
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier: GQXY2hrXwEdls4fnvHjUreA8yuuuK7DiGbjn86pjsyg=
Subject key identifier: 31:4E:32:F4:C8:0B:77:EE:44:36:D1:66:31:E6:40:EA:6C:D0:DE:25
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 0199FB0F0860AB55C9D38A12CD8F2310EE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number: 0A2B
Signing time: Sun 19 Oct 2025 06:01:30 +0000
Manifest this update: Sun 19 Oct 2025 06:01:30 +0000
Manifest next update: Mon 20 Oct 2025 06:01:30 +0000
Files and hashes: 1: 2XR2jy2pxsivUCWaEQDKm37Kfv8.roa (hash: JYfdJrJXlt+b2LxrGfVDugUW4/PVdSDu77ltGYhWQfw=)
2: fZx-mDB13JnuV_-VzM2j7qkuqi0.roa (hash: zv9S//eX11qAMytqBqLEiGaYvvDY8kAtaLQl7dqZVZU=)
3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: YEbqLGOmX/9Iu0SMk+TucI3lqDBnXsKU2BVntxvdMy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:08:60:ab:55:c9:d3:8a:12:cd:8f:23:10:ee:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: Oct 19 06:01:30 2025 GMT
Not After : Oct 20 06:01:30 2025 GMT
Subject: CN=314e32f4c80b77ee4436d16631e640ea6cd0de25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1c:2f:32:8f:f8:6c:30:f9:6c:95:1d:03:5d:
f7:ec:73:ee:36:8e:ad:13:58:01:bd:94:48:30:3f:
89:04:d1:f3:9c:d7:bf:96:ea:e7:a6:8b:47:f0:e8:
09:75:18:52:d8:b2:77:af:f4:4f:c7:bb:b2:25:ad:
53:be:71:94:a1:ba:76:d1:07:1d:7a:77:63:8e:2f:
c5:ab:21:98:3e:70:4b:c1:b6:2a:9b:87:a7:68:ec:
d6:97:7f:fe:f2:5d:ab:32:d3:96:cf:e4:95:e5:30:
39:b8:d3:89:0c:b6:b9:a5:48:10:69:b6:1f:97:78:
fa:57:1c:8c:c1:cf:5b:77:dd:99:10:8c:c5:94:bc:
6a:5e:b0:1c:9c:a1:2e:f1:1d:4b:e0:10:c8:47:aa:
03:0e:f7:88:86:95:24:a0:6a:ae:11:68:44:d6:63:
2d:13:30:fd:4f:8b:b3:f4:ec:64:6a:96:2d:ac:a0:
fe:75:fc:b2:c6:34:5a:d1:95:98:cf:74:71:f8:90:
c5:d1:4b:b3:58:79:45:68:b5:3f:8e:bc:75:4c:29:
28:38:3a:bc:1e:67:72:73:b7:45:75:85:c7:c8:6b:
fb:fd:54:8f:2c:ad:6f:04:7b:2d:08:19:d7:33:8e:
c6:f4:b1:fd:8c:eb:9e:2d:2d:6c:1b:f6:b9:b1:27:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4E:32:F4:C8:0B:77:EE:44:36:D1:66:31:E6:40:EA:6C:D0:DE:25
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7c:18:46:24:18:cd:9f:c3:a0:ac:12:c6:d3:3f:ea:8a:46:
d1:02:6a:87:59:e6:6d:b5:af:9b:6b:ab:b8:d5:a8:9a:1d:52:
6b:56:cb:fb:57:5d:0d:5c:23:05:2b:60:cc:63:79:f7:c6:8b:
f5:41:c4:03:1b:e9:19:7c:66:e6:61:bc:48:c6:f7:82:6b:b2:
3f:76:32:b1:2f:bb:9a:34:98:5c:17:30:b2:b8:12:9a:b5:fc:
74:6a:c1:82:81:87:3a:c7:7e:e9:4a:6b:40:4c:89:af:3f:5e:
4c:6c:e6:6b:e5:66:97:08:1b:24:d3:df:1a:f1:c1:7e:ad:19:
f4:e5:0e:91:11:61:fc:e3:a2:ae:89:d4:40:af:34:9b:70:28:
be:58:3d:87:57:2c:6d:5e:fd:a8:20:27:1d:53:be:6b:57:b0:
64:e2:aa:dc:9f:c5:42:67:fa:93:66:c7:02:52:62:36:db:62:
aa:41:6c:b3:cb:96:57:29:ea:7e:ee:0c:f0:a8:19:d6:bc:fa:
38:97:ef:db:48:08:e3:72:3e:cc:5b:c8:39:73:9e:8c:16:60:
68:e5:72:0f:44:3b:b8:76:b9:49:87:72:41:a4:87:2c:db:f5:
ec:07:fb:79:1f:d0:af:e8:b7:69:7f:5d:51:97:c8:b8:9f:1a:
5a:58:82:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:37 2025 by rpki-client