Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
File: QL_SbwstE2mcNW7Di5bGqCXSG2o.mft (raw, json)
Hash identifier: EcvQfguFmlIl6Bn7Fth4Zl2j+Me+NKZmiKw7fUOvTAw=
Subject key identifier: 7B:62:28:C7:27:2B:0C:90:A7:4C:75:1C:EF:80:61:F7:65:49:E6:BB
Authority key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
Certificate issuer: /CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Certificate serial: 019A71B7C67E98D8DD041CD1354CB8C036E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
Manifest number: 0884
Signing time: Tue 11 Nov 2025 07:01:00 +0000
Manifest this update: Tue 11 Nov 2025 07:01:00 +0000
Manifest next update: Wed 12 Nov 2025 07:01:00 +0000
Files and hashes: 1: QL_SbwstE2mcNW7Di5bGqCXSG2o.crl (hash: 1qUH5Qj4vLSbU+D4x9mkNRPxCeUMAxEFopaZSPMqcLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c6:7e:98:d8:dd:04:1c:d1:35:4c:b8:c0:36:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Validity
Not Before: Nov 11 07:01:00 2025 GMT
Not After : Nov 12 07:01:00 2025 GMT
Subject: CN=7b6228c7272b0c90a74c751cef8061f76549e6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:42:44:1f:ab:27:cb:ee:c6:44:c1:c9:f9:45:
ad:5a:95:a8:81:c6:5c:31:d9:46:74:59:a5:9c:00:
4e:ea:f6:10:86:33:bf:83:6a:82:d8:d4:33:1b:39:
e7:55:e8:f0:db:4d:42:f1:05:5f:7f:bf:b9:92:c1:
4d:5b:5a:41:22:45:06:dd:3f:50:0f:93:5f:de:ae:
6e:6d:b8:eb:c5:44:c0:9e:11:27:54:7d:5d:58:c4:
52:cf:b5:0e:dc:a0:62:3d:00:aa:9e:7a:8b:e5:f4:
7d:17:77:5c:c3:6a:17:fd:fe:02:2c:f1:a3:b6:56:
5d:b8:eb:d5:9e:7e:12:19:f2:a4:da:c1:96:80:2d:
6c:50:bf:82:fa:c9:d1:c6:76:97:88:7f:74:3c:8c:
46:08:1a:ad:d5:f5:33:02:2b:94:19:3f:87:c6:89:
71:6c:24:00:60:97:5d:cf:3a:3e:ab:1f:24:a8:12:
d9:86:a9:7a:4f:15:66:eb:07:bb:98:f2:f8:fc:bb:
f5:b0:f3:b3:40:50:e6:7e:01:53:cc:10:f8:3c:e5:
0f:e1:19:40:4b:03:a4:15:80:ba:b1:a7:df:4d:38:
7d:97:ee:b0:52:5a:16:1a:6f:f2:a1:a7:95:38:44:
03:ae:f5:3e:c1:27:b9:57:bc:b8:c8:be:b6:26:e5:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:62:28:C7:27:2B:0C:90:A7:4C:75:1C:EF:80:61:F7:65:49:E6:BB
X509v3 Authority Key Identifier:
keyid:40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:19:70:69:c4:7e:dc:5e:99:74:b3:8a:44:3e:05:73:6a:46:
fd:a6:d2:55:d1:36:98:c1:1d:60:03:93:a8:7a:a6:86:c0:e8:
ec:81:ec:91:0d:07:78:47:af:34:66:57:8b:e4:56:d9:8a:35:
0e:c0:d3:04:6e:31:e1:ea:77:3e:f2:ad:2a:5b:04:ab:33:ba:
e0:0a:2c:82:7a:69:c0:9f:a8:49:b5:16:52:56:59:a2:37:54:
cf:d5:91:65:88:37:54:3d:7c:23:01:73:6e:ae:aa:16:5f:49:
a1:48:fa:26:07:0c:72:21:82:90:8c:c7:39:ba:41:a1:3a:d3:
e4:60:35:05:79:8e:64:25:3d:3e:44:43:43:b5:e5:24:ae:ce:
1e:fa:fe:f5:a7:54:58:e1:0f:f4:57:0a:74:76:93:26:0b:2e:
62:f7:7e:f9:34:77:fc:ee:28:62:94:d7:cb:23:0b:b4:0f:ed:
e1:26:0b:ef:d6:2c:a5:7c:1f:e9:34:22:8a:6d:43:04:04:5d:
ab:58:53:a7:b3:96:14:73:6f:97:f4:28:17:b2:0d:71:ca:24:
1a:e6:53:93:fe:9d:aa:c2:86:b7:c9:da:e3:98:b5:df:27:58:
c7:cf:d2:d1:24:2f:01:53:95:c2:de:9a:53:9e:3e:df:d5:a4:
b7:9e:bc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:45 2025 by rpki-client