Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json)
Hash identifier: gwD0thL3nc5ZqS1EH1jSOXlVG6jjqBxvDZT8kdVE/N8=
Subject key identifier: DF:44:C1:B6:C8:60:D7:4E:4F:DC:7B:F1:4A:81:35:F5:29:7F:70:CD
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial: 019A4EF5DE055549BD48E0FFC907A36F8A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
Manifest number: 0817
Signing time: Tue 04 Nov 2025 13:02:07 +0000
Manifest this update: Tue 04 Nov 2025 13:02:07 +0000
Manifest next update: Wed 05 Nov 2025 13:02:07 +0000
Files and hashes: 1: ZuTxi79Ck2OCXbkDauPT87FQh1E.roa (hash: xuj1se8JvfBc00cfkDYRLRVr3K+o4nQ3N/ymEwvuis8=)
2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: 15nKsqd36tGP858aNkoSyA1nOW2/vQC4DGUl180UMOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:de:05:55:49:bd:48:e0:ff:c9:07:a3:6f:8a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Validity
Not Before: Nov 4 13:02:07 2025 GMT
Not After : Nov 5 13:02:07 2025 GMT
Subject: CN=df44c1b6c860d74e4fdc7bf14a8135f5297f70cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:bd:cf:97:9b:ba:d3:3a:7e:59:67:c2:9f:
80:8d:cb:8f:d7:c0:b5:1a:61:77:c0:d7:5e:b3:83:
0d:2a:3f:b4:2b:54:d6:73:78:42:47:d8:fb:a3:6a:
36:cc:ec:31:97:7f:71:e4:8f:0e:ef:b9:ed:ee:38:
35:15:19:ae:bd:82:6f:3b:49:b0:b5:a9:be:9f:7f:
2c:ec:7e:b3:65:39:7a:10:c0:24:7e:f8:7a:2a:9a:
29:5a:e3:2a:e5:18:20:5f:3e:cf:57:10:27:15:3e:
7a:45:1d:79:04:a9:9c:4e:84:c4:83:bc:c7:52:19:
06:b7:dd:c7:5e:3f:9c:13:a3:58:1f:a6:fd:27:bd:
f7:dc:d6:57:73:89:ab:a6:38:e9:ef:d8:e9:58:5a:
5f:85:f5:30:03:f5:81:a3:2d:8a:61:25:61:45:e3:
3a:88:a6:60:24:28:42:35:28:c1:ae:1c:5a:9a:5a:
38:d7:6e:80:24:f2:86:1d:d8:45:de:ea:ac:cf:d4:
dc:99:fa:1a:62:5b:28:0d:8d:57:51:3a:26:d6:27:
b6:df:1e:b4:79:28:4b:e8:60:9b:e7:b7:b1:c9:8f:
a7:db:86:61:17:0b:d9:96:41:c3:d3:30:09:6d:e2:
c6:83:54:ca:f8:ca:66:77:33:33:c8:bc:a5:57:b6:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:44:C1:B6:C8:60:D7:4E:4F:DC:7B:F1:4A:81:35:F5:29:7F:70:CD
X509v3 Authority Key Identifier:
keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0d:5a:73:a8:fe:26:32:15:e7:c8:79:5d:b4:20:ec:bb:73:
2b:6b:ab:6c:cb:28:09:93:d0:97:76:9a:74:88:2c:2e:a8:55:
88:72:21:e4:24:91:9f:77:fe:54:9e:30:d6:f2:ae:52:d0:8b:
3c:36:6c:d0:21:af:2a:68:36:f8:5a:28:3a:e6:b7:e5:78:ef:
3a:38:95:a2:63:f8:3f:38:80:34:77:17:bb:c2:64:d9:f5:d1:
07:5b:d3:0d:6f:58:d1:0e:da:d1:52:2d:74:76:d5:5f:d3:74:
89:c7:76:3f:2c:29:0f:7a:93:c7:a6:1c:97:90:c2:f7:cd:1b:
21:e7:6d:07:82:18:cb:8a:1c:13:8a:f4:20:4a:56:7e:73:f0:
5c:90:66:4f:36:b7:63:56:4c:ac:48:0d:c8:4f:ec:df:54:dd:
13:b9:b1:fd:49:74:3d:b5:7d:13:f4:dc:6f:38:a0:83:ab:b3:
91:d5:06:c9:de:87:e5:d3:4c:00:13:07:d5:4b:35:08:cf:66:
4f:35:95:54:34:83:44:ca:17:43:52:f0:11:72:84:31:51:b3:
92:39:bc:98:5a:22:0d:83:65:4e:9c:b2:f8:f4:a8:e9:10:7c:
e3:e9:ba:f7:5b:e9:f0:49:8d:55:b7:77:0b:63:bd:58:b6:e1:
61:56:ff:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:08 2025 by rpki-client