Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
File: QDx-hd5J15JM5Q09ap5S6enC4xI.mft (raw, json)
Hash identifier: 7B3X60fVlLjDatTWLkuxZ92gY3f7Oo1aVHpDTtaiqw0=
Subject key identifier: 25:FC:EE:50:59:DE:4A:7D:A2:BE:1F:9D:E3:78:DD:9E:DC:04:98:51
Authority key identifier: 40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
Certificate issuer: /CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Certificate serial: 0199FFFEBECEDA817701BE4C80912CE49292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
Manifest number: 14AA
Signing time: Mon 20 Oct 2025 05:01:48 +0000
Manifest this update: Mon 20 Oct 2025 05:01:48 +0000
Manifest next update: Tue 21 Oct 2025 05:01:48 +0000
Files and hashes: 1: QDx-hd5J15JM5Q09ap5S6enC4xI.crl (hash: Yplkq1VnmCNnH/Tqpas9IV59ZARwMkx8KJcWzXflgLU=)
2: zBQLlk6R8SMqXeJs9KlWAq-2zWs.roa (hash: H5Z9T6mivR2DyTqTRYiFtEvpcqAnMQHqnVNqaL10pMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:be:ce:da:81:77:01:be:4c:80:91:2c:e4:92:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Validity
Not Before: Oct 20 05:01:48 2025 GMT
Not After : Oct 21 05:01:48 2025 GMT
Subject: CN=25fcee5059de4a7da2be1f9de378dd9edc049851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b7:44:3a:8b:d4:f0:8a:22:25:c4:9d:2a:2b:
f2:8d:e0:24:cb:1c:fa:6a:9a:cf:06:11:a0:2a:94:
a5:0d:b1:9e:8d:dd:54:a4:0b:3a:88:e2:4e:4e:6b:
3b:b5:8f:71:a6:92:75:a2:04:cc:1b:9d:53:56:09:
a2:3d:59:d9:4c:f9:da:a7:ba:da:d2:e6:ba:38:da:
ce:c4:b7:bf:99:20:38:1b:53:9b:aa:db:90:3f:2a:
02:b4:7f:54:3f:52:5c:98:01:3a:32:49:70:8c:44:
6b:8a:71:1b:de:fb:d9:68:7c:2e:52:dc:9c:06:d9:
2f:62:1a:c3:09:a8:61:d9:03:64:81:17:ea:80:7a:
d6:11:c1:df:b1:82:c5:4f:9d:fb:bc:78:c7:d5:55:
6a:0e:a6:79:37:7c:ca:d5:9f:96:e5:eb:c4:dd:18:
c4:ce:4e:de:53:9f:ec:f4:41:2f:ef:61:99:28:fd:
20:61:77:96:fc:47:0e:e5:6e:fc:fa:cc:c9:a1:a7:
7b:1c:2d:e9:b7:0b:8d:ce:6b:3b:0a:dc:1c:3e:3a:
b4:91:62:f1:67:d7:10:5a:4b:ee:a3:93:05:f0:49:
28:a1:05:99:9d:11:ea:1e:fb:d4:80:80:40:fb:7d:
50:82:17:c6:93:d7:68:bc:0f:5a:40:4d:6e:f6:23:
35:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FC:EE:50:59:DE:4A:7D:A2:BE:1F:9D:E3:78:DD:9E:DC:04:98:51
X509v3 Authority Key Identifier:
keyid:40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8f:47:a7:e1:26:c9:2a:9f:8d:3f:eb:c4:c8:f8:6c:9a:6e:
0c:d6:ec:dd:55:ee:b7:6b:13:3d:40:30:08:bf:87:c0:58:a3:
fe:96:82:42:97:5d:df:11:59:26:6f:4a:cf:e5:14:9e:be:ea:
73:21:03:b1:f9:af:af:cc:4c:f8:de:bf:84:6b:23:bd:a1:4b:
d2:99:df:f8:c0:a1:a4:71:b3:23:d3:66:c9:5c:a4:52:09:5a:
55:7d:bf:e2:78:82:56:f8:d1:15:57:3f:64:03:9f:f9:f5:80:
63:96:e6:4c:16:c1:f1:21:7a:48:3e:e2:09:47:63:6f:cb:0a:
c4:d4:24:7d:f7:42:40:2f:ae:ed:63:c8:2b:ba:25:5f:05:e5:
bf:bc:ec:a1:cc:40:5f:9a:f0:f4:30:96:68:d3:7e:9a:dc:cd:
93:a5:a2:d0:f6:89:20:02:5d:02:36:81:e0:cd:8f:1c:ef:90:
6c:32:83:d6:64:b8:85:d0:e2:0c:4c:9e:13:ea:29:a7:ed:3e:
b0:51:7f:89:36:77:a5:1f:48:63:51:bf:b5:48:1b:29:fc:9d:
e1:43:7d:90:f4:39:ed:3e:d7:aa:f0:7d:70:de:ce:2e:db:cd:
cd:47:ec:0b:64:5f:45:6b:b2:f5:15:a5:e3:56:ec:3f:33:40:
c9:c5:39:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//r7O2oF3Ab5MgJEs5JKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwM2M3ZTg1ZGU0OWQ3OTI0Y2U1MGQzZDZhOWU1MmU5ZTlj
MmUzMTIwHhcNMjUxMDIwMDUwMTQ4WhcNMjUxMDIxMDUwMTQ4WjAzMTEwLwYDVQQD
EygyNWZjZWU1MDU5ZGU0YTdkYTJiZTFmOWRlMzc4ZGQ5ZWRjMDQ5ODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LdEOovU8IoiJcSdKivyjeAkyxz6
aprPBhGgKpSlDbGejd1UpAs6iOJOTms7tY9xppJ1ogTMG51TVgmiPVnZTPnap7ra
0ua6ONrOxLe/mSA4G1ObqtuQPyoCtH9UP1JcmAE6MklwjERrinEb3vvZaHwuUtyc
BtkvYhrDCahh2QNkgRfqgHrWEcHfsYLFT537vHjH1VVqDqZ5N3zK1Z+W5evE3RjE
zk7eU5/s9EEv72GZKP0gYXeW/EcO5W78+szJoad7HC3ptwuNzms7CtwcPjq0kWLx
Z9cQWkvuo5MF8EkooQWZnRHqHvvUgIBA+31QghfGk9dovA9aQE1u9iM1hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCX87lBZ3kp9or4fneN43Z7cBJhRMB8GA1UdIwQY
MBaAFEA8foXeSdeSTOUNPWqeUunpwuMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUR4LWhkNUoxNUpNNVEwOWFwNVM2ZW5DNHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wYTAwNzgtNjQ4Zi00MzYwLTk0Yzct
MGQ2ZGNiMGVjZmNmLzEvUUR4LWhkNUoxNUpNNVEwOWFwNVM2ZW5DNHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wYTAwNzgtNjQ4Zi00MzYwLTk0YzctMGQ2ZGNiMGVjZmNm
LzEvUUR4LWhkNUoxNUpNNVEwOWFwNVM2ZW5DNHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKI9Hp+Em
ySqfjT/rxMj4bJpuDNbs3VXut2sTPUAwCL+HwFij/paCQpdd3xFZJm9Kz+UUnr7q
cyEDsfmvr8xM+N6/hGsjvaFL0pnf+MChpHGzI9NmyVykUglaVX2/4niCVvjRFVc/
ZAOf+fWAY5bmTBbB8SF6SD7iCUdjb8sKxNQkffdCQC+u7WPIK7olXwXlv7zsocxA
X5rw9DCWaNN+mtzNk6Wi0PaJIAJdAjaB4M2PHO+QbDKD1mS4hdDiDEyeE+opp+0+
sFF/iTZ3pR9IY1G/tUgbKfyd4UN9kPQ57T7XqvB9cN7OLtvNzUfsC2RfRWuy9RWl
41bsPzNAycU5sA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:12:34 2025 by rpki-client