Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
File: qd_ImBI0BQeiouHnTRGCTe-BPzk.mft (raw, json)
Hash identifier: MZNeC1C8kLglgOReWGErwu/n+Dp7xjAiItu22qt3Zko=
Subject key identifier: BA:4C:B6:E2:21:62:E5:65:9F:F5:B9:5A:C2:4F:8D:9D:5C:6B:7A:62
Authority key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
Certificate issuer: /CN=a9dfc89812340507a2a2e1e74d11824def813f39
Certificate serial: 0199FC585A075044A3EC3C909A5BDDAD8C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 12:01:12 +0000
Manifest this update: Sun 19 Oct 2025 12:01:12 +0000
Manifest next update: Mon 20 Oct 2025 12:01:12 +0000
Files and hashes: 1: qd_ImBI0BQeiouHnTRGCTe-BPzk.crl (hash: lQIk6iv9D7TG1y6MydXdrqZuWQ/XJxkleGo+JQbCsv4=)
2: wn31uqf50k5LZthlgOfugKfLtQQ.roa (hash: uQ9o6KlMfbYE1Nkt8fbDl10YjNVh7yxdgG7JtO4ci4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:5a:07:50:44:a3:ec:3c:90:9a:5b:dd:ad:8c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dfc89812340507a2a2e1e74d11824def813f39
Validity
Not Before: Oct 19 12:01:12 2025 GMT
Not After : Oct 20 12:01:12 2025 GMT
Subject: CN=ba4cb6e22162e5659ff5b95ac24f8d9d5c6b7a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:f7:77:8b:40:e4:ee:52:1b:67:b8:47:9c:
98:14:82:06:97:b9:62:de:ad:bb:a2:91:3f:a4:c1:
b6:92:74:3d:80:53:04:ac:a9:cf:5b:45:39:d4:4a:
10:93:0d:99:0e:7b:7b:e0:90:b4:c8:81:d5:f8:1a:
b8:21:73:c1:e8:07:3d:c5:09:fd:20:a0:08:c1:71:
50:22:b0:7d:2e:bd:eb:4e:4a:ab:b6:52:85:8a:72:
a2:a2:65:81:e0:a7:41:cb:9f:87:07:98:f0:57:1b:
65:06:27:e0:eb:2b:ce:e7:19:49:c5:32:bb:5b:bc:
ba:60:52:46:b7:7b:8e:cd:95:45:d8:73:3d:67:e0:
63:2d:0f:e5:d8:e0:cc:ce:ac:9c:e3:6a:3f:a9:2f:
50:2f:05:4d:c1:44:40:7e:11:f3:fe:20:48:be:96:
0e:f1:87:d5:bc:07:e6:a5:29:62:af:13:40:8d:83:
3f:b5:bc:b8:42:a7:fe:b3:8c:26:6d:79:6f:9a:f7:
4a:d3:44:91:81:56:7b:e3:b0:6b:34:22:56:0a:8f:
66:46:8d:ef:56:f7:0c:3a:1a:62:bd:b1:9c:73:b4:
3a:2e:1b:c9:31:94:51:48:4c:81:51:02:8e:d5:bb:
51:ca:f6:2f:e2:99:01:6f:b2:b7:a1:bd:ad:b4:33:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4C:B6:E2:21:62:E5:65:9F:F5:B9:5A:C2:4F:8D:9D:5C:6B:7A:62
X509v3 Authority Key Identifier:
keyid:A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c8:c7:33:05:e8:f2:82:45:d0:c8:36:46:7d:b8:96:2e:fe:
ed:2d:98:0c:86:b7:ce:6b:ce:49:cc:eb:e1:3a:35:f6:9f:2b:
9d:47:a6:13:85:fc:8c:68:19:dd:17:b4:7c:14:76:dd:c5:dc:
df:af:2e:aa:4d:8a:d3:3b:ac:12:1a:fd:56:92:4f:df:25:18:
7e:49:0e:3e:c3:f3:d8:c0:de:85:d0:f9:1c:12:97:eb:3c:64:
c9:77:0d:95:fa:21:f5:1b:5e:34:f5:45:8b:3a:9f:4d:fd:2c:
ed:16:1a:61:8a:ca:8a:5b:ea:ec:4a:bc:7c:de:56:8b:f1:cd:
d0:dc:ed:9e:89:b1:39:70:30:67:86:fd:e1:b0:a8:8f:c3:75:
fd:bd:01:fe:6c:b1:1d:bf:88:8a:22:41:c0:82:51:4c:4a:d0:
a7:da:d7:69:da:7c:e9:6b:b1:78:12:7f:85:c9:73:3c:0f:86:
e1:97:c3:61:52:ea:ae:a9:0b:f0:e9:a7:2f:de:85:68:cf:b3:
02:8f:92:f7:31:3b:ba:fa:6a:cb:0f:73:9a:94:3f:28:fa:1f:
b7:b2:7c:cf:ea:0c:a0:a2:45:c1:aa:d7:a5:34:df:b9:19:b4:
30:46:fc:df:fc:4f:8a:3c:f9:61:d4:31:9f:bd:cb:b3:6d:cd:
f7:d7:ad:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:38 2025 by rpki-client