Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
File: QL_SbwstE2mcNW7Di5bGqCXSG2o.mft (raw, json)
Hash identifier: 6wzG4UQUwYas54IG+l0+4O98FYIcZVXBWWiA7jWMrkI=
Subject key identifier: AC:F1:5D:89:0D:9B:49:21:AA:E4:80:33:8D:CA:BF:98:CD:AB:DC:44
Authority key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
Certificate issuer: /CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Certificate serial: 019A4EF4728E0DADF03B30D7E12780D5F729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
Manifest number: 0872
Signing time: Tue 04 Nov 2025 13:00:34 +0000
Manifest this update: Tue 04 Nov 2025 13:00:34 +0000
Manifest next update: Wed 05 Nov 2025 13:00:34 +0000
Files and hashes: 1: QL_SbwstE2mcNW7Di5bGqCXSG2o.crl (hash: 7xEtbrr2DDi/cy8g9q4OEH8QMsveRYBmJSTEZml8ToE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:72:8e:0d:ad:f0:3b:30:d7:e1:27:80:d5:f7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Validity
Not Before: Nov 4 13:00:34 2025 GMT
Not After : Nov 5 13:00:34 2025 GMT
Subject: CN=acf15d890d9b4921aae480338dcabf98cdabdc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:5f:10:28:42:6c:18:27:22:67:5b:2e:86:
99:48:a7:11:31:3f:ce:1c:cc:a6:f8:d9:20:bb:68:
b7:95:bb:0f:63:da:14:21:ac:7a:75:dd:61:03:5a:
6c:41:e0:8b:bc:42:64:51:7f:65:f7:0a:f8:26:89:
e8:a6:2c:40:ee:f8:d5:35:4a:77:81:c0:c4:40:ab:
9e:20:dd:99:f8:da:ea:51:ec:46:8b:22:05:9b:97:
c6:05:c5:41:3b:52:82:d4:8c:ee:f7:22:7b:6d:a2:
b9:fb:9b:43:dd:a9:8b:be:08:23:2b:bf:65:7d:76:
1c:c8:b7:de:90:33:7a:ba:8f:52:8d:39:9a:2c:fc:
52:cf:91:63:02:8c:9e:5e:26:66:2b:d7:8d:b9:dd:
67:94:0f:42:45:4d:dd:19:ce:fc:21:89:22:d9:37:
e3:1d:e0:98:e5:de:6b:99:d5:ed:74:c0:62:7a:4a:
df:16:6c:0e:85:33:7d:90:ca:7c:7d:1f:ee:7b:2f:
84:00:22:17:37:23:a2:cc:4d:42:72:4b:cf:bb:ac:
03:b5:8a:16:17:95:56:44:47:00:41:1d:d3:5b:a3:
ed:4c:f9:25:59:e4:26:62:57:13:e4:e8:e7:99:9e:
33:10:02:56:0d:18:a3:ec:34:e5:4d:58:03:43:46:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F1:5D:89:0D:9B:49:21:AA:E4:80:33:8D:CA:BF:98:CD:AB:DC:44
X509v3 Authority Key Identifier:
keyid:40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:25:21:ca:5e:37:ce:7d:a1:c0:ca:10:a4:a1:63:a4:7c:fe:
2f:e7:6c:99:e7:e1:ba:ac:53:70:2c:4d:8f:46:a3:6b:00:d4:
f3:73:33:98:6f:54:62:63:2e:81:88:14:8c:ae:7d:87:ac:55:
e0:57:db:41:65:80:86:d7:c7:cd:79:f6:ff:05:9d:7d:06:b5:
16:14:65:b5:d0:2e:e3:01:25:44:c1:dc:c9:93:ab:da:16:53:
3b:6c:31:61:88:9d:0b:79:a5:97:f1:68:ed:11:6a:00:c4:f1:
93:de:07:c5:b4:53:a2:bc:e5:9c:bb:4b:b9:83:49:c1:51:16:
9c:da:2a:2b:1d:83:d7:90:59:2f:79:bb:a1:18:5e:26:ff:ca:
91:ae:69:9b:17:62:d5:35:29:f7:c9:a5:8d:e3:bc:f6:0f:3e:
ee:89:09:b9:22:79:6f:85:43:3d:0f:e0:54:a5:e9:fa:0b:f9:
e4:35:b3:44:3c:1e:31:a4:69:c6:c8:41:3f:66:3f:ad:66:b9:
f6:84:0d:e4:79:73:87:79:b6:84:5c:c2:9d:43:be:5d:29:b2:
b5:31:cc:72:c6:22:4d:69:92:80:de:b7:e7:e2:f4:98:f9:33:
d6:56:1c:4d:72:71:d6:16:64:0d:aa:bc:7b:9b:4c:86:e2:30:
92:22:3f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:36 2025 by rpki-client