
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
File: qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json)
Hash identifier: Ho6avPbU/AkhHBx3cH91a0RvzqIqwZI8IiJ7BiYlxoo=
Subject key identifier: A3:79:07:9E:2B:5B:66:49:A1:2A:BF:A5:D9:F0:EB:48:49:83:26:01
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial: 019765F26E73C47173192F474F6C31347BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
Manifest number: 073D
Signing time: Thu 12 Jun 2025 21:01:16 +0000
Manifest this update: Thu 12 Jun 2025 21:01:16 +0000
Manifest next update: Fri 13 Jun 2025 21:01:16 +0000
Files and hashes: 1: Ot7K37c41MVu-6Ir2VOkUuixgHw.roa (hash: 7Ylv6CILYrMD9u/uD4SkYHlbdsDQ05xlERBBPqPUVnQ=)
2: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: FlIExFjZW8K8UWYCZUGSlyk4EvHrkShQCTegRQ9uafQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:f2:6e:73:c4:71:73:19:2f:47:4f:6c:31:34:7b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Validity
Not Before: Jun 12 21:01:16 2025 GMT
Not After : Jun 13 21:01:16 2025 GMT
Subject: CN=a379079e2b5b6649a12abfa5d9f0eb4849832601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:58:d2:7b:11:53:89:70:c9:d5:0a:07:7d:
19:c5:c6:ab:2f:ec:88:2c:8d:a9:5c:2e:b7:43:85:
22:17:93:84:ec:9a:dc:da:78:8a:f9:de:6f:d8:ba:
59:73:96:5d:6b:5b:3c:dd:89:e4:98:d0:89:7d:ea:
f8:ed:1a:43:77:65:72:a0:ee:02:2f:37:74:ae:74:
68:89:2e:54:32:a8:5f:7b:09:8b:7d:90:33:9d:80:
40:ec:6c:a8:df:20:a6:3f:70:f2:5f:82:93:29:a4:
f4:9e:47:0d:1b:16:cd:a8:0b:6f:ab:0d:db:8a:d4:
d0:87:ec:34:a6:b4:53:c7:9b:d1:54:b0:c8:ec:85:
dd:3b:40:56:55:56:b7:dd:2c:66:a5:02:a2:4f:e5:
77:e2:67:28:a7:79:9c:ba:15:82:7f:90:eb:cf:8a:
27:97:21:1b:1a:b4:89:b3:81:34:94:31:c6:ff:4b:
9b:38:6f:b2:f0:d9:4b:ee:a5:88:f6:08:91:d0:fe:
47:ed:11:5d:e0:08:97:9b:60:34:73:21:29:bb:c8:
1e:88:bf:a6:90:2d:07:4e:66:fd:19:29:4f:fe:5c:
9a:82:7b:77:4a:51:82:f4:c1:3b:a6:ad:10:50:9d:
ce:c0:65:a1:1f:a1:33:30:33:1b:0a:da:60:8f:f0:
8a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:79:07:9E:2B:5B:66:49:A1:2A:BF:A5:D9:F0:EB:48:49:83:26:01
X509v3 Authority Key Identifier:
keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:14:56:f7:f4:b2:0a:64:95:36:29:10:d7:9c:78:3e:64:7d:
e2:76:4d:5e:1d:31:62:cf:a2:a4:7a:b7:e1:ec:8d:ee:00:f0:
10:ff:ad:47:f5:0c:31:20:f8:d7:20:90:87:35:e2:83:00:6a:
3a:17:b9:8f:a1:80:5e:cc:1b:99:c3:fa:50:74:0e:5b:2f:6d:
47:37:2d:f9:f3:f5:c8:6f:3f:20:e5:89:22:5a:3f:46:d0:9a:
af:47:16:9e:8a:9e:c9:6e:92:a6:6f:0d:e0:8d:f3:ab:f5:f8:
25:1d:7b:c3:78:39:c3:de:09:ac:13:c6:2b:87:5b:81:e9:f2:
99:1a:76:4a:33:db:2a:4f:2a:a8:0d:06:75:0e:e5:e6:42:76:
cc:a2:61:81:52:16:c6:2c:7e:9d:0d:8d:cc:72:6a:bd:7d:24:
72:b0:f6:bd:72:a3:ad:20:4b:c4:5e:a1:e0:b3:fa:13:48:4e:
a6:74:f1:c3:2d:e7:49:69:ea:8f:86:2e:19:fe:c6:65:74:aa:
a0:f8:f9:a4:5e:72:d3:a5:06:cc:59:d0:bf:18:e5:65:ff:63:
d7:36:d4:c0:42:41:22:ca:3f:76:aa:46:51:10:7a:dd:7d:9f:
f4:38:21:f8:c4:ed:14:d8:e4:9d:96:24:03:16:b4:67:f0:c5:
47:57:df:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 02:45:17 2025 by rpki-client