Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier: d88EumQS5Xf8bOg3YA0WBu9/19AYh64vHMC9RmUhH28=
Subject key identifier: AD:02:73:BB:82:AF:59:6B:25:9F:83:7D:98:F0:8B:FA:C5:02:D1:3A
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 01976C61E5FE1E6A7CD4ECF3EFDCAEC4DA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number: 08D8
Signing time: Sat 14 Jun 2025 03:00:44 +0000
Manifest this update: Sat 14 Jun 2025 03:00:44 +0000
Manifest next update: Sun 15 Jun 2025 03:00:44 +0000
Files and hashes: 1: 2XR2jy2pxsivUCWaEQDKm37Kfv8.roa (hash: JYfdJrJXlt+b2LxrGfVDugUW4/PVdSDu77ltGYhWQfw=)
2: fZx-mDB13JnuV_-VzM2j7qkuqi0.roa (hash: zv9S//eX11qAMytqBqLEiGaYvvDY8kAtaLQl7dqZVZU=)
3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: rs9JsTwyB8vgp2IjOFGncJtnJ0RvGMn70Ll2Y3clCh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:e5:fe:1e:6a:7c:d4:ec:f3:ef:dc:ae:c4:da:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: Jun 14 03:00:44 2025 GMT
Not After : Jun 15 03:00:44 2025 GMT
Subject: CN=ad0273bb82af596b259f837d98f08bfac502d13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:6d:22:8c:b5:86:e7:c6:45:14:0f:03:df:
63:92:3c:eb:31:70:bd:ee:f4:60:bc:dd:c2:a3:66:
7c:59:a8:f6:07:e5:03:96:00:59:07:ca:7b:ec:b8:
55:46:a0:17:e0:b7:d2:b0:ad:ef:38:70:7c:88:18:
d2:b5:73:f4:bc:42:3c:27:03:a6:84:3f:26:57:dc:
8e:99:0a:c6:2b:99:26:e6:6a:73:87:d9:32:37:9e:
4a:f6:6f:83:c3:09:e2:17:91:f4:92:2d:73:8f:e1:
d9:16:25:82:b5:cf:b4:85:e4:50:10:73:23:92:ed:
f1:be:ba:28:df:f8:a8:bb:b8:bc:a2:8d:ef:83:0f:
b6:c6:14:a3:6c:75:eb:94:ad:2b:73:8e:0a:87:12:
de:8c:e2:52:c0:59:4a:2d:95:d0:7f:e4:7e:eb:da:
9c:6a:83:16:c8:04:de:95:d3:6e:ff:22:56:aa:49:
f0:52:b1:4b:9f:e0:35:ec:af:f3:fe:d1:5f:10:dd:
83:f8:e8:9c:54:f3:0f:0c:89:87:3f:8b:56:f3:69:
01:9b:30:2a:a8:78:c9:28:97:23:4c:66:75:b4:04:
49:75:8d:af:ed:a2:ca:b8:ba:48:ae:f6:63:bd:ee:
bd:fc:82:40:b0:1c:74:9e:13:3d:85:c6:79:78:cc:
69:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:02:73:BB:82:AF:59:6B:25:9F:83:7D:98:F0:8B:FA:C5:02:D1:3A
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b5:a6:26:eb:f0:39:aa:90:c8:43:3d:04:d6:f1:06:9d:c6:
79:d2:20:05:68:67:a8:45:99:74:96:34:7b:4a:b7:36:33:5d:
6c:05:8e:c4:9a:d0:af:05:45:34:5e:6d:61:7b:c0:d7:c2:2f:
50:e1:85:e1:55:7e:c8:0a:6d:7a:1e:72:07:42:92:5b:8e:68:
45:74:ac:17:1d:07:ac:92:d3:18:f4:dd:14:74:4c:76:7c:4b:
d4:8a:fb:06:00:5d:fd:9c:08:2c:1f:d2:58:e6:97:05:91:12:
49:19:bb:ae:91:c2:8d:29:fa:c1:9d:1b:2b:98:86:db:f0:4b:
22:84:5f:a9:78:c9:4d:9c:8a:c9:61:7e:4f:3f:77:de:04:68:
19:71:41:ee:59:5a:58:80:aa:98:12:ca:b8:ae:4d:29:13:43:
ca:a9:42:cb:45:b7:ed:8d:d5:25:0b:84:d2:cd:a1:0a:35:26:
ee:ae:3a:fe:f2:c6:47:b9:79:1d:65:20:14:22:37:21:86:da:
4e:92:8a:fd:03:ae:b2:ba:49:01:f8:c2:f2:e4:8a:b3:35:17:
00:02:da:31:fa:0c:68:bc:75:c4:45:ca:dc:de:e9:49:89:9b:
dc:b7:7f:ed:ea:1b:3d:17:e4:72:19:a4:4e:7c:fb:3e:f8:ae:
14:21:b6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:24:05 2025 by rpki-client