Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
File: QL_SbwstE2mcNW7Di5bGqCXSG2o.mft (raw, json)
Hash identifier: 2DYKm18uEGkzyVdMep1jE4WmMBRC2jUlsHk75bkF5n4=
Subject key identifier: DE:09:CE:6C:88:02:F5:7C:3F:BE:9B:B2:50:B7:90:B2:D8:A1:C7:64
Authority key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
Certificate issuer: /CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Certificate serial: 0198816814C355E4003BADD53BA681F9303F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
Manifest number: 0783
Signing time: Wed 06 Aug 2025 22:02:18 +0000
Manifest this update: Wed 06 Aug 2025 22:02:18 +0000
Manifest next update: Thu 07 Aug 2025 22:02:18 +0000
Files and hashes: 1: QL_SbwstE2mcNW7Di5bGqCXSG2o.crl (hash: +iTuuCi0gMfVP3PYN9nOh3C0l1OpeBBaGytESAf1BtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:14:c3:55:e4:00:3b:ad:d5:3b:a6:81:f9:30:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Validity
Not Before: Aug 6 22:02:18 2025 GMT
Not After : Aug 7 22:02:18 2025 GMT
Subject: CN=de09ce6c8802f57c3fbe9bb250b790b2d8a1c764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dc:a4:fc:7a:37:a8:ad:0f:c2:67:40:d4:6a:
85:15:66:14:5d:e6:c8:07:7a:93:e3:ac:9b:bd:d5:
35:62:d5:33:ff:e7:2a:69:e7:19:8c:45:5f:4d:22:
76:c2:fb:2b:64:82:d2:10:6f:64:c2:ed:5d:44:b7:
06:f3:a8:11:08:6d:68:71:6d:ac:8b:b2:4c:92:37:
bf:ae:6d:fc:3c:bf:03:23:49:ce:4c:79:dc:73:0d:
29:e5:7a:42:7e:0e:3a:16:3d:85:3a:a7:c4:6f:8c:
d0:72:ab:63:7d:db:f8:16:e1:33:66:fe:06:2f:c2:
97:63:10:22:69:f5:40:ec:83:4f:60:c8:57:1c:d8:
50:c6:c6:27:dc:26:ff:9e:6d:ad:5f:e6:91:e6:b1:
66:32:7e:c0:72:4b:06:9a:13:c0:9b:87:2b:30:e1:
c1:61:59:ba:e6:db:d5:45:f7:81:89:32:a7:f7:78:
dc:d9:ea:a2:28:13:07:b7:a8:f9:f8:5a:dc:0c:83:
94:21:a2:b4:51:e3:28:12:26:b3:0c:5c:bb:8d:27:
6c:1e:a4:63:93:e9:8c:86:2e:c4:ad:6b:9b:ad:fc:
d1:ba:93:b0:e5:c8:80:af:23:f4:0d:3a:6d:6e:f4:
da:91:e1:a7:0d:b6:a0:d2:f4:26:48:2c:31:2a:82:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:09:CE:6C:88:02:F5:7C:3F:BE:9B:B2:50:B7:90:B2:D8:A1:C7:64
X509v3 Authority Key Identifier:
keyid:40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:08:d7:8c:24:38:71:83:fa:75:23:54:9a:20:9c:5e:f5:f1:
e0:0d:e4:2f:bf:76:5f:40:d0:a7:f7:e0:c2:0f:bf:db:86:9c:
03:77:8b:bd:7e:e8:b0:73:8b:04:8c:eb:d8:f1:73:c5:c8:f0:
e8:8b:93:a4:9c:d6:ff:80:85:88:00:47:6d:f6:7e:2f:45:e6:
a3:8c:2e:25:89:e3:7b:39:ff:fa:b8:92:b8:f1:d1:0d:a6:e2:
e7:37:66:ec:5b:e5:e8:4c:d9:cb:c4:df:d6:16:ef:29:cb:7c:
ae:cf:ed:ae:e9:ac:fd:bf:e7:e1:f0:f9:94:d1:ef:11:e0:a1:
26:89:e8:44:31:d4:80:4f:3b:b0:03:e7:9d:5b:9b:a6:c2:be:
78:7f:00:36:29:8b:36:c4:3a:8d:e3:3c:a2:83:04:d5:22:ab:
ce:ad:e6:04:9c:93:02:3e:57:04:fe:d2:1e:d5:95:83:e4:86:
3b:40:f6:9f:07:b3:76:d5:46:6a:4b:b5:49:e0:1a:cb:08:a0:
5f:42:14:fe:25:76:2a:44:99:a6:d8:d2:58:70:e4:b7:be:47:
5a:65:0a:14:1b:0e:a5:26:d7:16:aa:3f:2d:32:b7:6b:71:1b:
f9:d4:6c:cc:5a:fa:37:41:0a:c2:bf:a8:86:ec:ec:84:3b:0b:
32:35:ca:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:44 2025 by rpki-client