Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
File: QL_SbwstE2mcNW7Di5bGqCXSG2o.mft (raw, json)
Hash identifier: eOa2H0Ieyj4/PnXMWyugCwLesfSytT22yLfXXUtP6SE=
Subject key identifier: 00:88:5A:BD:9C:30:50:28:11:ED:4C:4F:14:39:A4:25:89:28:C6:D4
Authority key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
Certificate issuer: /CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Certificate serial: 01975045C3A5DF260E0356EB6055DED8853B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
Manifest number: 06E5
Signing time: Sun 08 Jun 2025 16:00:38 +0000
Manifest this update: Sun 08 Jun 2025 16:00:38 +0000
Manifest next update: Mon 09 Jun 2025 16:00:38 +0000
Files and hashes: 1: QL_SbwstE2mcNW7Di5bGqCXSG2o.crl (hash: ehaAd2UcCu4RdldfYsBovnVJTpxTfF42ORzrsSzq6nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:c3:a5:df:26:0e:03:56:eb:60:55:de:d8:85:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Validity
Not Before: Jun 8 16:00:38 2025 GMT
Not After : Jun 9 16:00:38 2025 GMT
Subject: CN=00885abd9c30502811ed4c4f1439a4258928c6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:51:67:0c:c7:80:cd:1a:80:c2:03:2d:c8:
57:c7:5e:b2:1a:46:37:25:4c:87:18:9c:86:d8:6a:
a7:2b:5a:99:02:65:02:85:b2:52:4c:10:19:6d:62:
3c:35:4d:76:85:71:0f:c1:7b:b1:2d:b7:13:49:3a:
d2:16:95:38:ef:04:84:8f:c4:f9:d3:ac:d1:45:fb:
86:56:43:55:b3:95:e5:eb:64:1b:44:11:e1:23:36:
78:2e:f3:72:54:58:6e:35:29:18:f9:a1:62:f9:a9:
43:42:a3:a9:99:b9:d4:85:9c:2f:06:3d:76:0a:5c:
5b:8e:f8:6e:86:ca:e7:17:f0:87:fc:a3:ce:e3:c0:
9a:9e:30:5e:a2:62:67:38:20:b9:5e:47:d2:6e:0b:
e3:e7:f0:1b:98:6d:9e:7f:18:3f:b1:85:f6:20:21:
b8:e7:e4:89:38:56:f0:2b:5c:ad:40:75:3b:db:3f:
c6:23:1d:82:78:a9:0c:d1:fa:0b:e6:a9:d8:1c:60:
ac:54:54:d2:7a:11:ff:91:64:c3:40:94:85:7e:5f:
50:d4:d9:96:0d:e6:78:c9:2d:ec:40:98:45:ac:29:
44:04:03:8f:0c:7d:1d:a2:76:9f:75:23:5b:e2:2b:
c8:2f:7b:da:ed:6b:d5:15:8b:9f:0b:57:98:90:d6:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:88:5A:BD:9C:30:50:28:11:ED:4C:4F:14:39:A4:25:89:28:C6:D4
X509v3 Authority Key Identifier:
keyid:40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d1:56:e9:0e:54:39:d4:bd:f1:6e:23:ef:74:ce:c1:67:b7:
63:33:d7:6a:8e:28:21:ca:e7:b9:9e:b6:38:5f:17:cf:23:16:
4b:3b:20:1e:99:b6:17:91:c4:31:21:1a:e2:56:ae:1f:10:fb:
c4:38:98:40:2e:ea:b7:45:cf:b9:b7:c5:0e:c2:66:ca:16:a3:
ba:59:ff:b1:6e:9f:d5:bb:12:4e:9e:34:da:9f:4b:b2:06:c7:
c9:27:cd:e3:21:4a:51:b2:12:d0:d1:db:d2:c9:39:9e:62:4b:
b4:e4:9d:a1:e3:23:b0:f1:e0:67:05:3d:74:97:bd:86:e7:10:
6d:13:3a:98:f4:b5:cb:13:15:9d:28:32:7a:b4:ee:93:85:68:
b2:b0:66:1c:0b:d5:3b:1c:fa:2e:77:f3:78:8e:41:c5:7f:2a:
63:cd:0c:8a:6d:95:83:ef:c7:5c:45:89:f0:56:af:e8:69:71:
9b:95:a4:30:52:fb:2c:d9:93:29:c7:ee:aa:52:76:48:ab:1d:
9c:2a:a8:2b:06:fb:ef:c9:a6:b6:7d:e7:43:ad:f2:dc:10:1f:
35:1d:b6:f2:48:2e:b3:db:f9:50:c1:05:fd:20:c9:84:27:72:
c9:5c:62:fe:c6:19:99:d4:0e:84:6a:53:92:28:32:d6:25:8f:
94:9d:60:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRcOl3yYOA1brYFXe2IU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYmZkMjZmMGIyZDEzNjk5YzM1NmVjMzhiOTZjNmE4MjVk
MjFiNmEwHhcNMjUwNjA4MTYwMDM4WhcNMjUwNjA5MTYwMDM4WjAzMTEwLwYDVQQD
EygwMDg4NWFiZDljMzA1MDI4MTFlZDRjNGYxNDM5YTQyNTg5MjhjNmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFBRZwzHgM0agMIDLchXx16yGkY3
JUyHGJyG2GqnK1qZAmUChbJSTBAZbWI8NU12hXEPwXuxLbcTSTrSFpU47wSEj8T5
06zRRfuGVkNVs5Xl62QbRBHhIzZ4LvNyVFhuNSkY+aFi+alDQqOpmbnUhZwvBj12
ClxbjvhuhsrnF/CH/KPO48CanjBeomJnOCC5XkfSbgvj5/AbmG2efxg/sYX2ICG4
5+SJOFbwK1ytQHU72z/GIx2CeKkM0foL5qnYHGCsVFTSehH/kWTDQJSFfl9Q1NmW
DeZ4yS3sQJhFrClEBAOPDH0donafdSNb4ivIL3va7WvVFYufC1eYkNbHJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACIWr2cMFAoEe1MTxQ5pCWJKMbUMB8GA1UdIwQY
MBaAFEC/0m8LLRNpnDVuw4uWxqgl0htqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUxfU2J3c3RFMm1jTlc3RGk1YkdxQ1hTRzJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zMTViNGQtNmNlYi00MDk4LWJmZDIt
NTA5M2M1MmUwMmNlLzEvUUxfU2J3c3RFMm1jTlc3RGk1YkdxQ1hTRzJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zMTViNGQtNmNlYi00MDk4LWJmZDItNTA5M2M1MmUwMmNl
LzEvUUxfU2J3c3RFMm1jTlc3RGk1YkdxQ1hTRzJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9FW6Q5U
OdS98W4j73TOwWe3YzPXao4oIcrnuZ62OF8XzyMWSzsgHpm2F5HEMSEa4lauHxD7
xDiYQC7qt0XPubfFDsJmyhajuln/sW6f1bsSTp402p9LsgbHySfN4yFKUbIS0NHb
0sk5nmJLtOSdoeMjsPHgZwU9dJe9hucQbRM6mPS1yxMVnSgyerTuk4VosrBmHAvV
Oxz6LnfzeI5BxX8qY80Mim2Vg+/HXEWJ8Fav6Glxm5WkMFL7LNmTKcfuqlJ2SKsd
nCqoKwb778mmtn3nQ63y3BAfNR228kgus9v5UMEF/SDJhCdyyVxi/sYZmdQOhGpT
kigy1iWPlJ1gkw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:23:07 2025 by rpki-client