Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
File: QL_SbwstE2mcNW7Di5bGqCXSG2o.mft (raw, json)
Hash identifier: 77kg/BU1UtY/+R/Um/H+V4jLCOEVNpH63q2+bQl7H78=
Subject key identifier: D8:A2:FB:74:5C:E8:B9:81:FA:FF:2A:93:D7:E4:07:AC:09:02:F5:88
Authority key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
Certificate issuer: /CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Certificate serial: 01991808C703AF3932445C2E0448CCADABBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
Manifest number: 07D1
Signing time: Fri 05 Sep 2025 04:00:52 +0000
Manifest this update: Fri 05 Sep 2025 04:00:52 +0000
Manifest next update: Sat 06 Sep 2025 04:00:52 +0000
Files and hashes: 1: QL_SbwstE2mcNW7Di5bGqCXSG2o.crl (hash: /nKPzOBzA3afpybtBR3NFKKBEbWUyOfkxfCYKX5hvGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:08:c7:03:af:39:32:44:5c:2e:04:48:cc:ad:ab:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Validity
Not Before: Sep 5 04:00:52 2025 GMT
Not After : Sep 6 04:00:52 2025 GMT
Subject: CN=d8a2fb745ce8b981faff2a93d7e407ac0902f588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d2:e4:98:ad:29:ff:04:b6:68:51:bb:0a:f5:
e2:2a:0d:67:09:b2:28:88:93:fb:c2:9d:6e:b7:20:
82:b3:7d:4f:2d:db:81:e1:b2:e6:8c:fa:13:7c:b6:
83:a3:08:ca:92:a6:e8:b0:a6:d6:e4:35:fe:b0:8a:
80:dd:01:56:65:37:f3:a2:c5:83:21:b8:8c:53:d4:
78:57:5e:c0:02:57:2e:52:19:72:64:f0:a2:16:31:
2d:f5:56:09:5b:4e:c4:2b:30:39:55:88:9a:13:9c:
dc:a9:27:c6:9f:c9:42:5c:0b:f6:59:75:8f:00:c5:
e5:4e:21:c3:ca:d3:f8:e7:f8:4d:07:e5:a9:c8:0f:
e2:cb:80:45:13:c5:98:13:73:b1:f5:5f:95:6e:34:
df:44:f0:61:af:a1:06:7a:3f:2e:6b:50:30:0d:44:
91:da:41:73:f4:73:ac:b9:31:8e:81:0d:2c:14:af:
4d:14:f2:f7:3d:58:e2:e6:17:03:50:93:22:04:76:
13:48:9a:49:09:64:b7:6c:eb:d8:94:59:45:00:09:
2a:62:4b:f6:2a:53:b6:72:f4:28:af:19:9e:f0:2f:
30:e3:de:d1:9b:af:ee:0f:1b:4c:dc:f0:86:12:18:
2b:d7:bc:7e:12:74:18:25:73:90:ea:ef:4e:4c:a3:
16:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A2:FB:74:5C:E8:B9:81:FA:FF:2A:93:D7:E4:07:AC:09:02:F5:88
X509v3 Authority Key Identifier:
keyid:40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:63:7d:4b:70:e5:68:69:41:b0:6a:e3:91:35:65:e9:15:11:
39:a1:00:2e:f8:2d:cf:6b:66:8e:27:cb:91:e7:b7:0a:df:c1:
bb:5b:cf:6e:b2:cc:97:2e:c7:ab:7a:c6:54:46:57:93:c8:cd:
13:85:0e:e4:3e:e2:2e:6e:cf:d5:4a:73:40:88:7a:0a:c0:67:
f5:86:b8:ef:63:b2:24:44:f9:df:24:de:d0:0d:93:29:2d:e8:
2a:d1:d8:69:41:6e:cf:8d:1b:2c:80:63:2a:7e:ef:7d:1f:b9:
53:f1:fa:8a:e4:c1:9e:20:2c:dd:f9:07:50:b8:36:42:6f:d1:
4c:5a:62:f9:39:b5:bb:6f:6f:cf:00:6e:7d:ea:d3:3b:6c:75:
05:33:43:fb:3c:37:34:e3:20:3d:5e:44:46:90:d4:d5:df:46:
54:bb:b2:ea:f2:2d:01:eb:ef:16:f0:e0:fe:14:5a:90:7b:53:
2a:a4:45:27:69:e7:3b:a1:24:f6:02:4d:6d:23:f1:09:1c:8d:
59:10:8e:d3:ea:4f:c0:4d:dd:f2:8a:56:24:fd:4a:d4:2a:41:
d5:9d:2e:65:cf:2a:2a:35:41:5e:fd:31:ee:6c:ab:d1:b8:ec:
47:31:e6:d4:75:0f:63:c5:3c:e9:4b:85:2a:72:7d:ef:f5:37:
e1:4c:4c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:10:21 2025 by rpki-client