Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
File: QL_SbwstE2mcNW7Di5bGqCXSG2o.mft (raw, json)
Hash identifier: mWPhT7lf/9VFPSCPCOgn+z25/W5qX/CUfNwgX1E0AnQ=
Subject key identifier: 27:BA:AB:6F:C3:60:93:88:AC:86:AB:13:0E:AF:E4:E7:7A:EB:31:92
Authority key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
Certificate issuer: /CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Certificate serial: 0198D47490652DB07561BB911F3B03C16105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
Manifest number: 07AE
Signing time: Sat 23 Aug 2025 01:04:25 +0000
Manifest this update: Sat 23 Aug 2025 01:04:25 +0000
Manifest next update: Sun 24 Aug 2025 01:04:25 +0000
Files and hashes: 1: QL_SbwstE2mcNW7Di5bGqCXSG2o.crl (hash: /mjE3Tx7Hh3a8Bh7/crO8+/I7aU8mhMQk/BrHxG5MyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:90:65:2d:b0:75:61:bb:91:1f:3b:03:c1:61:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Validity
Not Before: Aug 23 01:04:25 2025 GMT
Not After : Aug 24 01:04:25 2025 GMT
Subject: CN=27baab6fc3609388ac86ab130eafe4e77aeb3192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b6:bb:68:35:3a:23:28:88:09:56:ae:c0:53:
e0:1f:f9:be:aa:4b:cc:d7:18:a6:98:a0:14:4e:a1:
cd:0b:9a:d7:f4:df:c4:09:0c:83:30:18:cf:36:81:
6c:1d:1d:b8:00:27:e0:bd:c6:87:a1:2b:5b:c4:d2:
fb:d4:33:50:84:d0:4e:d1:2f:46:66:b1:7f:1e:bc:
e2:4c:5e:c6:fd:70:54:2b:08:e8:b4:3a:ab:e3:ae:
55:bb:fe:88:41:9d:f4:32:4f:ad:85:77:b7:df:41:
b3:ec:fd:fb:a5:8e:2c:4e:36:18:06:ae:b1:6c:a1:
cc:a2:b5:f9:41:90:39:9c:99:34:aa:44:95:f7:0c:
33:27:0c:2b:52:9b:4b:77:58:27:39:b3:c7:7a:60:
08:bc:d8:a4:89:62:45:37:b2:2f:53:0b:05:83:fd:
7d:f9:5f:98:fb:ca:8e:c8:64:20:0f:ed:bc:27:e7:
24:01:a7:2f:72:fc:b5:33:f1:3f:5d:c1:45:b4:b5:
49:f1:87:4e:75:b1:95:68:af:bc:30:4a:3d:96:4c:
bb:98:28:64:e7:5d:d6:95:f4:bb:f6:6e:d9:2c:58:
58:37:14:c1:ed:c3:3f:f2:2f:45:32:ad:4f:c1:3f:
b9:3f:bd:14:01:8f:fb:7c:23:af:24:28:f9:e6:30:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BA:AB:6F:C3:60:93:88:AC:86:AB:13:0E:AF:E4:E7:7A:EB:31:92
X509v3 Authority Key Identifier:
keyid:40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c1:94:9f:2b:4e:6a:c1:67:81:74:a4:9f:81:df:40:af:18:
7c:3f:4e:ef:c2:f9:5e:a9:26:1c:27:2a:9d:9b:68:80:12:b8:
7b:51:0b:70:d0:bd:13:a8:17:ff:39:22:bb:6a:e1:44:f9:9d:
c6:09:b4:9a:3c:70:d4:91:8e:dc:72:99:b7:8e:60:ce:35:6b:
2b:a2:dd:02:68:09:4d:b9:40:66:81:b8:36:4f:05:3b:64:fd:
a3:c7:b0:c6:d8:46:9c:1d:5d:2b:e4:c8:0d:12:e5:62:f2:58:
31:84:a9:36:52:82:88:15:b9:2c:c1:82:46:da:10:35:21:e0:
72:39:71:d3:7e:f9:d9:ef:58:f0:15:3d:ae:f8:0b:c7:6d:98:
85:03:9e:9a:c6:08:b3:4c:f6:3b:bf:08:21:33:c3:be:0d:a7:
c5:f8:ad:6e:ac:e4:8d:34:ae:af:94:1b:38:fb:70:e7:0f:40:
29:98:a2:b8:69:4f:57:d1:1f:94:51:d2:0c:23:f3:45:80:53:
86:3f:a2:66:ef:ad:87:ea:b3:87:57:9e:c2:b8:b9:98:c0:1d:
51:69:a2:c2:86:0c:d6:a0:33:86:c3:f4:b5:aa:c4:fd:4c:40:
82:1a:0b:f8:38:99:b1:9f:19:f8:74:11:3f:82:67:36:b1:db:
54:dd:eb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:54 2025 by rpki-client