Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
File: QDx-hd5J15JM5Q09ap5S6enC4xI.mft (raw, json)
Hash identifier: ay5eh8PkSshBTkwwCBU3hKmzLTphDMFdmu9gdI7cvj8=
Subject key identifier: 69:29:C5:71:37:9B:51:B0:46:34:57:4C:9D:5B:59:5E:BD:F6:EE:F5
Authority key identifier: 40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
Certificate issuer: /CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Certificate serial: 019A5119A827BA714B14AD52FB507D60F181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
Manifest number: 14D4
Signing time: Tue 04 Nov 2025 23:00:27 +0000
Manifest this update: Tue 04 Nov 2025 23:00:27 +0000
Manifest next update: Wed 05 Nov 2025 23:00:27 +0000
Files and hashes: 1: QDx-hd5J15JM5Q09ap5S6enC4xI.crl (hash: xft2jFilctI1Xy82niwR/Vtc+t3C/pDYRYPtS/JqHa0=)
2: zBQLlk6R8SMqXeJs9KlWAq-2zWs.roa (hash: H5Z9T6mivR2DyTqTRYiFtEvpcqAnMQHqnVNqaL10pMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:a8:27:ba:71:4b:14:ad:52:fb:50:7d:60:f1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Validity
Not Before: Nov 4 23:00:27 2025 GMT
Not After : Nov 5 23:00:27 2025 GMT
Subject: CN=6929c571379b51b04634574c9d5b595ebdf6eef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:9c:b8:e5:5e:98:ca:ca:1d:5d:9b:ff:e5:
e8:33:e7:e0:12:1e:08:73:b9:3b:0e:35:e0:22:09:
9c:be:c4:81:1b:5f:7e:50:e7:50:09:1d:da:93:32:
bc:d4:12:08:c8:a6:9e:f9:83:a2:0d:4b:e1:63:35:
0b:56:d0:8d:7c:4b:51:6b:7a:61:d1:64:47:a1:d5:
cf:c3:17:dd:70:5d:77:62:84:c9:cb:45:ec:4a:0a:
10:a6:4a:a0:65:92:b1:85:8f:8a:12:7a:bf:56:28:
d0:f4:b1:06:1c:c5:86:3a:d3:8c:53:2c:67:f8:0f:
bb:c2:b2:04:54:22:a1:2d:a7:27:92:87:c1:24:9c:
75:71:ab:25:5e:d8:ad:bd:0c:1f:18:42:64:10:a0:
1e:49:f9:26:04:81:22:7e:25:e0:f3:82:6d:87:08:
8f:ea:c3:83:00:6e:74:ad:9a:87:38:9e:af:c7:7c:
06:92:c2:e2:77:ff:72:29:46:88:63:7e:c7:11:1f:
d2:9f:aa:ad:28:02:5c:a9:50:00:3a:2e:8b:7d:b3:
71:9e:54:ec:0b:5e:b2:a3:f9:c0:a5:66:91:1e:89:
fc:a5:33:09:14:7a:1c:c4:ce:87:53:f5:bf:a4:4b:
6e:f9:96:c7:f3:cf:ac:d4:0b:ee:94:09:8c:c1:05:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:29:C5:71:37:9B:51:B0:46:34:57:4C:9D:5B:59:5E:BD:F6:EE:F5
X509v3 Authority Key Identifier:
keyid:40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0c:68:93:6b:0c:2a:a0:4f:02:7e:7b:9f:a4:a6:dd:5a:59:
c9:ad:7c:e4:e2:44:90:4a:ed:af:48:ad:6c:cb:76:56:0d:18:
fb:4a:e9:07:d5:99:53:68:1f:2e:94:01:66:d2:a5:25:ff:9a:
8e:76:09:29:26:d1:01:4f:57:4c:85:31:89:c3:a2:c3:ff:a1:
32:7d:7d:98:9c:49:7b:d0:50:e5:ae:2f:9c:89:da:df:59:93:
5a:a4:42:72:70:43:a7:47:e3:f3:26:4e:62:15:13:28:52:77:
0e:4b:20:e4:1c:45:ac:40:ba:25:85:39:e2:c2:15:ab:95:05:
32:a8:1e:3b:f6:0e:56:d8:d4:23:77:d1:b0:d6:54:39:6c:fa:
3a:92:86:48:c5:c3:40:49:c1:ff:15:21:2f:83:cb:d2:a4:10:
77:f3:9d:1b:b6:ac:11:5e:74:1f:51:7a:90:41:a9:dd:16:8e:
2d:4d:0d:14:28:fa:a3:00:91:d2:25:4a:b8:64:3f:d4:a0:c0:
46:d0:cc:91:62:ea:09:31:a8:d9:88:95:98:ca:61:9b:8f:e6:
0d:84:36:2d:b0:f3:84:fe:79:f0:a3:38:81:1e:18:78:ce:9f:
dd:92:7a:1d:20:9b:f2:19:96:a7:57:23:77:b5:0f:93:66:a9:
1d:a6:c5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:00:48 2025 by rpki-client