Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
File: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft (raw, json)
Hash identifier: +MdFX2wQ/HkN10FvFY31dON6dGidteuxjLOz17UayWc=
Subject key identifier: B6:55:89:27:72:4A:9D:15:71:1E:00:FE:B9:52:73:E0:65:0D:FA:65
Authority key identifier: A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
Certificate issuer: /CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Certificate serial: 0197C0B671388492227E25C5F90F7858E3DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
Manifest number: 0ABE
Signing time: Mon 30 Jun 2025 12:01:11 +0000
Manifest this update: Mon 30 Jun 2025 12:01:11 +0000
Manifest next update: Tue 01 Jul 2025 12:01:11 +0000
Files and hashes: 1: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl (hash: HTSEoLhHwOhpsN9RJkUrCcd1UmyRz89u5EsuU/PqJRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:71:38:84:92:22:7e:25:c5:f9:0f:78:58:e3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Validity
Not Before: Jun 30 12:01:11 2025 GMT
Not After : Jul 1 12:01:11 2025 GMT
Subject: CN=b6558927724a9d15711e00feb95273e0650dfa65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:f2:79:14:95:06:cd:af:54:17:e9:83:7d:
d4:54:34:99:0e:1f:f4:35:a4:5c:7b:e0:11:2c:c7:
05:d7:f8:da:17:af:a6:b9:92:d0:13:fd:93:1b:48:
59:6f:df:93:6c:9d:63:65:cd:b8:38:e2:c9:bc:8b:
9d:1e:e7:70:71:a3:71:8b:4a:82:4d:cf:0a:64:ed:
08:f7:f4:6b:42:f5:87:fd:f6:d4:2e:85:54:69:35:
2f:d2:ee:e2:2c:2f:1f:23:7d:4c:d1:5f:04:22:38:
38:48:09:60:84:c7:03:79:e7:8c:49:41:64:ff:ad:
fe:0e:d0:9d:bb:30:f4:9a:47:d1:06:2e:6d:96:78:
c3:cf:ba:28:06:c9:0b:90:e7:9d:06:90:c5:55:e0:
24:72:27:60:31:bf:20:ea:5d:eb:12:81:1d:28:f6:
24:9a:4b:67:ae:29:57:eb:7b:69:a1:55:09:e1:76:
55:38:58:ba:5f:ac:cb:79:5d:1e:cc:d8:ab:3a:d0:
7c:82:4a:60:35:b3:53:5f:27:e3:e1:69:2f:a9:f8:
3d:4b:51:bf:37:b1:56:d4:7a:4b:97:7f:a5:cc:6b:
bc:40:a9:e5:8c:97:67:b6:d7:d4:f8:e2:ed:52:9d:
21:df:62:72:30:01:d7:e9:8c:32:91:95:cc:79:dc:
32:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:55:89:27:72:4A:9D:15:71:1E:00:FE:B9:52:73:E0:65:0D:FA:65
X509v3 Authority Key Identifier:
keyid:A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f7:50:8e:07:6b:04:dc:9f:51:11:b9:f5:78:19:72:ce:1d:
6b:a3:88:59:da:51:e9:07:00:45:c5:9c:05:64:bd:f0:f6:68:
4b:07:28:85:c9:30:cb:55:71:99:60:49:a2:ee:16:cd:1f:87:
e5:8b:d9:f5:0e:1f:21:db:b1:b3:78:b2:03:75:ac:07:6f:87:
8e:99:af:33:dc:c3:8e:c9:3c:94:e7:aa:b4:5f:40:4e:17:26:
ce:b2:78:64:f6:55:41:e0:c6:2d:77:fa:a4:5a:06:48:2d:5e:
ab:4e:c1:8c:23:65:27:fe:03:2d:d6:96:36:f5:f6:4b:3e:96:
b6:e5:93:3c:78:40:bc:9e:c2:c6:74:3b:83:8b:ed:dd:06:55:
ce:15:3c:6c:56:5e:e5:5a:16:79:25:60:b3:b1:50:1c:02:d3:
e0:b4:fe:e5:3f:2d:c3:df:32:86:0b:aa:51:fc:54:68:cc:93:
c8:0f:6f:80:6d:2e:2d:d9:76:08:b3:02:44:c1:d6:8f:0a:83:
34:ee:e1:5f:69:e1:d6:fc:08:b4:54:bb:46:2e:97:18:f5:ec:
c2:a9:27:54:61:92:11:df:0c:7e:f9:af:a3:eb:a5:e8:3e:1f:
b5:b3:35:b6:07:eb:2f:78:83:aa:32:cb:e5:9b:f2:61:a7:f2:
dc:b7:b1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:06:10 2025 by rpki-client