:39:46:22:e6:f7:ae:67:ce:7e:f2:d8:29:62:0a:4b:d6:
12:97:32:f8:21:00:2e:6b:70:e3:41:08:93:7a:f8:1b:3f:4f:
00:00:aa:63:62:e7:66:75:71:06:8d:ca:c4:3f:f7:c5:48:3d:
6b:f0:9f:7a:f7:29:53:73:9e:7c:84:45:ea:d0:13:19:6a:34:
04:8b:4e:b1:10:a1:ae:19:28:eb:c5:f1:f2:ed:58:04:5c:71:
a5:06:39:f6:cc:35:9b:e5:71:5e:88:94:f6:55:64:84:41:f1:
45:56:c5:c4:7b:e7:56:24:f4:ca:83:c7:b1:0a:ba:ab:4b:73:
b4:d7:ec:10:85:db:e7:f8:7d:f0:d3:23:a7:ac:b5:d9:34:54:
a6:2b:ba:68:d2:5e:cc:cb:44:c5:e9:4a:69:d2:00:56:7c:70:
69:ca:b9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:17:21 2025 by rpki-client