Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
File: qd_ImBI0BQeiouHnTRGCTe-BPzk.mft (raw, json)
Hash identifier: T81SOEsDzP5cE7F0c1G/LcaKkABmPokcJBkZmiybdck=
Subject key identifier: 30:B4:7D:3B:EB:AF:57:40:D1:9F:2C:A2:6F:71:09:A0:76:33:3F:4E
Authority key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
Certificate issuer: /CN=a9dfc89812340507a2a2e1e74d11824def813f39
Certificate serial: 0197B70EC18D16021B06E6A35A07575AAABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 15:01:26 +0000
Manifest this update: Sat 28 Jun 2025 15:01:26 +0000
Manifest next update: Sun 29 Jun 2025 15:01:26 +0000
Files and hashes: 1: qd_ImBI0BQeiouHnTRGCTe-BPzk.crl (hash: TaSiJnMcbexM/sjoYEhHCwwhLC2u61Tt8Wfs9+Tczzc=)
2: wn31uqf50k5LZthlgOfugKfLtQQ.roa (hash: uQ9o6KlMfbYE1Nkt8fbDl10YjNVh7yxdgG7JtO4ci4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c1:8d:16:02:1b:06:e6:a3:5a:07:57:5a:aa:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dfc89812340507a2a2e1e74d11824def813f39
Validity
Not Before: Jun 28 15:01:26 2025 GMT
Not After : Jun 29 15:01:26 2025 GMT
Subject: CN=30b47d3bebaf5740d19f2ca26f7109a076333f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:99:91:e8:7b:0b:cc:c5:86:ea:bc:bc:45:
94:1d:b4:09:d7:ee:4c:67:3e:19:4b:1e:57:cc:0a:
b0:f2:f8:10:1e:63:04:12:3d:ae:09:8a:e1:44:56:
e9:f4:41:e2:4a:2a:05:43:9f:e5:dd:7a:f5:88:da:
3d:1f:71:8d:c4:f2:90:cf:f2:f4:2f:ff:60:3b:78:
c4:4e:a3:1b:77:d7:45:10:60:7c:e7:03:99:c3:7c:
43:36:14:a8:ca:b7:64:0b:71:09:c5:e5:48:b5:cf:
c6:ae:60:00:77:5a:69:8d:74:12:e4:46:c7:1d:4d:
3b:1a:7b:4c:f2:d5:68:75:a5:5b:93:f9:9e:05:e4:
e9:2f:cf:0c:75:60:1a:45:25:96:0e:5e:e9:1d:79:
d8:07:2a:21:4e:11:fa:be:81:38:d9:7b:84:59:eb:
6d:f8:58:39:2b:89:09:a2:fa:cd:a1:4f:09:ef:01:
c2:67:3b:d6:b8:1c:a8:13:27:70:be:46:c3:a2:e6:
5c:1a:71:47:86:21:79:1d:28:18:28:75:53:41:6c:
69:b6:b1:b6:69:40:4b:81:f1:39:d4:cd:04:4e:a2:
47:89:e7:df:ba:70:e3:e3:66:08:ee:ac:77:d4:82:
af:3e:02:0f:0b:8e:5c:ee:b2:65:82:6d:be:7c:fe:
a4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B4:7D:3B:EB:AF:57:40:D1:9F:2C:A2:6F:71:09:A0:76:33:3F:4E
X509v3 Authority Key Identifier:
keyid:A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1c:4c:a3:b0:b6:4c:85:54:27:67:93:ac:09:bc:90:89:76:
93:e9:6c:51:71:33:b7:ad:2b:76:9b:03:c0:7e:df:ef:7f:81:
61:1c:3f:9d:e9:d3:02:d9:ea:5e:7f:bd:4b:b9:38:c1:a1:0f:
d7:93:d1:c6:d5:62:9a:cc:26:fb:d5:23:be:3e:1a:6e:6f:d8:
bb:50:d3:fc:95:19:48:2c:89:af:9c:0d:5f:2a:0a:f6:cb:fb:
08:b1:55:04:f7:86:24:34:bb:9c:f7:be:50:2e:32:8d:31:97:
dc:f8:8d:da:d2:ea:db:57:97:e4:f3:7a:f6:5f:c3:25:c5:3c:
e3:3b:82:c8:08:63:13:ff:9e:1d:49:f6:07:a3:08:46:af:6a:
bb:c1:5e:d3:67:21:36:2d:f7:aa:bf:f4:9d:8a:74:05:a3:f0:
0c:4c:32:29:9e:6f:2a:d0:25:c3:e4:bc:2c:e3:fb:5c:57:3a:
6f:44:aa:51:b8:2e:a8:a5:c0:33:4c:cc:3e:3b:e3:8c:1e:66:
9f:6e:fa:3d:f3:d9:f5:de:fb:96:29:fc:16:d9:26:77:37:cb:
a1:13:21:c7:df:ed:28:1a:43:dd:0c:31:ea:1d:84:e2:da:6d:
38:fc:4c:90:a2:36:d0:38:cf:1f:0b:bc:a4:d8:e4:70:55:af:
73:57:55:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:46 2025 by rpki-client