Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
File: QDx-hd5J15JM5Q09ap5S6enC4xI.mft (raw, json)
Hash identifier: jHefCzo006Aa1dQKSsSRo3TJNBqa3rcyOVEvUWMXHbw=
Subject key identifier: A1:08:16:54:ED:52:9E:24:ED:1E:22:88:4A:C0:E1:E3:25:DC:F7:BA
Authority key identifier: 40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
Certificate issuer: /CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Certificate serial: 019748C32C2D6C3007D1AA265B38E3A02EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
Manifest number: 1342
Signing time: Sat 07 Jun 2025 05:00:39 +0000
Manifest this update: Sat 07 Jun 2025 05:00:39 +0000
Manifest next update: Sun 08 Jun 2025 05:00:39 +0000
Files and hashes: 1: QDx-hd5J15JM5Q09ap5S6enC4xI.crl (hash: +dyiIiXmwKY2np5oqJf93yNsj52KBQ24TwLGluuhk5k=)
2: zBQLlk6R8SMqXeJs9KlWAq-2zWs.roa (hash: H5Z9T6mivR2DyTqTRYiFtEvpcqAnMQHqnVNqaL10pMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:2c:2d:6c:30:07:d1:aa:26:5b:38:e3:a0:2e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Validity
Not Before: Jun 7 05:00:39 2025 GMT
Not After : Jun 8 05:00:39 2025 GMT
Subject: CN=a1081654ed529e24ed1e22884ac0e1e325dcf7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:5e:ef:90:87:b1:1e:da:6a:21:e3:38:c5:
11:41:d6:25:da:0d:e6:2b:52:7b:28:63:ac:71:db:
6f:16:92:7e:4f:20:d6:b4:1f:a0:97:e9:f6:1a:26:
24:f0:6f:7f:83:d1:63:bb:47:07:cd:76:79:ef:91:
97:af:6f:f2:80:24:6a:de:37:f3:f1:b0:cb:15:80:
89:89:3e:3d:d5:29:b9:37:0e:bc:ad:fd:63:8c:a8:
de:64:1f:71:3a:71:9a:4a:52:25:47:c3:9a:12:98:
98:c4:e6:3d:a6:b9:f4:e0:2f:c3:8d:da:58:68:e5:
b5:ec:87:c0:bb:b5:49:6c:82:3a:7a:ae:f7:44:9d:
82:f5:57:b2:cc:d8:36:7c:d1:c9:09:e5:5b:16:7c:
3b:53:00:a5:87:bd:5b:dc:7f:ba:a8:fe:7a:cd:a3:
24:68:79:94:6b:c9:ab:eb:a8:68:a0:bc:ab:56:49:
10:55:04:44:3d:ce:fa:44:80:9c:a5:a6:1b:d8:a5:
cf:13:ac:78:3f:12:6f:bb:da:a8:7c:14:d8:b6:a7:
d6:5a:a0:51:78:14:2a:3d:45:0b:30:37:d0:ab:21:
a4:f0:ae:c1:67:7c:a0:9d:c7:22:66:2b:c2:cf:fb:
69:0d:58:41:be:ea:b7:ff:f1:cb:59:f3:1e:ff:61:
51:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:08:16:54:ED:52:9E:24:ED:1E:22:88:4A:C0:E1:E3:25:DC:F7:BA
X509v3 Authority Key Identifier:
keyid:40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e0:32:60:18:02:df:ad:a9:5d:b8:68:ed:ee:39:50:ee:d7:
05:cd:15:91:4a:ac:b7:54:a9:41:79:03:1d:a2:f3:8c:66:59:
01:4f:70:32:29:ed:2a:11:f3:8a:0f:c7:70:9e:11:69:0a:cf:
44:8e:8a:eb:b4:06:66:80:66:a1:2a:87:77:e3:b8:14:eb:ca:
fb:3a:5d:1b:5e:1f:22:12:f2:e7:73:fc:14:92:43:2d:35:ff:
d6:5c:f5:56:7e:5d:39:1e:c1:51:4a:3f:46:a0:76:7f:af:fa:
4f:a3:85:d9:f6:64:96:ae:18:0e:ec:dd:f3:2c:85:75:7d:d8:
b5:3f:c8:8c:e4:76:4f:e5:96:27:b8:a9:0f:69:7d:34:e1:54:
43:41:55:50:1e:c9:33:58:ff:38:52:aa:cd:45:4e:bd:f9:b5:
28:ac:df:63:a4:a7:35:16:7a:c5:14:92:9d:fa:ac:4a:4a:00:
45:48:b2:e1:aa:b9:72:39:24:63:8b:a8:d9:09:c6:24:1c:3c:
08:5e:fd:c9:80:b8:81:7b:58:5a:56:1c:f3:a5:73:63:3d:f8:
a4:34:4e:f5:74:27:61:51:1b:f8:83:38:ca:55:9f:9f:59:ed:
99:d3:41:1f:19:06:59:84:90:9e:86:b8:07:26:7e:a7:2f:50:
6e:f5:ea:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:02 2025 by rpki-client