Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
File: QDx-hd5J15JM5Q09ap5S6enC4xI.mft (raw, json)
Hash identifier: dpqSrGNgIvQveXoKNn08jvHjIJand5e2wNTo3nQPdZc=
Subject key identifier: DE:F6:1A:CE:8C:92:2A:2D:6F:D3:90:12:57:28:87:A5:24:F9:00:82
Authority key identifier: 40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
Certificate issuer: /CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Certificate serial: 019A71EED2780451A28E08316FB782F5F481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
Manifest number: 14E5
Signing time: Tue 11 Nov 2025 08:01:08 +0000
Manifest this update: Tue 11 Nov 2025 08:01:08 +0000
Manifest next update: Wed 12 Nov 2025 08:01:08 +0000
Files and hashes: 1: QDx-hd5J15JM5Q09ap5S6enC4xI.crl (hash: QBLWgF4svHwzKDKEmkYc4aXeYJKUlma2Zsp11nWV21A=)
2: zBQLlk6R8SMqXeJs9KlWAq-2zWs.roa (hash: H5Z9T6mivR2DyTqTRYiFtEvpcqAnMQHqnVNqaL10pMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d2:78:04:51:a2:8e:08:31:6f:b7:82:f5:f4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Validity
Not Before: Nov 11 08:01:08 2025 GMT
Not After : Nov 12 08:01:08 2025 GMT
Subject: CN=def61ace8c922a2d6fd39012572887a524f90082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:c5:ff:91:94:4f:82:31:2c:84:a0:63:b8:
1c:ce:88:9b:e3:1c:cf:97:18:4b:ae:04:12:9d:d3:
a7:d8:e6:a4:95:d9:04:3b:27:f3:e3:2a:ee:bd:c7:
ad:6d:66:10:16:7f:e8:db:50:0a:0e:6b:8e:2d:bd:
1d:ec:69:54:c0:e3:7b:8b:80:09:51:33:91:5e:5c:
1e:43:47:49:0c:97:37:92:ea:21:e9:8f:4d:ac:69:
df:18:ca:99:ee:b4:b4:29:6a:cd:a8:17:1c:39:e7:
50:c8:61:f6:b7:9f:69:a3:65:bc:65:e1:04:19:08:
30:1a:f0:85:9e:79:f0:e9:2d:bc:a5:16:66:2c:83:
67:9c:93:a5:5c:80:8f:6d:ec:07:df:8d:ac:cb:18:
9a:55:6a:c6:0f:03:6b:01:f7:c2:a6:32:07:7f:3c:
51:cb:ff:15:19:e9:e7:5a:9a:59:10:63:0f:cb:ca:
fa:57:90:f4:31:cb:d5:f0:c7:a4:7c:54:58:1d:c8:
ac:62:91:0c:12:93:41:d7:17:1e:8b:9d:f2:5f:bd:
af:33:5b:df:53:ea:e3:5f:53:1e:cd:67:1b:29:6b:
0f:79:b3:c0:25:33:75:ce:37:46:2d:fc:10:8f:6d:
9e:45:40:2d:20:55:d5:7b:c6:b0:88:ee:78:4e:73:
f2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F6:1A:CE:8C:92:2A:2D:6F:D3:90:12:57:28:87:A5:24:F9:00:82
X509v3 Authority Key Identifier:
keyid:40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:74:0f:9f:9d:b6:51:34:28:ff:03:3e:a4:e3:3e:a5:60:44:
b1:46:d2:6f:83:b5:b4:fb:30:7f:6e:36:63:37:d4:0e:01:67:
1b:d3:af:bb:96:af:25:13:99:2b:f1:08:15:c1:0f:e6:e1:3b:
57:07:14:73:94:15:83:34:33:c9:cc:1a:00:96:ac:8b:e8:b7:
29:e5:2c:b9:c7:7d:d0:9b:49:ee:03:bd:d4:d6:38:33:aa:fd:
58:ef:d0:12:27:5b:04:04:7f:a9:c8:4e:7b:1f:c1:c4:a8:5d:
6e:7b:69:49:14:3b:16:4b:bc:6a:c9:54:95:6d:4e:02:23:20:
c8:ce:35:22:e5:43:70:05:59:eb:76:c8:d7:95:b9:89:67:62:
6b:fc:e1:e8:38:05:9a:c0:f1:7a:2a:ab:d8:f3:a7:e4:da:89:
a3:90:52:4f:8f:eb:31:c5:26:c0:5c:9e:26:a2:19:8d:fb:6c:
e8:85:a0:0b:10:4b:4d:a3:f9:d2:3c:01:6f:23:76:6f:e2:40:
02:47:7a:f1:e6:66:00:70:7e:26:ed:19:9e:ea:e7:2a:44:54:
d0:9a:e5:04:9a:f2:b6:91:a3:46:0f:4e:64:1b:43:27:c2:77:
47:4b:83:7b:fc:7c:0c:a7:f5:66:9a:c7:98:21:d7:ae:df:36:
12:09:26:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:09 2025 by rpki-client