
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
File: QBMclDl36gqT787s000dXRyxgq8.mft (raw, json)
Hash identifier: 1i2LH32WdwIWHRB5bNI2wvUbVvicq4Dsu3gWLVhAUT8=
Subject key identifier: 13:46:EB:F5:79:B7:B1:DC:78:69:7D:4E:4C:8B:9B:87:DE:DD:3D:ED
Authority key identifier: 40:13:1C:94:39:77:EA:0A:93:EF:CE:EC:D3:4D:1D:5D:1C:B1:82:AF
Certificate issuer: /CN=40131c943977ea0a93efceecd34d1d5d1cb182af
Certificate serial: 0197B74557F00C1DB41C858DA0C21BE0D32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
Manifest number: 0E62
Signing time: Sat 28 Jun 2025 16:01:04 +0000
Manifest this update: Sat 28 Jun 2025 16:01:04 +0000
Manifest next update: Sun 29 Jun 2025 16:01:04 +0000
Files and hashes: 1: QBMclDl36gqT787s000dXRyxgq8.crl (hash: FUeFXh4SpOTEWeGNTsLHrpYeR5avXnrUW8eFHEhcj+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:57:f0:0c:1d:b4:1c:85:8d:a0:c2:1b:e0:d3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40131c943977ea0a93efceecd34d1d5d1cb182af
Validity
Not Before: Jun 28 16:01:04 2025 GMT
Not After : Jun 29 16:01:04 2025 GMT
Subject: CN=1346ebf579b7b1dc78697d4e4c8b9b87dedd3ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:e9:03:5c:ea:cb:63:a3:2b:91:ec:8e:5b:
7e:a1:d3:68:1b:4c:14:4f:0e:e2:76:08:64:28:eb:
8e:35:e2:1e:0f:ab:ff:cf:be:8d:6b:19:71:dc:87:
49:4d:12:4e:fc:8a:1b:73:b7:c1:ba:9b:ef:52:51:
f3:c6:fd:8f:df:3a:f7:e5:12:59:0c:bc:bc:4c:3d:
64:7a:2a:fb:5f:b7:80:af:4a:bf:cb:ed:b3:66:61:
24:60:b0:98:67:4f:93:4d:ac:14:89:e8:82:42:5c:
ba:0a:ee:85:61:05:12:60:59:9a:b3:ca:1a:47:86:
60:f1:24:bc:83:d0:a3:56:9d:ff:61:5b:af:03:96:
2f:9e:b6:19:20:b6:3b:8e:1a:e1:d8:9b:ea:31:a7:
45:72:fb:37:95:9f:91:b4:14:84:a0:9a:c7:b2:69:
91:09:55:b0:74:8b:24:42:6a:f1:82:07:4b:9b:a3:
96:cc:8f:1a:82:32:21:82:a0:0b:26:34:14:c9:52:
82:2e:58:b0:5b:2a:9c:7b:cd:b5:5f:13:7f:2b:f8:
9e:33:7d:91:d9:12:e2:e8:4c:9e:61:91:69:ad:6f:
9e:55:8a:4a:46:db:d9:1a:ff:68:ba:94:70:d3:00:
30:ef:a9:16:e9:75:00:dd:f4:2f:bf:42:61:54:cd:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:46:EB:F5:79:B7:B1:DC:78:69:7D:4E:4C:8B:9B:87:DE:DD:3D:ED
X509v3 Authority Key Identifier:
keyid:40:13:1C:94:39:77:EA:0A:93:EF:CE:EC:D3:4D:1D:5D:1C:B1:82:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:2f:f2:76:2c:76:58:40:00:dc:ab:af:37:23:d4:8c:07:df:
37:ab:42:93:04:41:b5:89:4e:2c:e3:71:e8:1f:fc:d2:ff:cb:
db:bd:b7:0c:b9:ef:94:f3:b2:e3:59:9f:09:04:c4:f5:43:e1:
02:33:09:96:1d:f6:9c:9a:6e:4a:1b:65:4c:63:9f:86:ac:93:
d4:ce:fe:e4:37:c5:22:69:09:93:2c:b5:d0:fe:5a:15:e5:7e:
e6:59:b2:98:ae:d4:ce:7e:54:a2:8d:08:d6:87:d6:44:a2:0e:
1a:46:22:90:d7:b4:7c:f2:7d:39:9b:a5:1c:50:c9:d4:1e:85:
bd:c7:23:d4:22:85:b1:6b:af:ac:96:8a:d3:ab:5e:45:7c:f1:
a6:e3:50:dd:bd:00:d0:3b:e2:f6:9b:47:94:e1:70:96:24:a5:
5e:e3:68:40:e3:9e:18:9e:c1:16:8c:3d:ec:b8:72:09:cd:6d:
b1:e2:6f:71:43:e5:94:a4:13:9f:11:0f:08:09:05:84:e7:49:
ea:9b:a4:d3:6e:a9:78:cf:7b:31:cb:21:5d:e2:33:9b:9e:ab:
9c:90:b6:0d:1e:e1:a1:3d:73:0f:8b:56:83:fd:88:1c:de:04:
50:5a:e2:4d:23:8f:88:78:5e:dc:a2:8a:63:95:a1:44:fd:6d:
76:45:d5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:26 2025 by rpki-client