Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
File: QL_e36qTma09VTH6RxoSs7_jfhI.mft (raw, json)
Hash identifier: nBus6LuLLwU6oOX5Wzu30EjHBgI/xgWIMXENGOhWP5c=
Subject key identifier: D9:B2:35:15:AA:D9:7A:33:6E:DB:44:27:87:60:77:A3:F9:D5:C9:06
Authority key identifier: 40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
Certificate issuer: /CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Certificate serial: 01974C68D24CC8FDD6B4E120D7AE07E73AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
Manifest number: 089F
Signing time: Sat 07 Jun 2025 22:00:27 +0000
Manifest this update: Sat 07 Jun 2025 22:00:27 +0000
Manifest next update: Sun 08 Jun 2025 22:00:27 +0000
Files and hashes: 1: QL_e36qTma09VTH6RxoSs7_jfhI.crl (hash: T/AyarcaJC+uzeDfwlIvTMRrzabYHeX0yE14tFzUGPY=)
2: jSlm79fFu0VgJBsIaC81oVf4nGI.roa (hash: 8IYkRLo3mCrHlEs7aBNerIrNbkB27E7Mc7prSDZuZVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:d2:4c:c8:fd:d6:b4:e1:20:d7:ae:07:e7:3a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Validity
Not Before: Jun 7 22:00:27 2025 GMT
Not After : Jun 8 22:00:27 2025 GMT
Subject: CN=d9b23515aad97a336edb4427876077a3f9d5c906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1f:80:2d:d3:db:77:a6:2b:7e:54:0d:40:f1:
4a:fd:b6:5f:5c:54:dc:6b:2f:3a:d8:5c:be:90:9c:
a7:c9:b9:ce:66:6c:a8:c9:99:c1:d4:eb:45:03:61:
7a:58:9c:ed:7e:7b:22:d8:da:64:96:b1:fc:a0:cc:
42:ac:69:72:7b:bd:72:82:2f:bc:3d:fe:be:45:ea:
25:4a:e3:a4:ba:5f:48:02:97:da:47:79:cc:f2:a7:
00:66:cf:ea:d2:04:de:75:6c:6f:cf:8c:fe:12:38:
dd:c2:14:49:f1:43:59:54:b6:aa:c2:b7:73:c2:78:
00:3b:6d:72:af:93:b0:39:e3:1b:f2:86:03:0f:ce:
3c:90:d7:21:37:04:bf:12:df:44:b3:06:c5:f8:0b:
dc:88:67:46:33:43:04:08:5e:d5:cc:7b:9b:36:de:
76:a7:99:bd:3a:f0:38:84:34:40:c1:5f:d7:cd:35:
23:8c:44:3c:61:96:7d:eb:ee:95:d7:63:d2:c2:fb:
e8:a4:47:29:23:3f:e4:a4:52:aa:f2:25:27:c6:73:
a6:62:4f:dd:fa:47:c2:7a:8f:5c:56:2c:26:00:de:
44:cf:72:70:b0:2c:5e:61:fb:b5:76:ac:f4:af:31:
41:ef:3a:9e:ca:a3:f4:0d:46:77:e8:7f:3c:13:f8:
c0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B2:35:15:AA:D9:7A:33:6E:DB:44:27:87:60:77:A3:F9:D5:C9:06
X509v3 Authority Key Identifier:
keyid:40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9e:d4:7a:6e:63:b3:7f:d1:d9:e6:59:27:a0:0f:c7:8b:f5:
e5:3e:55:85:60:d0:f4:e0:fe:47:96:46:4f:e9:e0:4f:76:02:
12:ac:cd:1b:45:ac:30:7d:6e:91:8c:56:91:9a:d3:db:a0:da:
30:02:76:83:0d:ba:b2:68:0d:09:5b:21:b0:ee:a2:a3:ef:3e:
ec:68:86:2f:e7:04:e2:08:83:8c:6d:5c:17:cb:c3:65:81:ea:
1e:0f:19:ea:37:a5:14:bd:9b:f6:9d:c5:3b:7a:d2:9c:4f:53:
20:d1:a4:fe:98:38:31:39:ba:34:4f:48:e8:c7:94:ad:84:ea:
fd:ae:60:43:87:dd:b0:3b:f2:ca:b3:7a:b9:96:22:85:da:70:
15:82:94:11:77:0c:90:2a:6c:0a:f8:cd:6b:bd:af:1e:9e:bb:
81:86:b1:72:ad:84:a3:22:d0:6f:ba:c6:0e:f2:85:12:2d:11:
1a:3c:6e:05:13:c4:fc:60:71:e8:f5:16:16:f1:42:11:b4:60:
6d:4b:c2:c6:45:be:30:e5:fc:2a:7a:89:78:c5:4d:89:0d:f9:
bb:06:69:34:d3:ea:64:8d:bc:c4:26:d6:fb:b6:48:bb:99:5a:
e8:db:a8:18:19:43:03:ba:d5:b9:a5:b2:87:e2:e9:aa:b9:bc:
98:13:70:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMaNJMyP3WtOEg164H5zrVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYmZkZWRmYWE5Mzk5YWQzZDU1MzFmYTQ3MWExMmIzYmZl
MzdlMTIwHhcNMjUwNjA3MjIwMDI3WhcNMjUwNjA4MjIwMDI3WjAzMTEwLwYDVQQD
EyhkOWIyMzUxNWFhZDk3YTMzNmVkYjQ0Mjc4NzYwNzdhM2Y5ZDVjOTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8R+ALdPbd6YrflQNQPFK/bZfXFTc
ay862Fy+kJynybnOZmyoyZnB1OtFA2F6WJztfnsi2NpklrH8oMxCrGlye71ygi+8
Pf6+ReolSuOkul9IApfaR3nM8qcAZs/q0gTedWxvz4z+EjjdwhRJ8UNZVLaqwrdz
wngAO21yr5OwOeMb8oYDD848kNchNwS/Et9EswbF+AvciGdGM0MECF7VzHubNt52
p5m9OvA4hDRAwV/XzTUjjEQ8YZZ96+6V12PSwvvopEcpIz/kpFKq8iUnxnOmYk/d
+kfCeo9cViwmAN5Ez3JwsCxeYfu1dqz0rzFB7zqeyqP0DUZ36H88E/jA2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmyNRWq2XozbttEJ4dgd6P51ckGMB8GA1UdIwQY
MBaAFEC/3t+qk5mtPVUx+kcaErO/434SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUxfZTM2cVRtYTA5VlRINlJ4b1NzN19qZmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kYjU1ZWMtMzU3Ny00MjFmLTg5MTYt
OGU5ODUxYjdmODExLzEvUUxfZTM2cVRtYTA5VlRINlJ4b1NzN19qZmhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9kYjU1ZWMtMzU3Ny00MjFmLTg5MTYtOGU5ODUxYjdmODEx
LzEvUUxfZTM2cVRtYTA5VlRINlJ4b1NzN19qZmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJ7Uem5j
s3/R2eZZJ6APx4v15T5VhWDQ9OD+R5ZGT+ngT3YCEqzNG0WsMH1ukYxWkZrT26Da
MAJ2gw26smgNCVshsO6io+8+7GiGL+cE4giDjG1cF8vDZYHqHg8Z6jelFL2b9p3F
O3rSnE9TINGk/pg4MTm6NE9I6MeUrYTq/a5gQ4fdsDvyyrN6uZYihdpwFYKUEXcM
kCpsCvjNa72vHp67gYaxcq2EoyLQb7rGDvKFEi0RGjxuBRPE/GBx6PUWFvFCEbRg
bUvCxkW+MOX8KnqJeMVNiQ35uwZpNNPqZI28xCbW+7ZIu5la6NuoGBlDA7rVuaWy
h+Lpqrm8mBNwxw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:41:53 2025 by rpki-client