Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier: Vvz4OF1HODFDxUQ/uJEWDEGhNABE2GL8snHK2ff/acY=
Subject key identifier: 71:53:C6:6F:A9:D0:8E:CD:AC:24:50:0F:AC:08:DE:91:D2:C9:7F:6A
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 019A258A57F1D4F6624EC659731DC02A0761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number: 0A41
Signing time: Mon 27 Oct 2025 12:00:14 +0000
Manifest this update: Mon 27 Oct 2025 12:00:14 +0000
Manifest next update: Tue 28 Oct 2025 12:00:14 +0000
Files and hashes: 1: 2XR2jy2pxsivUCWaEQDKm37Kfv8.roa (hash: JYfdJrJXlt+b2LxrGfVDugUW4/PVdSDu77ltGYhWQfw=)
2: fZx-mDB13JnuV_-VzM2j7qkuqi0.roa (hash: zv9S//eX11qAMytqBqLEiGaYvvDY8kAtaLQl7dqZVZU=)
3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: QZh8bGI3WUFjby+GEXH3WjDWFF3pNxmKjEuibe2ANrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:57:f1:d4:f6:62:4e:c6:59:73:1d:c0:2a:07:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: Oct 27 12:00:14 2025 GMT
Not After : Oct 28 12:00:14 2025 GMT
Subject: CN=7153c66fa9d08ecdac24500fac08de91d2c97f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:a9:a8:a9:45:72:86:84:f1:82:c2:9e:77:
90:74:10:86:bb:ce:7f:d0:c5:8f:b5:fb:76:91:c5:
97:c7:a2:a0:bf:1e:cb:29:08:c2:01:54:00:9f:5a:
46:59:2f:f4:a2:89:f5:3b:4f:6c:18:57:99:ee:cf:
dc:8f:e9:0c:6d:2f:16:c8:80:05:20:32:49:c1:c1:
ad:2e:52:fc:68:8a:ea:59:0d:82:ef:fe:37:e3:6f:
42:fb:c7:cd:d1:47:26:74:7f:45:ca:d9:88:7b:e4:
0b:cf:84:8c:20:e4:fb:d2:cf:0d:b9:4b:46:eb:e8:
71:09:bd:fb:9d:9e:f6:43:5c:88:6d:53:fd:96:a7:
69:2f:b0:f4:31:15:69:b7:95:d1:08:7e:13:04:bf:
cd:f5:aa:eb:46:73:9c:40:bc:79:30:83:23:03:0d:
8d:d0:d6:00:21:8e:93:64:a3:0f:79:73:ac:b6:0f:
c5:3a:47:a8:23:ad:7b:1d:dc:26:bf:91:a5:29:b7:
1a:3d:b5:64:b2:a4:43:76:9a:fc:92:52:9e:db:5a:
4a:b2:e3:bc:8c:4e:f7:0d:d0:6e:f9:f2:17:5b:58:
2a:6e:d0:28:c0:1b:61:e3:fa:92:26:e1:2c:e7:1e:
8e:17:43:42:68:e2:92:47:f8:4f:0b:f5:d0:22:0e:
3c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:53:C6:6F:A9:D0:8E:CD:AC:24:50:0F:AC:08:DE:91:D2:C9:7F:6A
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:57:c1:c3:6c:b8:65:2b:7f:89:25:ef:96:46:85:55:be:52:
86:ef:84:8a:1e:cd:b8:04:ea:80:6e:dc:84:f8:98:bf:5a:76:
35:0a:b8:56:fc:3c:8b:56:e9:d7:cc:39:21:7a:83:80:aa:30:
84:cc:b3:28:08:cd:bf:89:d7:71:87:d2:60:64:54:91:94:76:
7a:4c:87:18:7c:c7:e2:a2:50:99:3f:2b:d3:cb:13:68:1b:c0:
3c:b7:e3:0e:c3:4c:71:ea:1b:06:f3:30:42:47:74:57:bf:af:
44:df:95:90:ad:e6:5d:2d:ee:8e:79:87:c0:4c:c2:c1:c2:6d:
87:b5:3e:d2:fd:a0:b1:f6:c1:8f:b4:0e:ba:a9:af:57:88:1d:
ef:92:5d:2d:1f:db:73:7a:2f:79:02:be:f0:1e:ec:6d:16:46:
26:fa:90:68:a7:05:bc:65:f6:cb:a3:6e:45:7b:ba:40:b6:8f:
14:2c:21:ea:a8:b0:35:ac:10:3e:88:f2:e9:de:91:a6:5b:2d:
0b:93:96:c5:43:68:af:5a:70:95:12:33:57:fe:4d:7c:db:3e:
27:4a:04:a8:dc:44:36:79:74:f9:76:10:f4:ef:75:ac:c8:01:
a0:9a:10:08:b4:5f:48:b6:2d:e0:b0:5e:17:1d:2a:f5:0c:ef:
22:3d:68:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:39:14 2025 by rpki-client