Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
File: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft (raw, json)
Hash identifier: JS6vZ0SxAwEJcUCgE4p/U/jI9Xcc1Do5joOvVssYOMk=
Subject key identifier: 60:38:55:94:C3:9E:45:35:E5:87:14:6B:25:43:68:07:21:E0:45:85
Authority key identifier: 41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
Certificate issuer: /CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Certificate serial: 0197B88FE5D12510C6D8E2C108889A3FE57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
Manifest number: 0BC5
Signing time: Sat 28 Jun 2025 22:02:07 +0000
Manifest this update: Sat 28 Jun 2025 22:02:07 +0000
Manifest next update: Sun 29 Jun 2025 22:02:07 +0000
Files and hashes: 1: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl (hash: cqYURRjiBFFDsNLVfkaNuGNg9B6SDWjgdc4+eq9rA4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:e5:d1:25:10:c6:d8:e2:c1:08:88:9a:3f:e5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Validity
Not Before: Jun 28 22:02:07 2025 GMT
Not After : Jun 29 22:02:07 2025 GMT
Subject: CN=60385594c39e4535e587146b2543680721e04585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:3d:ac:29:15:98:32:83:39:07:27:ad:72:
95:a7:94:75:75:8d:9e:de:fd:61:55:9e:aa:21:9e:
15:52:ca:01:bd:a5:f2:89:41:df:22:37:a9:73:42:
4b:b1:11:7d:0d:a0:69:05:2d:21:00:47:83:3e:b9:
7e:4c:6e:12:cf:93:4a:98:2d:80:4d:28:d7:80:71:
d3:e7:81:b1:38:8a:cc:1e:2e:98:e2:5a:6b:10:6d:
6c:5c:98:18:27:99:45:a3:05:3f:9d:95:f2:86:08:
d9:4c:5c:9a:ad:6e:47:79:46:14:48:e1:eb:cc:2c:
83:7d:4c:c0:e4:29:f3:d0:fb:47:f7:2e:cf:24:47:
5c:7b:f1:00:da:c2:8a:45:2a:ea:76:60:d6:8c:99:
fe:90:11:57:5c:ba:23:c4:2d:21:43:0a:8a:12:14:
77:b1:15:d6:6c:c1:8f:29:ac:50:e3:72:fe:69:89:
db:53:5e:6f:bb:8c:fc:c5:28:05:e1:0f:15:a9:97:
b2:2c:48:0b:f5:34:ac:7a:a4:d7:35:4a:11:92:75:
b8:b6:d5:86:a7:f2:b6:a1:84:ea:a3:2e:23:48:d7:
37:19:8d:87:3a:24:67:6f:d0:6a:af:14:ce:69:72:
cf:32:9b:47:ff:ce:6e:f3:0c:7a:4d:fa:5f:2c:2c:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:38:55:94:C3:9E:45:35:E5:87:14:6B:25:43:68:07:21:E0:45:85
X509v3 Authority Key Identifier:
keyid:41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7b:cf:de:66:78:d9:65:c4:29:70:dd:22:90:74:d1:26:ee:
a9:54:d5:5c:fb:52:7c:15:1f:7a:39:3d:54:47:29:10:bc:8a:
cc:90:45:4d:fa:4a:76:32:38:4b:3c:be:ea:89:f8:47:31:77:
d3:c1:ed:80:ca:ab:92:75:38:c1:44:61:1d:ad:60:df:71:01:
77:b7:f8:46:6c:80:ac:5f:f7:a4:04:ca:d9:89:0e:b0:46:4d:
51:5b:f5:72:e8:1d:ba:f1:43:b3:e4:4c:76:9a:a8:65:67:4a:
b0:d0:a5:63:86:be:76:25:65:bd:dc:eb:a8:e7:b1:68:96:26:
5a:48:f4:51:42:b9:c9:bb:a2:c6:cd:f0:20:c9:fd:16:00:16:
3b:59:cc:f2:b3:96:1b:cf:a1:e2:cf:8e:87:4d:0c:55:2f:85:
2c:50:c0:42:45:0c:16:6e:74:ba:f8:22:01:29:ad:f0:dc:82:
00:a1:d0:e8:28:94:b8:2d:38:3c:05:fb:e6:58:1c:15:5f:57:
40:e0:f8:24:9b:13:5a:ea:fc:3f:ba:d9:f2:88:51:88:15:e0:
ba:28:96:84:a6:42:aa:a6:09:60:08:ec:9d:73:dc:6c:7f:08:
30:8f:cc:fd:41:98:4d:9a:46:59:62:9e:8d:fd:fc:cf:9c:52:
90:45:82:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:48 2025 by rpki-client