Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
File: QL_e36qTma09VTH6RxoSs7_jfhI.mft (raw, json)
Hash identifier: XrmGLcxTiRpfoGCCdCppjtjRr4zUqSzl4pH8R+wMaqY=
Subject key identifier: D2:DD:4E:13:BE:B8:CA:A5:3C:55:66:45:56:D5:AE:51:55:BF:FC:5B
Authority key identifier: 40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
Certificate issuer: /CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Certificate serial: 01976F2C28F83CBB344BA360336FE277A682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
Manifest number: 08B1
Signing time: Sat 14 Jun 2025 16:00:54 +0000
Manifest this update: Sat 14 Jun 2025 16:00:54 +0000
Manifest next update: Sun 15 Jun 2025 16:00:54 +0000
Files and hashes: 1: QL_e36qTma09VTH6RxoSs7_jfhI.crl (hash: jDwHnujZg4ZSO5wID2KrOuu+gf0bH8I3fm23anb0tVI=)
2: jSlm79fFu0VgJBsIaC81oVf4nGI.roa (hash: 8IYkRLo3mCrHlEs7aBNerIrNbkB27E7Mc7prSDZuZVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:28:f8:3c:bb:34:4b:a3:60:33:6f:e2:77:a6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Validity
Not Before: Jun 14 16:00:54 2025 GMT
Not After : Jun 15 16:00:54 2025 GMT
Subject: CN=d2dd4e13beb8caa53c55664556d5ae5155bffc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:25:4a:65:65:a5:f9:5d:54:67:59:f5:60:
b1:97:b5:ce:6b:53:3a:5b:34:a1:46:a2:55:d5:81:
93:21:b7:f2:b1:29:b7:f1:d2:e5:3f:05:18:74:2f:
57:a1:59:59:bb:a9:b9:24:1d:ac:91:06:e5:63:29:
09:0c:82:5e:b4:b7:c7:25:7f:0c:f5:25:af:87:46:
8b:0e:a6:a4:d2:22:d7:bd:68:0d:c5:09:03:e7:7e:
f8:c6:60:68:01:3f:da:de:3d:e2:eb:01:c1:07:2a:
7c:d5:b8:0d:2a:d0:fb:40:ef:90:68:e4:15:7a:e5:
48:ab:e9:fa:e9:fe:c0:48:5b:e6:96:48:55:c1:b7:
d9:93:39:75:55:cc:57:87:4d:bd:f7:2c:5a:49:69:
b9:10:96:3b:e8:b6:13:ff:17:55:fe:60:61:b3:82:
e3:33:bd:1e:1d:96:6a:ab:b2:04:a2:03:7a:71:d5:
2e:1b:61:90:a1:e7:1b:72:8b:b9:38:2b:a7:bb:f5:
cb:1c:91:20:c7:55:d4:0b:9d:55:c7:05:44:92:82:
bf:1b:ef:1b:a1:0a:9c:d7:82:e1:d1:29:c7:cc:72:
2a:e5:b4:d6:75:de:e7:8d:29:b7:15:61:66:ca:53:
dc:f8:02:af:75:a6:0e:3d:bd:1c:ef:88:f9:ee:e5:
f5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DD:4E:13:BE:B8:CA:A5:3C:55:66:45:56:D5:AE:51:55:BF:FC:5B
X509v3 Authority Key Identifier:
keyid:40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:18:4f:c9:b9:21:45:53:fa:80:e4:c1:67:68:e3:42:20:be:
dd:47:4f:bb:6c:47:e4:4d:23:93:e2:46:e0:db:a7:f2:c6:8b:
a0:d0:e5:73:e8:1a:8f:02:05:da:86:fd:b4:3e:64:38:e8:4b:
fd:51:75:2f:74:cc:9a:87:34:3a:79:9b:cf:8b:90:60:b1:65:
4a:26:7e:65:84:86:6a:df:2d:b2:02:c0:fc:3b:78:02:9c:50:
2f:0f:32:0c:99:0d:5a:94:25:35:70:ff:42:2f:f7:f8:8c:51:
f9:8c:96:d4:c5:d7:38:00:d2:a7:5d:a8:12:60:f7:46:83:a8:
0b:27:60:4d:41:d8:aa:b0:66:b6:ca:18:2f:7e:66:50:13:11:
26:ef:2b:7c:d5:8a:c2:51:f5:5e:19:03:4b:9a:70:db:44:4a:
54:e6:70:be:31:de:a6:64:65:86:f4:aa:16:06:52:ef:f8:71:
3f:42:61:14:73:e7:f9:1b:9c:fa:22:b9:f2:ee:36:eb:2f:83:
f3:35:eb:77:3e:0e:3a:81:77:cd:9f:aa:1f:12:4e:a8:8c:e5:
a2:56:e3:70:18:12:a6:22:9c:6a:e2:68:33:b2:38:d9:95:05:
3f:49:d9:b6:2d:fa:5b:4d:51:0c:6b:6a:70:d0:6d:2b:7f:f9:
e0:ef:74:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLCj4PLs0S6NgM2/id6aCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYmZkZWRmYWE5Mzk5YWQzZDU1MzFmYTQ3MWExMmIzYmZl
MzdlMTIwHhcNMjUwNjE0MTYwMDU0WhcNMjUwNjE1MTYwMDU0WjAzMTEwLwYDVQQD
EyhkMmRkNGUxM2JlYjhjYWE1M2M1NTY2NDU1NmQ1YWU1MTU1YmZmYzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuAlSmVlpfldVGdZ9WCxl7XOa1M6
WzShRqJV1YGTIbfysSm38dLlPwUYdC9XoVlZu6m5JB2skQblYykJDIJetLfHJX8M
9SWvh0aLDqak0iLXvWgNxQkD5374xmBoAT/a3j3i6wHBByp81bgNKtD7QO+QaOQV
euVIq+n66f7ASFvmlkhVwbfZkzl1VcxXh0299yxaSWm5EJY76LYT/xdV/mBhs4Lj
M70eHZZqq7IEogN6cdUuG2GQoecbcou5OCunu/XLHJEgx1XUC51VxwVEkoK/G+8b
oQqc14Lh0SnHzHIq5bTWdd7njSm3FWFmylPc+AKvdaYOPb0c74j57uX1qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLdThO+uMqlPFVmRVbVrlFVv/xbMB8GA1UdIwQY
MBaAFEC/3t+qk5mtPVUx+kcaErO/434SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUxfZTM2cVRtYTA5VlRINlJ4b1NzN19qZmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kYjU1ZWMtMzU3Ny00MjFmLTg5MTYt
OGU5ODUxYjdmODExLzEvUUxfZTM2cVRtYTA5VlRINlJ4b1NzN19qZmhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9kYjU1ZWMtMzU3Ny00MjFmLTg5MTYtOGU5ODUxYjdmODEx
LzEvUUxfZTM2cVRtYTA5VlRINlJ4b1NzN19qZmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBhPybkh
RVP6gOTBZ2jjQiC+3UdPu2xH5E0jk+JG4Nun8saLoNDlc+gajwIF2ob9tD5kOOhL
/VF1L3TMmoc0Onmbz4uQYLFlSiZ+ZYSGat8tsgLA/Dt4ApxQLw8yDJkNWpQlNXD/
Qi/3+IxR+YyW1MXXOADSp12oEmD3RoOoCydgTUHYqrBmtsoYL35mUBMRJu8rfNWK
wlH1XhkDS5pw20RKVOZwvjHepmRlhvSqFgZS7/hxP0JhFHPn+Ruc+iK58u426y+D
8zXrdz4OOoF3zZ+qHxJOqIzlolbjcBgSpiKcauJoM7I42ZUFP0nZti36W01RDGtq
cNBtK3/54O90Mg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:11:43 2025 by rpki-client