Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json)
Hash identifier: m+hLXycAzJ2P+EpChiW42zyri9umJev3ZA8DcSlZ25U=
Subject key identifier: D7:BC:B5:83:BA:DE:0A:43:4A:33:9A:DE:64:00:B4:43:D0:27:85:CC
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial: 019A71B7AF81CB6D164FFC57573E262B929E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
Manifest number: 0829
Signing time: Tue 11 Nov 2025 07:00:54 +0000
Manifest this update: Tue 11 Nov 2025 07:00:54 +0000
Manifest next update: Wed 12 Nov 2025 07:00:54 +0000
Files and hashes: 1: ZuTxi79Ck2OCXbkDauPT87FQh1E.roa (hash: xuj1se8JvfBc00cfkDYRLRVr3K+o4nQ3N/ymEwvuis8=)
2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: yqLvPy3mX5Wk99IQWidQyhoyJhKAQ9myPGY/SkGNB2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:af:81:cb:6d:16:4f:fc:57:57:3e:26:2b:92:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Validity
Not Before: Nov 11 07:00:54 2025 GMT
Not After : Nov 12 07:00:54 2025 GMT
Subject: CN=d7bcb583bade0a434a339ade6400b443d02785cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:a4:36:54:24:a0:15:d5:95:e1:df:e4:ed:
d4:f9:07:c9:03:05:ae:32:aa:56:65:06:19:ff:4f:
8d:86:1a:17:1c:37:83:ae:fb:a5:9a:2f:73:ac:2e:
ac:f2:f3:04:5f:4c:4f:c1:1d:f8:97:eb:a5:4d:77:
f0:16:37:f9:ec:3c:bc:85:2b:fa:f3:1d:26:3a:a5:
0b:09:22:4a:fb:80:c4:6d:0c:f5:24:aa:a2:78:5c:
53:9c:d9:fb:4e:cf:0b:f6:dc:07:b5:b7:cb:1d:4e:
0e:c0:48:b5:99:db:75:ea:5a:52:ad:a4:44:71:4b:
78:e4:93:0f:71:2a:06:09:c1:6a:8f:e8:36:5e:cb:
64:74:72:a0:e8:ef:09:2d:2c:fd:b3:a1:8a:94:1c:
8d:e1:5e:8a:63:03:c6:bc:5b:a9:34:ea:5c:da:c0:
7f:d4:8a:41:d0:e0:33:66:53:7f:3d:3b:68:0e:e4:
17:3f:27:6c:63:70:08:93:15:16:f9:3e:98:f3:64:
e8:39:f7:28:65:41:84:59:86:8a:15:06:13:fd:31:
f1:2c:d4:5d:29:42:f1:3e:31:82:97:e9:e9:6a:b3:
1c:7a:33:0f:a9:9b:f6:24:2a:6f:6f:79:67:9d:ed:
fd:7f:1b:20:3f:11:78:30:70:6c:87:cd:d2:06:44:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BC:B5:83:BA:DE:0A:43:4A:33:9A:DE:64:00:B4:43:D0:27:85:CC
X509v3 Authority Key Identifier:
keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:9d:4a:4a:90:cf:73:49:7f:be:fc:61:4f:ef:1f:c9:95:51:
40:99:22:d9:39:1c:a0:e7:7a:15:6c:7d:e3:65:6c:52:05:2e:
10:fe:81:10:09:67:ab:8c:73:a7:36:76:0e:cf:9f:7c:cc:ed:
41:32:da:f5:73:89:b5:25:e8:4c:60:65:05:fe:4d:cc:20:df:
da:e6:17:d1:4c:d7:30:30:4e:14:fa:76:34:90:a4:75:4b:2c:
2f:b9:77:6e:7a:9f:40:10:df:79:d9:c2:d5:13:2d:54:6c:4c:
5f:f9:ea:da:6b:22:27:96:5a:07:d6:99:63:f9:44:57:f9:ea:
2c:df:ab:74:9c:e1:e1:35:b1:b3:39:34:5e:a3:6c:91:e3:93:
52:38:73:4d:63:4f:d4:b8:fa:4f:68:dd:7e:2d:e6:5a:69:2f:
c0:ea:39:9e:31:3d:1b:61:7d:90:66:e7:9e:92:d5:a7:38:d8:
1d:30:7b:fa:9f:79:05:47:5c:c1:07:5e:ba:b7:5b:8a:1e:a0:
d7:d5:d6:53:1f:9b:e0:e9:ff:1c:d4:ad:6c:93:44:67:87:8e:
2e:27:88:ad:fa:bd:04:8e:b5:68:81:37:62:4c:a6:1e:10:67:
1d:3a:87:05:0c:60:79:db:18:13:cf:58:ef:3d:f4:77:f1:00:
47:df:df:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:40 2025 by rpki-client