Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier: vOjBRWYL5eNMqCMAhjJqoDBc8wDDsXy3XwHrf8Ezlhc=
Subject key identifier: 38:EB:F0:49:85:79:6A:19:22:38:0F:7C:01:F5:0D:44:82:B9:16:D4
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 01984A780F12CEAA9617EFE97E7B5C61BDA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number: 094B
Signing time: Sun 27 Jul 2025 06:00:38 +0000
Manifest this update: Sun 27 Jul 2025 06:00:38 +0000
Manifest next update: Mon 28 Jul 2025 06:00:38 +0000
Files and hashes: 1: 2XR2jy2pxsivUCWaEQDKm37Kfv8.roa (hash: JYfdJrJXlt+b2LxrGfVDugUW4/PVdSDu77ltGYhWQfw=)
2: fZx-mDB13JnuV_-VzM2j7qkuqi0.roa (hash: zv9S//eX11qAMytqBqLEiGaYvvDY8kAtaLQl7dqZVZU=)
3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: tl7xTPRfLOiEoNIZaungmRW829pN9ehYvTjpeN669T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:0f:12:ce:aa:96:17:ef:e9:7e:7b:5c:61:bd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: Jul 27 06:00:38 2025 GMT
Not After : Jul 28 06:00:38 2025 GMT
Subject: CN=38ebf04985796a1922380f7c01f50d4482b916d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:a3:84:bd:e2:1c:ea:7e:54:f6:f9:2c:a9:
83:19:59:bf:16:15:05:f9:af:7c:ac:85:64:25:ff:
46:79:f2:15:d1:26:4c:7e:94:9c:d3:44:76:a4:df:
ef:2d:b5:31:1e:ec:46:d5:92:c7:28:5d:ab:9b:0a:
f6:80:df:11:f2:71:7d:d7:a8:cc:b9:30:11:40:be:
46:0f:9d:3b:a6:75:0d:e4:ba:a2:9f:01:78:3c:39:
40:61:02:0f:b8:7a:93:b8:ac:16:4e:a0:df:05:b2:
fc:a9:f1:0f:f2:cb:4a:3d:0f:68:25:2d:4b:2e:58:
20:cf:9d:95:ad:ac:84:41:5d:b7:34:ed:74:ca:22:
01:7b:98:35:94:c9:d0:69:f1:8e:4e:d0:7a:c4:07:
02:20:d4:0a:80:c7:3f:9c:11:46:7a:51:a7:18:d3:
51:0e:08:d4:7b:e0:e7:44:31:66:cb:4d:b3:f4:49:
3e:ce:fc:69:bd:5f:e5:68:d2:a4:ac:d4:7a:01:25:
4d:86:5b:31:3d:a5:19:ad:09:bd:10:3a:58:6e:4b:
27:fe:ef:79:a4:d9:c5:c3:1f:69:99:89:6b:7b:85:
53:7c:77:84:83:7d:ae:19:39:40:1e:33:66:81:7d:
59:2b:53:db:8d:3e:65:8c:d8:23:8e:4e:9d:c6:9f:
b6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EB:F0:49:85:79:6A:19:22:38:0F:7C:01:F5:0D:44:82:B9:16:D4
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cb:34:09:ad:69:b3:81:1e:e6:23:6b:06:fa:aa:c9:91:48:
59:77:a1:92:e5:e1:26:67:eb:47:26:af:10:e6:16:4e:84:b8:
af:7b:2e:e5:74:ec:cd:e9:29:37:cd:56:9a:77:b4:15:68:00:
87:6f:f3:75:15:f7:e8:19:3d:e6:9d:97:27:74:7c:6b:df:eb:
2d:00:50:7b:db:c4:f0:fc:b5:f8:03:4f:78:17:0f:f4:c0:d6:
84:3a:71:a4:8e:55:0b:ae:51:87:1b:a5:2a:2d:58:28:97:ff:
1a:4d:50:c2:34:46:60:99:b6:ed:03:00:a2:8b:a3:77:5f:49:
a7:9a:f3:1b:5e:00:ff:31:7c:77:f2:7e:94:6d:a0:3c:f4:5f:
17:45:4a:f9:5e:f4:d5:66:dd:bc:6e:f0:bf:c4:94:85:16:74:
82:a8:86:3e:e1:fc:02:b1:41:82:ae:7e:78:d2:1e:03:9e:56:
c6:1a:78:96:43:a3:90:38:75:4a:70:a3:6d:1e:18:28:c4:12:
80:9a:ac:a5:00:77:21:06:da:29:a5:e4:af:e0:ef:e3:5a:40:
32:54:89:e9:85:a3:cf:d9:ac:df:fb:ac:2f:6e:aa:2e:1d:07:
2d:51:f7:64:a2:db:45:b1:a4:f4:56:79:c6:bd:53:dd:20:d4:
28:d1:fa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:05 2025 by rpki-client