Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
File: QDx-hd5J15JM5Q09ap5S6enC4xI.mft (raw, json)
Hash identifier: mCN6PpNZTwwtoGSZWY8r9myVhLj+4M7COUz727wwGV0=
Subject key identifier: 4E:29:A6:BD:3E:9C:0A:50:E0:67:F8:47:3A:59:FE:D5:DC:6B:85:DA
Authority key identifier: 40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
Certificate issuer: /CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Certificate serial: 019923D6430CA70BF6A6A782AF3DCD8480B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
Manifest number: 1438
Signing time: Sun 07 Sep 2025 11:01:08 +0000
Manifest this update: Sun 07 Sep 2025 11:01:08 +0000
Manifest next update: Mon 08 Sep 2025 11:01:08 +0000
Files and hashes: 1: QDx-hd5J15JM5Q09ap5S6enC4xI.crl (hash: D1TbTRELeXz0gTELUBfQaR3iyRKZWQT1sftrU1+PvYo=)
2: zBQLlk6R8SMqXeJs9KlWAq-2zWs.roa (hash: H5Z9T6mivR2DyTqTRYiFtEvpcqAnMQHqnVNqaL10pMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:43:0c:a7:0b:f6:a6:a7:82:af:3d:cd:84:80:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Validity
Not Before: Sep 7 11:01:08 2025 GMT
Not After : Sep 8 11:01:08 2025 GMT
Subject: CN=4e29a6bd3e9c0a50e067f8473a59fed5dc6b85da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:66:ea:b1:22:50:01:8b:17:d1:e0:cd:e9:
69:c3:d4:cb:0d:83:10:ce:b4:a7:2b:09:46:5e:7a:
0b:76:d3:b6:29:94:b6:e5:4c:75:38:5a:7a:ff:a9:
f6:42:49:f9:41:1e:b8:b0:0e:9d:2e:65:0f:5c:03:
a3:b9:5e:4d:68:fc:9c:ff:70:6c:f5:af:32:a2:94:
dc:a4:79:2e:9e:84:32:6e:23:65:87:1f:cb:c5:f5:
e4:29:10:59:61:3b:5c:1c:6a:be:fa:0a:9b:4c:ee:
51:09:0c:58:3d:97:6a:df:1d:e7:d8:a1:69:e3:92:
7b:6d:e0:c2:5a:15:42:08:73:2b:ed:57:a4:96:de:
d1:74:98:1d:ab:86:b0:a2:63:bf:f4:1c:77:01:53:
b5:1d:0d:89:49:c8:10:2f:29:7a:8e:69:66:a7:ef:
c1:52:fc:2b:96:36:20:8c:ef:61:be:80:5c:c2:27:
d3:1d:74:65:c4:1c:ae:ce:62:3a:de:fc:50:8b:4f:
83:46:79:3f:e7:de:72:8f:8d:62:3f:2c:4e:2e:d6:
3a:a7:37:f5:42:e7:82:10:b1:04:f6:1e:b4:d2:31:
b1:7a:ea:09:eb:f8:9a:f0:ac:de:81:66:36:8c:91:
71:fe:a4:13:d5:eb:dc:b2:2b:8b:3f:29:e0:1e:94:
95:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:29:A6:BD:3E:9C:0A:50:E0:67:F8:47:3A:59:FE:D5:DC:6B:85:DA
X509v3 Authority Key Identifier:
keyid:40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5e:bb:be:56:44:05:19:75:29:21:95:0e:61:cc:ca:da:09:
d2:80:87:5a:ea:17:46:85:26:49:cc:1c:5a:39:a2:76:9b:58:
2e:21:af:a5:f5:02:40:27:c3:c0:3e:eb:ce:89:67:43:ea:13:
1b:b6:36:f5:f8:e1:07:a9:77:92:cf:98:fe:03:36:4d:2a:76:
04:32:2a:29:df:d4:e2:ef:85:8e:44:68:5e:30:68:93:87:9f:
f4:83:e1:0f:2c:64:0a:12:09:86:de:ea:fe:aa:1d:2f:d7:56:
90:42:b6:48:b5:50:81:2a:8f:23:a2:27:dd:13:dd:35:45:91:
5e:58:ba:61:62:54:13:2a:8a:22:f6:a1:24:24:f1:7a:85:2d:
ed:13:25:2a:12:48:0d:6c:2e:a4:d1:fd:78:eb:8a:e1:4d:fa:
6f:3c:b3:89:fa:2a:3e:6c:26:9c:a6:86:10:f0:e4:ae:a7:fd:
1c:7a:25:45:02:ae:2a:d7:18:fe:70:68:cb:44:1e:83:6f:ba:
84:a6:2b:90:96:8f:8e:7a:a9:1a:ac:7d:6a:0d:17:34:dc:a6:
4d:f9:e3:15:c0:c1:05:58:29:f1:6e:a5:b1:e9:23:ae:a1:4f:
a5:f4:e2:40:91:b8:84:9d:47:4c:d1:d9:fc:3a:35:77:06:60:
bf:b1:89:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:02 2025 by rpki-client