Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
File: QL_SbwstE2mcNW7Di5bGqCXSG2o.mft (raw, json)
Hash identifier: QzR5u2SvUgVfGM5um5jQ338o80H4f39f05NgdR2qH+Q=
Subject key identifier: BE:62:A5:1F:75:B2:1F:B8:65:F4:C8:74:31:C8:70:57:2A:87:53:6E
Authority key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
Certificate issuer: /CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Certificate serial: 0199FBEBA3E284E1D2722916FAF983F57567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
Manifest number: 0847
Signing time: Sun 19 Oct 2025 10:02:28 +0000
Manifest this update: Sun 19 Oct 2025 10:02:28 +0000
Manifest next update: Mon 20 Oct 2025 10:02:28 +0000
Files and hashes: 1: QL_SbwstE2mcNW7Di5bGqCXSG2o.crl (hash: v6FuG0xvgjYjT3im3uuRrtPSAS42eWQu6S3BDZVrso4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a3:e2:84:e1:d2:72:29:16:fa:f9:83:f5:75:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Validity
Not Before: Oct 19 10:02:28 2025 GMT
Not After : Oct 20 10:02:28 2025 GMT
Subject: CN=be62a51f75b21fb865f4c87431c870572a87536e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:8d:62:66:3b:26:60:ac:7e:f7:81:c8:0f:
f6:a7:60:dd:9d:91:72:5d:ac:98:80:a6:cc:6c:32:
4b:f6:92:6d:cf:93:e3:3b:84:b4:40:51:26:19:6e:
07:14:d6:c1:d8:ac:a2:29:fa:c0:33:30:2a:11:6c:
fe:ba:ff:0c:ea:56:b4:06:f6:45:0a:a2:5a:83:33:
1a:98:59:32:ca:85:7f:20:78:9c:fe:58:c1:ce:ec:
dd:a8:56:d0:8d:dd:60:a5:d7:6f:fd:e4:dc:9e:e0:
f8:f6:86:0b:c5:e1:f6:bd:05:d6:90:6e:73:20:e7:
77:21:2e:8e:81:a4:dc:d0:03:73:9c:a2:78:7a:8c:
f8:44:86:22:4c:47:b8:d9:e4:91:24:1d:35:83:64:
41:aa:25:4c:0e:76:3c:f0:41:6c:49:b2:26:b2:7f:
4d:4f:14:53:99:44:94:04:d9:ce:0c:9e:6c:d1:d3:
c7:e4:0a:11:e9:ec:ba:82:11:96:d8:66:75:a2:dd:
14:9e:24:17:1e:c0:8f:8b:cf:d2:cf:bc:73:c0:57:
8a:38:5d:8c:23:53:35:de:b0:23:8d:ac:dc:2b:c5:
77:15:94:c1:92:c7:f3:72:47:c4:ee:8f:52:a8:93:
56:43:91:9e:70:6a:ec:12:73:10:7b:86:93:52:82:
e7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:62:A5:1F:75:B2:1F:B8:65:F4:C8:74:31:C8:70:57:2A:87:53:6E
X509v3 Authority Key Identifier:
keyid:40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6e:ab:21:7f:f4:2d:9c:ce:51:b1:ae:22:1d:fc:96:ad:dd:
23:7b:f4:3d:2f:bf:9c:b6:2d:85:1a:54:03:eb:f1:cd:b4:ed:
14:b3:0b:bd:18:7f:6d:b9:ac:75:24:dc:99:38:b0:0a:b1:6e:
40:c0:c4:73:13:15:59:d8:c3:86:b6:a6:48:26:1b:b7:d5:7c:
3a:42:8d:d7:2b:46:d6:a4:f6:ed:9f:f9:1e:73:e9:fd:17:1a:
4a:4b:91:fc:1f:3a:aa:00:c7:71:80:d6:35:ce:18:a9:14:c0:
ed:20:3c:d6:41:2e:72:f8:54:14:1d:e9:ff:9a:d7:eb:47:46:
5c:5d:42:eb:62:31:8b:3b:eb:24:5c:93:9b:e7:0d:53:c5:4b:
b7:66:f9:fd:dd:3e:4c:9f:da:72:8e:5b:f7:75:f3:5e:4d:ed:
80:8d:19:41:c3:f3:af:14:c1:6e:d2:09:0c:1c:58:2e:e0:f4:
43:6d:c4:62:46:8b:f3:28:3c:41:a5:ea:24:93:47:4b:ea:aa:
a5:76:ab:14:f3:56:80:b7:fe:26:2f:65:f9:b9:c7:73:b7:ed:
b9:94:4b:df:3c:38:e9:46:b3:6e:04:b8:10:8a:cc:d0:85:27:
da:93:00:d5:2e:5a:dd:91:ec:15:08:b5:81:e9:13:ce:8a:11:
e7:e5:d5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:06 2025 by rpki-client