Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier: PAwnq7jqE8bVFhSKu+2P05l9n6ZgeavvtP81rogH8U4=
Subject key identifier: 98:77:CC:7B:D8:67:9F:B2:9B:A1:3E:6F:76:3F:05:DF:2D:E0:19:A2
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 0197B9A1C3F64C1CC64781C4C6B7455CE76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number: 0900
Signing time: Sun 29 Jun 2025 03:01:15 +0000
Manifest this update: Sun 29 Jun 2025 03:01:15 +0000
Manifest next update: Mon 30 Jun 2025 03:01:15 +0000
Files and hashes: 1: 2XR2jy2pxsivUCWaEQDKm37Kfv8.roa (hash: JYfdJrJXlt+b2LxrGfVDugUW4/PVdSDu77ltGYhWQfw=)
2: fZx-mDB13JnuV_-VzM2j7qkuqi0.roa (hash: zv9S//eX11qAMytqBqLEiGaYvvDY8kAtaLQl7dqZVZU=)
3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: yA7rH94IYr2B+NpRMB6LFm9aYGNIgkZ6bKl4C7fzjXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:c3:f6:4c:1c:c6:47:81:c4:c6:b7:45:5c:e7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: Jun 29 03:01:15 2025 GMT
Not After : Jun 30 03:01:15 2025 GMT
Subject: CN=9877cc7bd8679fb29ba13e6f763f05df2de019a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:bc:a6:7e:41:20:0e:51:47:22:84:cb:fa:
27:4c:6d:7e:31:90:a3:e2:4d:98:7f:a6:93:c5:09:
74:ca:50:06:30:e8:af:6c:f7:a2:4b:d3:94:68:cd:
52:dc:c6:b7:0a:ab:b2:e8:b2:25:6f:1f:74:a8:94:
ae:ca:08:4f:1c:12:8b:bb:49:14:43:87:19:70:20:
0e:7d:32:6c:3c:d9:89:91:65:86:16:ce:77:e5:2b:
a7:ff:a0:f1:8f:f6:d1:cd:4d:29:10:92:4f:48:b5:
85:40:7e:71:8c:61:a2:53:ef:dc:8d:7c:ec:d6:87:
3d:90:bd:91:69:bd:78:03:b0:84:9f:02:c8:76:ae:
f1:da:0b:bc:b9:be:0d:48:76:82:55:b7:76:45:7a:
5f:8e:23:40:d0:07:70:1b:9f:c1:6e:21:e0:01:0b:
68:c6:98:a0:02:07:6a:b9:26:3e:a9:d6:e9:b2:c7:
e9:0f:89:9a:f9:ef:18:b4:77:77:3e:c0:71:c5:2a:
8d:3a:b9:88:01:7a:dd:84:b9:e3:01:1c:4c:40:84:
03:69:7b:e5:8a:2c:ab:65:86:e7:02:bd:dd:9e:04:
bc:fb:b0:b9:ac:7c:c9:e5:a6:52:5a:d7:73:c3:56:
48:c0:00:7b:03:50:aa:1c:52:17:86:da:ab:d1:44:
81:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:77:CC:7B:D8:67:9F:B2:9B:A1:3E:6F:76:3F:05:DF:2D:E0:19:A2
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ec:3d:35:2c:60:14:a3:5c:ef:f9:7f:f9:5b:e8:c8:f1:e6:
e3:7a:7a:cf:31:d2:d2:1f:ed:e9:e1:75:b5:c9:92:12:06:d7:
85:60:b8:4a:7a:e0:71:93:48:06:b9:45:9f:90:dd:fa:d7:a3:
d7:05:41:ea:86:ae:ea:a9:9d:5e:15:40:fe:8e:4a:2b:ca:cd:
a7:ac:48:d4:8f:39:08:8b:3c:fd:41:d6:a1:08:87:ef:6b:fd:
f4:27:35:90:0e:64:5f:8d:1c:29:b9:3f:d4:85:d0:f9:6d:dc:
d9:70:c4:e1:67:16:ba:62:c2:7f:98:e6:83:f8:e3:1a:20:84:
70:02:f5:fe:e8:fd:6f:2b:6f:97:7c:1c:42:0d:2b:91:b0:b1:
40:ae:fb:58:5e:87:47:8f:56:11:29:fe:a4:3e:8a:1b:e1:dc:
67:b1:02:df:cb:12:23:1e:8c:4b:a1:c7:82:03:41:f0:11:c4:
3d:f7:7d:c7:52:d7:9e:2e:d0:19:7a:9f:d0:f9:43:82:e4:af:
43:ab:a4:0f:42:78:2b:f7:da:8a:69:f7:af:38:d9:f8:9d:f3:
eb:07:fd:aa:43:97:90:a7:03:99:1a:80:b6:ca:ef:3b:be:b3:
ef:92:12:4d:35:f1:0a:a3:fb:f6:46:92:9b:13:1f:e3:a2:02:
00:27:cf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:31:49 2025 by rpki-client