Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
File: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft (raw, json)
Hash identifier: WFb8QPmqswubqw7QTUH2Ysd612vECK+Jpfk/ooTqKlc=
Subject key identifier: 65:47:DA:8B:FA:35:E9:02:89:AD:F4:20:98:4F:64:19:0A:7E:31:25
Authority key identifier: A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
Certificate issuer: /CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Certificate serial: 0198D4E03A720BF46E6466600561C9E76D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
Manifest number: 0B4D
Signing time: Sat 23 Aug 2025 03:02:01 +0000
Manifest this update: Sat 23 Aug 2025 03:02:01 +0000
Manifest next update: Sun 24 Aug 2025 03:02:01 +0000
Files and hashes: 1: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl (hash: dYVaDnGZ0zXBzVKUE2T/iG5D/vdKgSmNAckNEaC8eIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3a:72:0b:f4:6e:64:66:60:05:61:c9:e7:6d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Validity
Not Before: Aug 23 03:02:01 2025 GMT
Not After : Aug 24 03:02:01 2025 GMT
Subject: CN=6547da8bfa35e90289adf420984f64190a7e3125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:00:68:8c:21:21:9e:67:13:76:0f:24:48:
8a:70:d9:0c:42:00:6b:37:9b:4e:30:27:01:9c:48:
f6:1e:98:94:c0:ee:a4:04:75:0d:24:6c:b3:6c:a3:
0d:50:cd:77:43:e1:53:e3:35:43:5e:db:4f:73:a8:
38:02:b0:7b:3e:79:3c:f6:29:3d:52:27:aa:19:45:
60:10:f6:57:fc:c8:16:f1:2b:78:5d:84:29:27:49:
80:0e:74:ff:cb:3e:d2:e0:7d:b2:4f:e9:3a:8f:2a:
4a:9e:27:4e:f8:d8:02:c8:b1:14:ef:94:63:33:b7:
6c:d3:bb:ca:0d:9e:25:ee:2c:a6:fd:c2:b3:ee:b7:
f3:cd:b9:7c:6a:64:fc:15:94:77:ac:14:dd:b3:6c:
d9:4a:61:48:48:e4:7c:c1:a7:5e:f3:de:ed:ee:47:
8a:99:b5:e9:9f:1c:e2:6f:87:86:ec:e9:63:c4:c9:
1c:f2:1c:3b:31:8f:b3:b1:17:6b:f6:df:0c:11:68:
63:89:d3:57:62:82:ff:46:1f:36:df:1f:be:b8:39:
4c:1e:12:b8:2a:37:a0:bb:89:54:c7:5a:90:9d:51:
3b:db:ef:ac:a7:6a:b1:be:d7:ef:1e:33:8a:fe:c6:
1f:7d:e5:7b:12:e6:74:78:d8:99:f5:df:ef:31:52:
e3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:47:DA:8B:FA:35:E9:02:89:AD:F4:20:98:4F:64:19:0A:7E:31:25
X509v3 Authority Key Identifier:
keyid:A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4f:b3:ae:f7:68:50:f6:96:9d:3e:08:64:b8:81:83:03:02:
89:57:9d:23:2e:47:d8:ed:b5:47:20:32:4d:60:25:0c:e7:fb:
48:f9:ea:30:29:76:94:88:ba:56:46:bc:d6:fa:b7:bf:da:87:
4d:5d:c6:70:3a:17:73:c0:53:f4:25:40:c5:71:d4:cd:c9:df:
13:b0:b1:ca:50:21:03:52:48:83:c4:4a:60:30:d7:88:73:be:
41:8c:a5:72:03:f1:02:8a:d5:0d:63:84:55:c6:80:2d:ad:ac:
aa:b8:64:ba:b2:58:ba:b0:61:27:43:0c:25:8c:c1:ab:9c:62:
0e:18:41:ae:06:a0:62:62:41:e6:e8:74:0b:e8:83:8f:1d:f8:
5b:1a:fe:74:8c:d8:7c:bc:68:6b:f9:9e:ba:87:68:9e:65:fc:
9e:2a:d0:2a:4d:67:c7:16:81:75:de:d5:a1:95:41:05:fa:3f:
36:02:fb:29:6b:1d:91:cf:ab:99:12:1f:54:9b:2f:e1:90:a9:
80:de:d0:cf:6b:6d:ae:11:7f:fe:83:f3:de:ee:05:34:75:60:
08:72:bc:13:f8:91:40:52:73:af:fe:cc:eb:01:8d:27:64:6a:
ba:a8:0d:ca:95:11:bd:df:5b:c6:65:9c:26:48:28:e4:f7:b4:
d3:c6:8e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:16 2025 by rpki-client