Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
File: qd_ImBI0BQeiouHnTRGCTe-BPzk.mft (raw, json)
Hash identifier: mrmcOQf9w1NDLAQ4ZQuv2AFZJX0JTTGNGHb7kPPETvM=
Subject key identifier: 9C:C4:AF:A5:68:C2:1A:23:5E:64:4C:D8:6A:7E:5E:F0:6F:AF:E2:86
Authority key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
Certificate issuer: /CN=a9dfc89812340507a2a2e1e74d11824def813f39
Certificate serial: 019A722637E6BB55155309C524ECF06364D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
Manifest number: 16B2
Signing time: Tue 11 Nov 2025 09:01:38 +0000
Manifest this update: Tue 11 Nov 2025 09:01:38 +0000
Manifest next update: Wed 12 Nov 2025 09:01:38 +0000
Files and hashes: 1: qd_ImBI0BQeiouHnTRGCTe-BPzk.crl (hash: WEUk4iNBOw5Tp28o8yY8x+wOhw9uuhQ/c/SYnbG9IME=)
2: wn31uqf50k5LZthlgOfugKfLtQQ.roa (hash: uQ9o6KlMfbYE1Nkt8fbDl10YjNVh7yxdgG7JtO4ci4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:37:e6:bb:55:15:53:09:c5:24:ec:f0:63:64:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dfc89812340507a2a2e1e74d11824def813f39
Validity
Not Before: Nov 11 09:01:38 2025 GMT
Not After : Nov 12 09:01:38 2025 GMT
Subject: CN=9cc4afa568c21a235e644cd86a7e5ef06fafe286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:55:b6:07:17:72:b9:5f:1c:ee:2e:64:93:
55:0d:81:f9:f1:7f:7b:ec:eb:5e:ea:45:e1:44:b8:
5a:f2:0c:74:f1:16:30:be:63:01:a2:42:9a:7a:8e:
08:6c:8e:7f:fa:a7:09:54:e2:c9:01:e0:78:14:84:
96:63:98:d7:15:38:26:40:65:04:3a:69:79:5b:9d:
db:f0:fe:32:27:b6:ac:7f:eb:86:03:8b:99:6e:ed:
cb:ed:08:6a:bf:63:0d:4c:a5:3e:13:56:24:49:fb:
37:65:d7:10:2b:c8:b8:d9:0d:7d:46:29:d7:41:7a:
26:28:e6:82:55:2e:b2:47:92:2c:98:6c:64:b8:6c:
1d:ec:77:2e:a3:80:30:35:6e:d5:c5:36:7d:36:86:
45:23:36:dc:29:02:e6:4c:65:7d:d8:8e:a4:99:f4:
55:2f:0c:ed:77:18:18:f6:54:ec:96:59:b7:0c:24:
cc:8e:f8:c2:41:30:9e:26:0d:70:ec:61:cf:73:d8:
78:8b:d1:ba:da:45:56:67:75:4c:88:39:ae:f2:14:
f1:06:1b:28:43:8e:0f:6f:f6:c8:4d:42:fb:a0:d0:
43:69:d4:db:91:9f:a9:a2:cd:61:cd:ab:b7:92:54:
0a:b3:c4:2b:42:b6:16:b0:b3:d5:fa:01:b5:56:ed:
d9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C4:AF:A5:68:C2:1A:23:5E:64:4C:D8:6A:7E:5E:F0:6F:AF:E2:86
X509v3 Authority Key Identifier:
keyid:A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a3:a2:a3:26:a4:9d:08:97:a7:13:b6:17:9e:d9:d7:fd:f4:
08:fc:90:b0:da:a4:16:5d:58:03:94:5a:23:20:d2:a7:19:07:
6b:d0:7e:4a:85:47:d6:68:69:8a:89:a1:1d:7d:8b:e1:64:72:
a1:87:ca:84:f5:2e:6b:96:dd:1d:d1:ce:21:7e:f1:00:3d:f2:
ba:43:e7:7f:e1:6c:58:94:f0:46:8b:88:88:d8:5d:57:16:78:
3f:7f:a0:36:bf:a0:0e:dc:b8:f1:64:e8:36:59:aa:2f:88:af:
3f:8e:70:dd:b5:82:e2:df:c8:fc:60:3d:dd:36:f3:b3:f4:70:
20:8a:e7:b8:11:51:be:33:6e:65:9d:26:fc:69:e7:46:6d:3e:
77:ba:6b:fe:ef:4b:ca:58:54:99:9b:34:4f:b2:ab:98:eb:c4:
2f:63:9e:89:a3:ec:98:82:13:c1:5e:c1:e5:e7:34:ce:28:a7:
7c:21:dd:13:fa:96:48:0f:b4:eb:30:e8:13:a5:a7:01:4a:c6:
49:05:63:c6:93:2f:75:09:4d:5f:7a:8b:e9:82:b2:90:b1:7c:
ca:b6:c2:2f:b3:7a:78:44:52:d7:ca:54:dd:05:65:05:45:63:
63:c1:98:81:0f:94:1c:0c:ab:cb:33:2c:18:b8:cd:fd:43:c1:
7f:62:f0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:40 2025 by rpki-client