Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier: qoMb5h4K8QirIN/JNzCTiqegUGwlNnqvLGVTfbRtLkA=
Subject key identifier: C9:93:19:26:3D:F9:B7:35:5C:C1:6F:93:5F:F4:5D:D4:6D:C1:50:65
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 0196526DB61F94BEF4E720F57E443430A1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number: 0846
Signing time: Sun 20 Apr 2025 09:00:43 +0000
Manifest this update: Sun 20 Apr 2025 09:00:43 +0000
Manifest next update: Mon 21 Apr 2025 09:00:43 +0000
Files and hashes: 1: 2XR2jy2pxsivUCWaEQDKm37Kfv8.roa (hash: JYfdJrJXlt+b2LxrGfVDugUW4/PVdSDu77ltGYhWQfw=)
2: fZx-mDB13JnuV_-VzM2j7qkuqi0.roa (hash: zv9S//eX11qAMytqBqLEiGaYvvDY8kAtaLQl7dqZVZU=)
3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: VNIxepxCXSpwsQICLzDUwEN0vvP4YMa0DhAZVeAXu9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:b6:1f:94:be:f4:e7:20:f5:7e:44:34:30:a1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: Apr 20 09:00:43 2025 GMT
Not After : Apr 21 09:00:43 2025 GMT
Subject: CN=c99319263df9b7355cc16f935ff45dd46dc15065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b2:23:df:a6:82:23:b5:37:43:02:0a:13:2b:
68:29:75:74:d3:64:75:52:ea:69:c1:01:64:6a:7e:
f3:11:34:54:e7:da:13:c7:6c:41:25:a4:4b:a4:fd:
6c:a0:7b:14:aa:98:09:7c:40:73:1a:b7:88:0a:a4:
88:cc:22:3c:57:f3:25:35:b7:f2:6c:f3:79:45:ad:
18:82:c1:f3:45:1b:d6:74:73:e2:3b:8f:50:30:b9:
d7:8e:00:98:d6:27:9c:21:a1:2c:d2:96:87:41:08:
ef:aa:e8:60:3e:f5:15:58:88:c4:1f:54:94:3f:3d:
d0:ae:82:a0:dd:f6:3c:eb:d7:87:9e:3f:dd:83:87:
a3:28:0c:3c:e0:db:88:cc:5e:e9:91:40:89:b9:df:
1f:28:14:5d:cf:95:3f:f9:83:35:11:0a:6a:54:04:
a4:49:c3:98:05:bc:20:db:ab:4e:51:04:94:db:2d:
e8:92:02:3a:ae:ff:5a:ea:c7:1e:77:3b:25:9c:2e:
e9:48:fe:4a:3d:d1:27:58:ef:c4:4a:2a:44:71:db:
8c:c3:aa:9a:a5:1b:ab:5b:0f:d0:11:9d:72:48:2f:
96:9d:f4:60:4e:c9:3a:dd:4c:e6:67:f9:fb:5a:8d:
7d:a9:61:4e:90:12:34:a0:ad:d5:f1:55:a0:ff:39:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:93:19:26:3D:F9:B7:35:5C:C1:6F:93:5F:F4:5D:D4:6D:C1:50:65
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e8:b7:80:b8:42:5f:cb:99:b0:10:be:5f:0e:ba:4c:37:4e:
79:e0:34:ee:33:20:f5:45:cd:27:50:a7:3a:4c:a4:8d:6f:5d:
4d:97:d5:4d:c4:a9:47:9f:9d:ae:0e:99:6a:9a:82:85:5a:9e:
9c:7c:2d:af:80:8e:b6:72:73:ab:cc:28:60:86:41:c3:8b:4b:
cb:87:0c:c1:1b:0f:70:0f:53:12:a2:31:18:82:f2:75:4a:13:
46:4b:db:c6:d4:2f:96:92:82:10:fb:dd:02:8b:a6:13:cb:88:
3c:91:7e:7a:4b:69:c6:f3:53:97:fe:c7:a9:4c:1c:1d:37:06:
56:bd:ff:e8:ac:54:6f:55:9a:55:97:6f:06:06:42:80:76:47:
fa:64:1e:8b:a6:1d:14:97:e5:92:0f:05:21:ce:d8:2a:c3:bd:
41:88:35:82:f7:e1:0b:38:ff:18:4a:8d:a6:fb:a2:6a:5d:20:
c4:f3:d3:95:25:7c:5d:bc:34:5d:fb:43:da:99:d3:9c:4d:15:
05:e0:b4:1a:b7:44:17:c2:ec:e5:ad:f5:eb:9b:6d:41:13:7f:
c3:a2:62:a9:1f:f1:9d:24:d0:9b:23:7f:b5:94:f2:0a:cf:4d:
b8:8c:33:59:0c:61:c3:54:64:66:29:68:c7:f8:fe:e4:2a:4f:
8f:04:e2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:15 2025 by rpki-client