Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
File: qd_ImBI0BQeiouHnTRGCTe-BPzk.mft (raw, json)
Hash identifier: +p+FwPevXXDx9BtsuH5kQ/5WfP3j3GVXq0xA1NEu04w=
Subject key identifier: 6F:BC:08:4F:13:30:93:D5:27:99:0C:00:3C:AA:95:93:F6:1C:1B:8F
Authority key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
Certificate issuer: /CN=a9dfc89812340507a2a2e1e74d11824def813f39
Certificate serial: 019A4F622BD75B9D220871D77080D0F3E041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 15:00:25 +0000
Manifest this update: Tue 04 Nov 2025 15:00:25 +0000
Manifest next update: Wed 05 Nov 2025 15:00:25 +0000
Files and hashes: 1: qd_ImBI0BQeiouHnTRGCTe-BPzk.crl (hash: 1p2xKe92OoJ8WGeboNLCuf3hBJ3YzrEC1fFJpegfyEQ=)
2: wn31uqf50k5LZthlgOfugKfLtQQ.roa (hash: uQ9o6KlMfbYE1Nkt8fbDl10YjNVh7yxdgG7JtO4ci4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:2b:d7:5b:9d:22:08:71:d7:70:80:d0:f3:e0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dfc89812340507a2a2e1e74d11824def813f39
Validity
Not Before: Nov 4 15:00:25 2025 GMT
Not After : Nov 5 15:00:25 2025 GMT
Subject: CN=6fbc084f133093d527990c003caa9593f61c1b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:2a:41:b8:58:53:67:86:d5:31:7f:3d:23:
05:2d:10:e9:d6:a3:64:b2:71:39:83:3a:f2:a3:e2:
25:60:02:69:0a:5d:28:db:8d:6f:8e:87:63:66:75:
68:a5:be:7e:70:0a:7b:83:5f:20:d9:ed:56:43:33:
4f:c7:66:3c:86:76:a4:14:24:0f:9b:12:cd:65:b4:
5a:4f:64:b3:ab:12:01:dd:40:bb:c4:e4:c8:fe:d6:
ff:a0:86:7a:f6:1d:78:da:cf:a5:d9:05:78:b8:22:
a7:a5:91:b5:ac:30:57:49:51:76:60:f8:73:4b:ee:
25:42:1a:04:19:38:02:4e:33:1a:e0:e2:5b:d8:59:
5d:e3:7e:34:41:29:dd:cd:44:11:24:ce:96:cf:8f:
f5:80:2f:30:e7:a1:86:6a:79:ef:1f:94:d4:77:33:
d3:1f:bf:c4:20:24:0a:5c:a0:be:7f:94:8f:a1:89:
44:b8:f2:0f:80:7c:0c:30:df:17:82:fe:a4:dd:eb:
6c:5a:40:cc:6d:3b:cd:26:a1:62:28:11:3f:1c:8a:
ce:85:d7:8b:20:39:d7:a1:20:05:83:32:2d:e9:0d:
a6:84:62:97:d7:39:4d:c6:f7:89:eb:98:a5:44:33:
60:e8:17:c9:62:a9:6e:f8:7f:f6:22:49:88:b4:a3:
e4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BC:08:4F:13:30:93:D5:27:99:0C:00:3C:AA:95:93:F6:1C:1B:8F
X509v3 Authority Key Identifier:
keyid:A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8a:d5:e3:40:79:07:b9:1b:55:a5:19:f4:75:bb:5a:27:67:
24:e6:08:ce:29:9a:3a:a0:a4:a9:5a:db:0d:ca:0c:f7:49:37:
f5:6c:4b:2e:32:e3:a4:16:dd:ff:2b:b7:da:9c:7b:d3:f2:ce:
74:bf:a6:e4:d7:56:a7:f5:bf:8c:9a:76:75:60:a6:33:61:7f:
38:af:a2:d9:64:da:56:a3:6f:61:00:3d:da:f2:de:b3:5b:6b:
ea:f7:ce:84:e3:27:85:fd:fe:5e:57:69:f6:5e:a9:d5:bf:b8:
a5:4e:04:5b:d4:58:89:31:d9:29:62:69:e5:19:4f:b7:15:5b:
a8:c1:d7:3f:f5:54:f7:ef:62:81:9c:e5:5c:3b:99:d0:01:58:
c0:03:78:1c:22:5d:c2:ae:7f:41:75:7d:cf:aa:4b:97:a6:e6:
32:4e:99:ae:a2:e5:5b:8b:43:ff:27:16:e1:75:d6:78:c5:7b:
29:d6:bc:46:77:16:88:cf:66:a5:5f:6f:ce:85:37:ad:f0:e5:
6e:ec:df:99:28:20:fd:57:ea:77:47:ef:02:38:2e:01:27:76:
b7:07:a7:a3:20:00:53:ef:81:76:6b:c6:da:9a:cc:e3:2b:0d:
79:52:94:d7:1e:c1:26:ea:8a:94:68:b7:99:f2:1b:f2:5e:34:
67:e9:1c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:24 2025 by rpki-client