Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
File: QDx-hd5J15JM5Q09ap5S6enC4xI.mft (raw, json)
Hash identifier: qHQRbuVbMkH+Ea6GPM2y/1wuby/8bmB0xfw5V9TNges=
Subject key identifier: F0:4A:67:00:04:99:03:8F:A8:97:99:29:91:5A:BF:3A:47:26:9C:49
Authority key identifier: 40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
Certificate issuer: /CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Certificate serial: 0196B7EC28712B75EF5AD439BAD363BF231A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
Manifest number: 12F7
Signing time: Sat 10 May 2025 02:00:29 +0000
Manifest this update: Sat 10 May 2025 02:00:29 +0000
Manifest next update: Sun 11 May 2025 02:00:29 +0000
Files and hashes: 1: QDx-hd5J15JM5Q09ap5S6enC4xI.crl (hash: jdXdTUv7KrxYwlRirhHArVzIPBbkoru/92TP6X8uwOo=)
2: zBQLlk6R8SMqXeJs9KlWAq-2zWs.roa (hash: H5Z9T6mivR2DyTqTRYiFtEvpcqAnMQHqnVNqaL10pMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:28:71:2b:75:ef:5a:d4:39:ba:d3:63:bf:23:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Validity
Not Before: May 10 02:00:29 2025 GMT
Not After : May 11 02:00:29 2025 GMT
Subject: CN=f04a67000499038fa8979929915abf3a47269c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:1e:27:38:f1:c0:93:df:6a:64:f4:77:7d:
64:34:ee:38:0d:20:8f:00:9c:17:45:9e:c8:6a:97:
80:6b:0a:ce:44:7f:72:b1:e3:d6:e8:e6:46:48:e0:
22:7c:fe:65:78:3b:c3:aa:0a:22:29:d8:ae:98:ec:
b4:ae:7b:2f:ff:36:c5:7d:54:5c:63:e9:c7:79:fc:
e8:ef:2e:63:42:05:f6:6b:93:43:8a:31:09:7a:2b:
5a:e3:b8:e3:c9:a5:ff:50:50:31:44:25:e5:dd:90:
6a:2a:20:f7:bf:60:2f:7a:68:76:6c:7d:71:e2:6a:
d5:aa:db:90:49:16:ea:41:81:98:fd:1f:f8:9a:ae:
ad:e6:2f:53:f8:ae:94:08:d7:f1:e1:23:61:b5:98:
a3:33:ce:66:51:9c:d2:b8:b0:2c:78:b4:3b:2e:92:
8d:0a:6a:20:59:bf:3c:26:f7:f3:88:54:42:24:47:
b1:40:f0:d7:06:d4:c8:3d:7e:a9:09:a9:d6:aa:7a:
8e:05:bd:65:10:aa:04:d6:34:d7:a8:6c:96:a9:f2:
82:ae:cc:72:a7:b4:02:19:5b:61:25:6c:0d:5f:d2:
5b:b2:f6:5f:5c:fe:0f:2c:e3:e2:bf:a5:fc:c2:8f:
ac:98:c7:29:75:c0:dd:31:85:d7:09:3a:1f:be:05:
41:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4A:67:00:04:99:03:8F:A8:97:99:29:91:5A:BF:3A:47:26:9C:49
X509v3 Authority Key Identifier:
keyid:40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:03:62:49:a6:81:c0:c3:16:27:d7:de:2d:9b:b9:da:b1:7c:
0a:8a:40:62:01:1e:e2:73:f1:6e:00:1e:12:1f:f3:94:b9:c9:
80:7a:da:a6:7c:47:af:dc:a5:57:46:83:07:21:9b:90:58:f5:
e8:dc:b4:c7:3f:19:a6:2c:7f:ce:03:7c:7f:71:9e:4d:af:e9:
8a:fc:30:76:0d:f2:db:9c:10:22:3b:5c:98:fe:af:17:39:53:
04:67:69:a2:ff:17:5b:a0:d5:37:6c:5b:e7:20:c3:4d:5d:c2:
87:20:55:94:9b:ab:9e:94:b6:02:55:68:c4:08:6e:24:85:d3:
95:d3:5a:aa:0e:73:cd:f3:f7:7c:8d:09:32:6b:60:28:6e:95:
ef:cd:22:24:57:e8:4e:55:f1:31:7a:a7:e2:ce:83:fc:d9:4a:
9e:44:10:b1:33:05:72:79:22:7f:93:1d:fc:6b:07:c8:4b:40:
d0:1e:82:9b:6d:65:5a:eb:dc:88:04:14:4d:55:e9:c3:d9:1c:
9a:48:9a:0d:c0:9e:43:a2:9d:48:d3:7d:db:87:1e:08:08:b4:
e4:20:46:73:8c:18:79:33:cb:91:65:c0:05:7c:88:df:d2:42:
9d:6d:49:e4:e3:a8:d2:cb:c9:ff:d3:80:66:c8:6a:1b:ac:8f:
a3:20:c6:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa37ChxK3XvWtQ5utNjvyMaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwM2M3ZTg1ZGU0OWQ3OTI0Y2U1MGQzZDZhOWU1MmU5ZTlj
MmUzMTIwHhcNMjUwNTEwMDIwMDI5WhcNMjUwNTExMDIwMDI5WjAzMTEwLwYDVQQD
EyhmMDRhNjcwMDA0OTkwMzhmYTg5Nzk5Mjk5MTVhYmYzYTQ3MjY5YzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzQeJzjxwJPfamT0d31kNO44DSCP
AJwXRZ7IapeAawrORH9ysePW6OZGSOAifP5leDvDqgoiKdiumOy0rnsv/zbFfVRc
Y+nHefzo7y5jQgX2a5NDijEJeita47jjyaX/UFAxRCXl3ZBqKiD3v2Avemh2bH1x
4mrVqtuQSRbqQYGY/R/4mq6t5i9T+K6UCNfx4SNhtZijM85mUZzSuLAseLQ7LpKN
CmogWb88JvfziFRCJEexQPDXBtTIPX6pCanWqnqOBb1lEKoE1jTXqGyWqfKCrsxy
p7QCGVthJWwNX9JbsvZfXP4PLOPiv6X8wo+smMcpdcDdMYXXCTofvgVB5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBKZwAEmQOPqJeZKZFavzpHJpxJMB8GA1UdIwQY
MBaAFEA8foXeSdeSTOUNPWqeUunpwuMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUR4LWhkNUoxNUpNNVEwOWFwNVM2ZW5DNHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wYTAwNzgtNjQ4Zi00MzYwLTk0Yzct
MGQ2ZGNiMGVjZmNmLzEvUUR4LWhkNUoxNUpNNVEwOWFwNVM2ZW5DNHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wYTAwNzgtNjQ4Zi00MzYwLTk0YzctMGQ2ZGNiMGVjZmNm
LzEvUUR4LWhkNUoxNUpNNVEwOWFwNVM2ZW5DNHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQNiSaaB
wMMWJ9feLZu52rF8CopAYgEe4nPxbgAeEh/zlLnJgHrapnxHr9ylV0aDByGbkFj1
6Ny0xz8Zpix/zgN8f3GeTa/pivwwdg3y25wQIjtcmP6vFzlTBGdpov8XW6DVN2xb
5yDDTV3ChyBVlJurnpS2AlVoxAhuJIXTldNaqg5zzfP3fI0JMmtgKG6V780iJFfo
TlXxMXqn4s6D/NlKnkQQsTMFcnkif5Md/GsHyEtA0B6Cm21lWuvciAQUTVXpw9kc
mkiaDcCeQ6KdSNN924ceCAi05CBGc4wYeTPLkWXABXyI39JCnW1J5OOo0svJ/9OA
ZshqG6yPoyDGTg==
-----END CERTIFICATE-----
Generated at Sat May 10 06:36:52 2025 by rpki-client