Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier: B97T0lVHVuM+hs4UdmZ/l/d+ztsPLFWNLsFshGXa+z0=
Subject key identifier: 46:D2:BC:14:36:84:6D:9C:70:90:48:75:1C:7A:A6:77:64:09:D6:DB
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 0198D773B356CCA4F20BF1A54CCFABBC4098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number: 0994
Signing time: Sat 23 Aug 2025 15:02:20 +0000
Manifest this update: Sat 23 Aug 2025 15:02:20 +0000
Manifest next update: Sun 24 Aug 2025 15:02:20 +0000
Files and hashes: 1: 2XR2jy2pxsivUCWaEQDKm37Kfv8.roa (hash: JYfdJrJXlt+b2LxrGfVDugUW4/PVdSDu77ltGYhWQfw=)
2: fZx-mDB13JnuV_-VzM2j7qkuqi0.roa (hash: zv9S//eX11qAMytqBqLEiGaYvvDY8kAtaLQl7dqZVZU=)
3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: ieDyGDF5xDon/EBDu6/TXSp13IANMeHd/xtJV13zt84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:b3:56:cc:a4:f2:0b:f1:a5:4c:cf:ab:bc:40:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: Aug 23 15:02:20 2025 GMT
Not After : Aug 24 15:02:20 2025 GMT
Subject: CN=46d2bc1436846d9c709048751c7aa6776409d6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:50:17:89:2f:80:83:20:25:b3:6c:03:84:
ad:89:86:6e:22:de:8f:d7:1f:ce:05:d1:c4:67:a2:
36:1e:10:06:89:11:5b:00:18:e7:8a:6e:c2:04:0c:
b4:d7:00:a9:f5:5c:38:af:44:89:e5:39:06:e1:21:
70:84:b3:20:f8:fb:78:49:d2:0e:bf:36:e4:46:64:
27:5a:3e:90:95:ed:52:b1:4b:2c:50:41:f9:85:0f:
b8:25:e4:77:dc:87:5c:e2:ec:19:db:15:5f:7e:33:
53:ea:61:d5:91:2f:2a:f3:2b:6e:cd:ce:74:a7:9c:
93:eb:96:fa:17:ab:91:ef:e8:15:99:11:69:56:71:
b0:0e:9e:55:8e:c3:39:93:6b:6d:a8:27:e0:09:e2:
58:41:2a:f1:05:da:ad:6d:84:b2:06:b9:95:bb:7a:
f8:81:39:f2:c3:2b:72:1b:0e:8c:63:b6:de:f2:25:
e1:bf:26:d9:08:cf:3a:2b:c9:1f:76:25:9d:60:78:
05:60:a9:f9:8d:8a:7c:32:78:10:03:0c:d2:c4:a6:
ba:9d:d0:7e:42:6a:d6:f3:53:9b:5b:d2:20:3c:d4:
fa:35:8e:58:b5:08:28:27:19:60:89:44:80:6f:c5:
c6:36:25:e5:28:7d:5c:8d:dd:b1:af:fa:72:49:ab:
7c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D2:BC:14:36:84:6D:9C:70:90:48:75:1C:7A:A6:77:64:09:D6:DB
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d5:52:43:36:6c:c8:ad:88:dc:91:9e:08:1c:cb:8d:d1:25:
e7:68:25:0d:29:55:2a:54:47:df:90:e9:49:b1:2b:61:eb:ee:
a3:7c:9a:10:8c:c4:8d:34:0e:bb:85:79:6b:f6:71:69:67:ff:
11:07:17:4d:d6:6b:d5:69:5b:16:1c:57:86:60:d0:e1:8b:df:
fc:9c:8d:cb:d3:55:e7:e3:c5:02:4e:7e:0e:0b:2b:2f:25:6f:
0b:de:d5:30:4c:56:13:85:5f:aa:10:39:06:fe:cf:7f:d5:ba:
81:81:1c:25:da:0b:23:7e:6c:83:91:a1:2c:51:dc:e1:fd:58:
22:f9:c0:be:a5:e8:f9:81:9e:45:d6:e6:53:6f:7a:ed:bb:89:
63:9c:d7:47:d3:05:9d:75:9f:4f:1d:17:81:50:1f:5a:eb:ed:
c9:65:d4:b8:9d:65:1d:ac:ef:d1:a2:d2:b0:82:fa:1b:b1:55:
b9:da:60:82:12:0d:c9:4f:1c:b3:f3:30:f7:6c:35:4a:55:06:
5e:1c:74:90:95:cf:e6:d0:c7:e9:47:05:c4:a8:89:28:b5:f7:
b9:ba:8c:e3:62:05:17:0a:51:41:4a:53:f2:16:4c:9d:31:69:
09:13:ab:34:33:d3:cb:16:e8:33:9b:e4:b0:db:fe:c6:60:b0:
8b:5f:c8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:44 2025 by rpki-client