Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
File: QL_e36qTma09VTH6RxoSs7_jfhI.mft (raw, json)
Hash identifier: G54lqjXgTN0erXrI/yzxKbVHUbwnAXkyaXaEY/qYXig=
Subject key identifier: DB:DC:E1:65:A2:E9:9A:B2:03:62:5E:1A:D3:66:D3:86:7D:00:29:CA
Authority key identifier: 40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
Certificate issuer: /CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Certificate serial: 01987D8AE21AA9ADFF6C6938AC10E93BFDE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
Manifest number: 093D
Signing time: Wed 06 Aug 2025 04:01:50 +0000
Manifest this update: Wed 06 Aug 2025 04:01:50 +0000
Manifest next update: Thu 07 Aug 2025 04:01:50 +0000
Files and hashes: 1: QL_e36qTma09VTH6RxoSs7_jfhI.crl (hash: veMDqxpXCzj42ubhv2kihcTx7R7Oyjzt7D5X3X5xxtA=)
2: jSlm79fFu0VgJBsIaC81oVf4nGI.roa (hash: 8IYkRLo3mCrHlEs7aBNerIrNbkB27E7Mc7prSDZuZVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:e2:1a:a9:ad:ff:6c:69:38:ac:10:e9:3b:fd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Validity
Not Before: Aug 6 04:01:50 2025 GMT
Not After : Aug 7 04:01:50 2025 GMT
Subject: CN=dbdce165a2e99ab203625e1ad366d3867d0029ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:af:7a:e5:32:ef:91:9a:18:7e:ff:f0:5c:e1:
89:d3:b2:ca:bc:27:b2:59:7b:68:15:5f:e6:da:95:
60:88:81:30:af:4a:b4:f5:d4:c4:6b:71:4b:c9:31:
91:8d:9d:0d:0e:f3:f7:cc:4b:8a:c7:9d:18:38:d3:
37:57:a7:a6:36:96:2a:f6:2e:ab:94:d4:6f:0b:e0:
7c:ee:1d:e2:45:ac:1c:b4:9a:70:b6:2f:7b:9f:4d:
d7:93:0d:fa:24:b2:a5:6b:3e:b0:d8:09:af:56:88:
a0:41:f0:09:9c:20:7e:9a:34:71:aa:80:35:ab:22:
91:70:b9:9e:29:c7:86:86:e1:70:80:21:59:e9:b2:
90:8b:65:cf:7c:5d:92:9e:5d:25:63:e4:20:a6:29:
14:3b:6f:a4:78:f5:ee:fb:6f:71:dc:40:89:9e:46:
e7:ba:58:6e:5d:b8:22:a3:78:75:26:41:b5:cc:df:
05:de:c8:cc:7f:16:46:d6:b0:3f:83:a3:e2:5c:52:
40:cb:11:c7:76:a2:c2:12:87:ce:70:b6:a5:cd:74:
9d:68:13:ad:5e:43:d2:f2:4a:0c:d6:51:1c:20:10:
11:d5:e7:50:87:0c:6d:41:55:dd:3f:30:05:ee:b8:
b8:95:64:fc:67:ce:cb:5b:99:8e:b5:47:9b:62:59:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DC:E1:65:A2:E9:9A:B2:03:62:5E:1A:D3:66:D3:86:7D:00:29:CA
X509v3 Authority Key Identifier:
keyid:40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8b:60:34:2e:88:bc:d0:f7:53:d4:ec:34:81:bc:ee:53:1b:
4d:45:97:55:19:e3:08:b8:a6:d4:4d:92:27:80:77:62:8d:d1:
18:5a:5b:48:d8:18:63:25:32:bd:a4:47:0e:91:88:75:70:e0:
46:d2:f4:57:30:c5:7a:01:8a:bc:2b:fd:73:c2:91:6c:6c:26:
cf:1f:86:87:b4:85:8e:fd:c0:4d:92:8f:72:eb:83:aa:95:f0:
26:67:e6:c1:fc:a1:19:b4:e5:52:ba:68:20:f0:be:dc:7c:52:
8e:37:be:34:1a:50:fb:cc:c5:be:a3:6f:61:5d:75:45:0b:91:
42:99:21:25:59:9d:7d:59:b0:b3:6e:a9:0e:96:44:e4:35:91:
e3:ea:71:a3:9a:de:77:16:18:c4:0b:7b:e6:c5:81:bc:8b:db:
b0:72:f1:17:e7:ba:f0:23:8c:73:9c:5e:8c:bc:ac:54:61:2f:
41:93:7e:6a:ff:61:af:8b:6a:f4:6e:19:b6:55:eb:68:a4:aa:
de:eb:a0:3b:2a:42:ea:97:0b:f2:be:3c:c7:44:0b:c7:4d:c7:
5c:61:25:6d:07:53:2c:fe:1f:f8:16:5c:2c:a4:b0:c8:66:50:
24:cd:9c:79:fd:a9:25:f0:43:60:5d:43:aa:9d:2f:02:6c:81:
b8:a8:e6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:22:20 2025 by rpki-client