Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json)
Hash identifier: q0d6/aNm2DWhVwFobDNuFpHmJ4vt284bv6dq4hbc1+Q=
Subject key identifier: 52:F5:E6:39:BF:A1:B1:2D:F5:D5:BE:77:42:AF:81:CB:87:BA:E1:46
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial: 0199FDD9F55FDA8B4BB08BCEA2CE0976C825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
Manifest number: 07ED
Signing time: Sun 19 Oct 2025 19:02:23 +0000
Manifest this update: Sun 19 Oct 2025 19:02:23 +0000
Manifest next update: Mon 20 Oct 2025 19:02:23 +0000
Files and hashes: 1: ZuTxi79Ck2OCXbkDauPT87FQh1E.roa (hash: xuj1se8JvfBc00cfkDYRLRVr3K+o4nQ3N/ymEwvuis8=)
2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: FuoO1TfyedpG0Fk0VjyJ+2Wx1Kjx9B0PAF6qFfEdGF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:f5:5f:da:8b:4b:b0:8b:ce:a2:ce:09:76:c8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Validity
Not Before: Oct 19 19:02:23 2025 GMT
Not After : Oct 20 19:02:23 2025 GMT
Subject: CN=52f5e639bfa1b12df5d5be7742af81cb87bae146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:b9:c4:b6:de:b9:34:8b:a2:2f:3a:8e:84:
37:81:91:45:d0:ae:dc:6a:d1:24:ff:7c:19:ed:dc:
41:47:79:3a:94:f8:64:c6:bc:54:26:37:f0:79:6a:
8d:a0:2e:8a:90:b7:40:f6:b6:25:b6:d9:44:d5:e1:
44:6f:98:94:74:51:1a:fc:84:c6:df:2c:6f:2c:6f:
54:7a:f5:a6:af:08:c6:8b:dc:94:26:3a:60:f3:4b:
d4:57:94:86:35:6d:ce:e4:8a:68:cf:46:1d:f5:51:
23:19:1a:3b:61:92:c1:6a:e0:32:28:ce:d0:a2:df:
cb:51:1b:41:eb:21:33:cd:11:32:5a:55:44:be:e4:
26:92:25:11:08:03:f5:a8:a9:6d:b6:86:c7:ca:a4:
53:65:68:c1:62:10:75:38:32:7b:0f:6a:4d:73:bb:
6b:f8:c6:b2:b4:0b:00:18:cb:e9:c8:e4:ed:87:e8:
b1:33:a0:dc:a7:31:b4:52:cb:59:a0:f4:41:95:81:
dc:95:0c:d3:e8:c7:86:6e:43:ce:a9:fd:b0:7d:91:
de:31:51:12:be:7f:bb:66:22:b6:5a:1c:21:5f:9b:
76:80:72:ed:89:e3:84:5f:d9:0a:54:94:8b:32:c2:
2b:3d:66:10:92:8c:cb:5e:37:48:d3:35:c4:1f:b4:
69:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F5:E6:39:BF:A1:B1:2D:F5:D5:BE:77:42:AF:81:CB:87:BA:E1:46
X509v3 Authority Key Identifier:
keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e5:3b:d5:38:7c:c4:3a:f2:1d:7f:a7:f6:5a:cb:d1:d7:08:
e3:c0:71:b7:0e:7d:15:f1:bf:90:cb:2f:1a:03:3e:f6:64:06:
33:cc:b2:ff:8b:16:5e:77:0d:20:95:29:29:39:aa:e5:e2:78:
5a:6b:5f:3d:9f:c3:41:22:83:29:0f:67:4c:9f:cc:59:a3:d0:
12:e1:5d:9c:90:c2:22:52:ed:a6:8c:76:4d:e5:c5:7d:c1:d9:
9d:d7:18:54:01:9f:b5:f1:e5:d2:08:6b:78:79:85:13:f1:96:
9d:78:61:75:91:da:36:27:00:4a:06:4f:1b:a4:8c:10:88:58:
7b:c5:db:a1:29:fe:16:cc:f0:b3:22:59:bb:83:91:fb:fe:33:
e7:62:ee:ba:37:e2:73:6a:a2:97:9c:d6:50:b4:70:1e:a2:9a:
6b:71:5c:06:ce:6e:ab:85:ad:e9:79:05:81:52:77:59:db:46:
4f:63:40:0f:20:09:36:e9:23:e8:c3:ba:44:1c:6b:90:c7:83:
88:bf:2d:03:30:67:72:c0:b5:19:2f:cb:4f:ef:bc:78:ce:84:
bd:f3:d0:eb:aa:1c:0d:08:09:fe:8c:d3:8d:d9:87:a9:09:5b:
e8:7a:78:2c:d7:86:ec:f1:89:e6:b0:9c:29:f0:7a:80:4d:16:
99:ad:1b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:22 2025 by rpki-client