Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
File: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft (raw, json)
Hash identifier: po5sp83bEPKMLoKZBOsOpJcNC4h74Og37fD8zSUyJUI=
Subject key identifier: E2:34:BE:27:CD:E4:60:4D:C7:81:99:F8:57:BA:F5:54:4A:95:3F:BC
Authority key identifier: A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
Certificate issuer: /CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Certificate serial: 01976BBD0073FB5AA1F2529FB754E4FAE6B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
Manifest number: 0A92
Signing time: Sat 14 Jun 2025 00:00:37 +0000
Manifest this update: Sat 14 Jun 2025 00:00:37 +0000
Manifest next update: Sun 15 Jun 2025 00:00:37 +0000
Files and hashes: 1: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl (hash: /puVR/iFMYF9bivBO0hvqJw93Q/Y2WK9ULnTyrta+Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:00:73:fb:5a:a1:f2:52:9f:b7:54:e4:fa:e6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Validity
Not Before: Jun 14 00:00:37 2025 GMT
Not After : Jun 15 00:00:37 2025 GMT
Subject: CN=e234be27cde4604dc78199f857baf5544a953fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:41:7c:34:50:77:b1:0f:a3:59:52:49:60:25:
88:9c:53:7b:7d:67:34:64:84:bf:56:1a:bf:07:ef:
2e:9e:c5:77:2c:d1:86:ea:4e:7e:ef:bd:37:cf:81:
44:bf:f5:0e:d7:4e:21:cc:9a:02:4c:34:4d:e0:36:
99:cc:87:e3:75:b5:45:34:30:4f:8d:76:e2:04:c1:
76:a2:d0:d5:4c:40:61:90:0a:85:87:2f:18:10:b5:
4c:82:5b:13:60:08:6f:d2:db:f6:de:c5:2c:b2:1f:
df:ec:08:44:43:8c:58:4d:3d:29:2a:74:db:ed:09:
45:51:d3:de:b6:f8:c9:7f:fb:a9:73:6a:7c:9b:31:
88:7e:51:f9:a3:27:87:59:cc:73:e0:5d:12:c8:c6:
5c:ed:95:02:9c:47:d0:76:b0:26:2c:7b:10:d2:5b:
db:6e:7d:c5:e4:a6:91:37:15:f5:07:26:5e:e3:2d:
83:b8:f6:c9:9f:78:9b:69:36:13:f5:7c:e5:ff:94:
50:d9:4b:c5:11:84:b8:66:2d:39:ec:da:3a:91:d5:
62:01:08:19:87:f8:5e:90:61:50:df:87:9c:70:aa:
d8:7d:5d:d9:9e:e8:9d:97:c0:06:80:90:a7:60:c8:
65:b1:82:c7:48:6e:a5:6e:f9:12:60:dd:85:ff:1b:
e4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:34:BE:27:CD:E4:60:4D:C7:81:99:F8:57:BA:F5:54:4A:95:3F:BC
X509v3 Authority Key Identifier:
keyid:A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2e:b3:fc:e4:6b:17:69:8a:63:21:cd:04:f6:8e:50:65:bc:
bd:aa:5d:bc:9c:00:14:f4:c4:6b:d9:46:27:b0:0e:df:45:6d:
f9:5b:8b:13:a3:05:a0:fd:c0:54:e8:66:6b:e3:9d:94:9e:89:
f0:13:00:25:dc:7e:2f:9c:33:cf:41:2e:df:90:66:58:3c:e5:
fe:a2:43:f6:b8:6d:20:1a:98:34:0b:b2:fc:d2:77:6a:63:0c:
0a:b6:5b:a9:c5:99:79:71:ba:6c:1b:49:ba:c5:8e:7b:ed:85:
29:62:95:ee:a0:b7:f7:f2:ea:25:d9:cf:fb:d8:24:86:9d:f9:
8b:d6:30:0d:fb:4d:39:b8:aa:ec:75:fd:8a:d0:94:ef:3c:24:
34:17:d6:22:fb:c0:b1:61:ad:44:45:03:8a:4b:66:45:9c:31:
f4:58:31:ce:d5:3a:bf:f4:e2:b5:f5:fb:d3:ef:32:06:af:ba:
fc:9f:7e:58:60:47:41:19:c6:9e:d8:20:ef:fd:27:5f:d5:2c:
82:23:91:42:7d:e9:cf:1e:ee:ce:62:45:45:4b:b9:d0:10:a8:
71:23:ce:16:45:04:f6:0f:03:0e:17:69:d7:54:d1:e7:44:6a:
5f:31:e2:f9:60:75:67:ea:63:43:86:c9:bd:06:c7:04:e1:a9:
cc:10:b2:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvQBz+1qh8lKft1Tk+ua3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Yjc5MjQzZmRiZjdiMzY1YzFkYmMyM2M5MGE4YmNjYjNj
Mzk3NTEwHhcNMjUwNjE0MDAwMDM3WhcNMjUwNjE1MDAwMDM3WjAzMTEwLwYDVQQD
EyhlMjM0YmUyN2NkZTQ2MDRkYzc4MTk5Zjg1N2JhZjU1NDRhOTUzZmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EF8NFB3sQ+jWVJJYCWInFN7fWc0
ZIS/Vhq/B+8unsV3LNGG6k5+7703z4FEv/UO104hzJoCTDRN4DaZzIfjdbVFNDBP
jXbiBMF2otDVTEBhkAqFhy8YELVMglsTYAhv0tv23sUssh/f7AhEQ4xYTT0pKnTb
7QlFUdPetvjJf/upc2p8mzGIflH5oyeHWcxz4F0SyMZc7ZUCnEfQdrAmLHsQ0lvb
bn3F5KaRNxX1ByZe4y2DuPbJn3ibaTYT9Xzl/5RQ2UvFEYS4Zi057No6kdViAQgZ
h/hekGFQ34eccKrYfV3Znuidl8AGgJCnYMhlsYLHSG6lbvkSYN2F/xvkAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOI0vifN5GBNx4GZ+Fe69VRKlT+8MB8GA1UdIwQY
MBaAFKm3kkP9v3s2XB28I8kKi8yzw5dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWJlU1FfMl9lelpjSGJ3anlRcUx6TFBEbDFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82YTY4NDItY2IzZi00ZmIxLTkwNjkt
Nzg2MTFlYzk0YjQ0LzEvcWJlU1FfMl9lelpjSGJ3anlRcUx6TFBEbDFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82YTY4NDItY2IzZi00ZmIxLTkwNjktNzg2MTFlYzk0YjQ0
LzEvcWJlU1FfMl9lelpjSGJ3anlRcUx6TFBEbDFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiS6z/ORr
F2mKYyHNBPaOUGW8vapdvJwAFPTEa9lGJ7AO30Vt+VuLE6MFoP3AVOhma+OdlJ6J
8BMAJdx+L5wzz0Eu35BmWDzl/qJD9rhtIBqYNAuy/NJ3amMMCrZbqcWZeXG6bBtJ
usWOe+2FKWKV7qC39/LqJdnP+9gkhp35i9YwDftNObiq7HX9itCU7zwkNBfWIvvA
sWGtREUDiktmRZwx9FgxztU6v/TitfX70+8yBq+6/J9+WGBHQRnGntgg7/0nX9Us
giORQn3pzx7uzmJFRUu50BCocSPOFkUE9g8DDhdp11TR50RqXzHi+WB1Z+pjQ4bJ
vQbHBOGpzBCygQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:15:33 2025 by rpki-client