
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json)
Hash identifier: YqO7vntt7MYV5oUpEoUehOO9oBrpoEtg5gPuaEEGc9U=
Subject key identifier: A4:7D:8C:8B:46:36:B6:73:E4:74:43:D3:4D:BD:6D:2A:52:C8:B2:2A
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial: 01987F799286B391BE60E20E689DD24FAE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
Manifest number: 0727
Signing time: Wed 06 Aug 2025 13:02:10 +0000
Manifest this update: Wed 06 Aug 2025 13:02:10 +0000
Manifest next update: Thu 07 Aug 2025 13:02:10 +0000
Files and hashes: 1: ZuTxi79Ck2OCXbkDauPT87FQh1E.roa (hash: xuj1se8JvfBc00cfkDYRLRVr3K+o4nQ3N/ymEwvuis8=)
2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: II7OiOwpNF83PfeqIMqopuXmCBmC/ae+9xdxAjDH/RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:92:86:b3:91:be:60:e2:0e:68:9d:d2:4f:ae:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Validity
Not Before: Aug 6 13:02:10 2025 GMT
Not After : Aug 7 13:02:10 2025 GMT
Subject: CN=a47d8c8b4636b673e47443d34dbd6d2a52c8b22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:96:0c:a9:67:7d:de:1d:d6:e3:c6:3f:c0:
a5:3b:71:dc:ac:1b:2a:66:b5:f5:99:37:94:54:02:
27:e5:6d:20:48:17:03:b6:36:4d:eb:96:45:fb:bf:
31:2f:3a:13:ed:ba:f6:d6:73:d6:98:17:ff:ee:60:
d4:cd:29:4e:23:91:83:1e:6e:b2:91:2c:19:55:d4:
79:44:d0:86:f1:8d:7b:a0:40:d2:c5:1b:00:7a:56:
89:c7:30:2a:3f:d9:23:5e:c7:06:24:6c:12:8e:04:
9f:ad:3f:a7:e5:66:33:85:c4:d6:42:85:5d:4e:ee:
f0:f9:05:5c:14:0f:ba:23:b7:34:2b:73:71:90:61:
92:39:19:f3:14:c2:a9:58:31:5a:f2:4d:56:a9:a4:
1e:df:c0:ee:1a:ad:1f:21:a8:b5:ea:e3:9c:2b:f2:
21:90:04:bb:98:42:76:1e:0e:9d:48:95:03:0b:c6:
aa:ef:5b:0a:44:71:1f:09:ed:f9:54:a7:11:f9:13:
c6:4c:2e:54:25:42:92:c3:11:c9:3e:82:86:b8:a0:
75:52:ef:d3:fa:ed:1b:ea:ae:79:02:d5:7a:a8:69:
f2:ce:8e:50:5a:d7:b9:88:9a:4f:d1:74:94:80:59:
e6:bb:95:a4:86:88:41:31:05:31:73:98:e0:4c:17:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7D:8C:8B:46:36:B6:73:E4:74:43:D3:4D:BD:6D:2A:52:C8:B2:2A
X509v3 Authority Key Identifier:
keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c5:a1:d0:96:2f:c8:07:a7:a3:fc:08:6a:da:f1:3e:2d:e2:
3e:23:87:70:1f:20:29:ef:34:af:4a:09:39:f1:aa:62:01:8d:
8f:de:e5:2e:dc:1b:41:e6:b4:72:64:5d:7c:59:17:e8:6d:79:
b7:2a:f3:37:02:88:e8:f5:06:97:13:a9:7a:4f:d1:a1:eb:61:
a3:03:cf:3e:e2:68:f8:71:e0:35:8d:3a:45:81:61:bb:13:85:
be:f9:07:2b:ff:04:0c:4c:ff:98:d3:67:e1:b7:2c:0f:94:69:
1d:ab:51:7c:e1:25:9f:69:43:61:c2:9b:71:c9:3e:6e:6f:48:
8a:7e:23:e8:34:79:72:be:2e:ba:06:bc:a1:5a:0c:2c:82:ff:
c5:15:56:59:bc:06:a8:55:31:c4:51:5c:7f:98:a8:ff:4f:a7:
7a:28:2d:27:f1:0a:f5:76:83:b5:70:74:05:1f:45:e7:72:28:
b3:4e:d2:15:8a:30:7c:c2:f8:34:14:95:2d:86:93:56:59:b0:
7b:ab:73:52:b1:8c:64:2b:1d:08:97:81:90:0c:ce:ef:05:79:
73:02:ea:c7:71:c0:e0:e3:03:32:db:08:b2:7b:61:89:52:9a:
2f:c4:8a:f8:82:1b:72:4c:50:1d:48:76:66:2f:c8:e1:e1:b1:
8f:1f:4e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:16:09 2025 by rpki-client