Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier: pfX2FIUw3/KKa3JOSiVHqkqs0fwVIm28pSzx3joEgXU=
Subject key identifier: 48:96:C9:91:41:37:15:C3:E0:41:C5:84:86:4C:2C:AA:34:25:49:51
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 01993802491783CD516173346337A0A6C9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number: 09C6
Signing time: Thu 11 Sep 2025 09:01:37 +0000
Manifest this update: Thu 11 Sep 2025 09:01:37 +0000
Manifest next update: Fri 12 Sep 2025 09:01:37 +0000
Files and hashes: 1: 2XR2jy2pxsivUCWaEQDKm37Kfv8.roa (hash: JYfdJrJXlt+b2LxrGfVDugUW4/PVdSDu77ltGYhWQfw=)
2: fZx-mDB13JnuV_-VzM2j7qkuqi0.roa (hash: zv9S//eX11qAMytqBqLEiGaYvvDY8kAtaLQl7dqZVZU=)
3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: KG1E0mPT8R+HN+zFkI5wyG7Ol2me36QNeyGrJgPPsTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:49:17:83:cd:51:61:73:34:63:37:a0:a6:c9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: Sep 11 09:01:37 2025 GMT
Not After : Sep 12 09:01:37 2025 GMT
Subject: CN=4896c991413715c3e041c584864c2caa34254951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:af:90:e0:dd:1d:10:d2:fc:fb:0c:87:ec:
8b:df:98:3e:c4:d4:52:55:a5:85:6d:ba:ef:85:88:
ee:73:78:b4:7b:7c:2e:5f:f3:fb:49:eb:9e:23:d4:
b7:4d:e7:6d:1e:54:db:64:09:d3:8d:11:d5:97:22:
7f:0d:39:55:2f:71:6b:57:5e:a2:5f:45:8f:d7:51:
dc:84:32:0a:05:9b:be:48:a1:cd:fa:13:d1:94:1d:
39:d8:6c:23:c1:ef:69:64:09:98:12:08:c1:29:07:
54:84:6b:32:54:ae:48:eb:21:58:8a:15:5b:82:d6:
d0:b8:9d:dd:52:d0:23:06:eb:99:1f:e7:1d:7c:e4:
ed:30:86:74:b4:b1:19:b6:74:06:45:79:e2:19:c2:
b1:e4:59:41:4b:9d:26:29:93:15:92:af:a1:dc:31:
d6:00:75:98:cd:9d:2b:f7:3f:14:4e:df:0e:f5:e0:
37:32:cd:72:22:3f:c8:35:14:ad:99:91:66:eb:bd:
91:ac:8c:62:71:df:73:4a:06:e3:dd:34:a3:66:56:
0f:90:8b:17:9e:17:94:ad:61:f0:2c:ab:dc:b8:4f:
74:39:a5:ff:b9:de:1e:20:b7:7d:78:db:e9:bd:eb:
d7:14:f2:68:30:47:dd:a3:3c:f4:90:bc:2b:db:06:
39:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:96:C9:91:41:37:15:C3:E0:41:C5:84:86:4C:2C:AA:34:25:49:51
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1f:88:84:f3:87:d1:4f:3d:e0:aa:17:b8:2a:59:5c:d9:88:
6e:3a:b6:d3:db:75:b7:58:5e:fa:50:cf:5b:0a:41:fd:bd:6d:
10:04:7c:ba:91:7a:7a:04:ad:8d:56:c9:f9:4d:65:57:68:62:
7e:2e:6e:44:d6:5c:c8:60:33:ce:87:81:88:a5:a6:71:77:4c:
7c:51:5c:01:16:61:07:96:e6:71:1f:25:3b:6d:65:8a:33:eb:
14:b9:a0:bf:b7:b8:a5:5f:62:dc:6f:38:75:79:65:4b:63:cc:
58:cf:89:8f:7a:df:aa:0f:33:9d:15:f5:aa:d8:81:b4:ee:38:
83:f1:f0:cf:72:82:0b:49:5f:e2:b9:16:aa:31:20:fa:3e:ea:
4e:e6:8a:89:ff:18:ad:7e:8a:0c:cc:3e:92:de:9f:57:19:c2:
7d:b8:4e:49:4f:0f:44:0a:52:81:14:61:ea:02:40:3e:01:d6:
3e:3a:94:1f:0b:52:61:b1:43:ae:16:86:d6:ee:b7:d6:c2:bd:
28:f4:fc:8c:ea:98:8f:13:37:0d:cb:0b:25:90:f9:e6:b6:2d:
fe:93:f5:5f:1b:a0:be:a7:87:cf:94:0d:3a:47:54:1c:b8:6a:
eb:1b:4a:0a:6b:46:d8:da:ee:a0:a8:d5:83:36:94:39:9e:f2:
83:34:cd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 10:06:52 2025 by rpki-client