Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier: 2Emz7sevGZvriNwDBQSsygR5tlz212S9pHjRvJHYnUg=
Subject key identifier: 88:FC:C7:84:E0:40:EE:DF:57:4B:6C:D1:E7:D9:16:E6:80:C5:50:AD
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 01988FFE21CFE50955D1D5D3F92C089B2F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number: 096F
Signing time: Sat 09 Aug 2025 18:00:53 +0000
Manifest this update: Sat 09 Aug 2025 18:00:53 +0000
Manifest next update: Sun 10 Aug 2025 18:00:53 +0000
Files and hashes: 1: 2XR2jy2pxsivUCWaEQDKm37Kfv8.roa (hash: JYfdJrJXlt+b2LxrGfVDugUW4/PVdSDu77ltGYhWQfw=)
2: fZx-mDB13JnuV_-VzM2j7qkuqi0.roa (hash: zv9S//eX11qAMytqBqLEiGaYvvDY8kAtaLQl7dqZVZU=)
3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: puvvDfzGvPiyYoWdjPlmxlfG2dRJ1n3QpYjxDQBswDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:21:cf:e5:09:55:d1:d5:d3:f9:2c:08:9b:2f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: Aug 9 18:00:53 2025 GMT
Not After : Aug 10 18:00:53 2025 GMT
Subject: CN=88fcc784e040eedf574b6cd1e7d916e680c550ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:c4:91:c6:ff:06:90:30:06:82:46:7a:c1:
3c:91:93:3e:80:86:6e:24:8b:dd:5f:f4:9a:5d:77:
90:c4:a1:72:a5:74:59:c9:ab:c8:71:a9:25:f0:b2:
26:42:dc:57:c4:22:e4:f5:ed:23:fd:36:d9:9a:b4:
49:77:62:ab:c0:80:29:08:70:23:22:4d:04:21:08:
e5:f0:8b:c1:8d:ab:10:8d:84:28:be:b8:13:51:f2:
82:f0:9b:c3:41:9c:98:62:d4:7f:28:72:93:1d:84:
2a:07:f9:22:a0:b4:e4:b5:5c:e2:ad:c1:c4:ab:c9:
76:32:c4:ed:ca:cd:00:85:9d:03:21:0f:b7:e4:95:
20:79:92:c4:9f:1f:ec:fc:51:2e:fe:24:d0:5e:77:
e3:eb:a2:06:20:4e:dd:8c:17:de:dc:b6:82:2e:48:
3b:07:24:bd:9a:61:24:f4:d6:d3:51:18:21:6d:e1:
7b:2a:30:d8:64:97:a8:b4:4d:32:5a:50:d1:b7:70:
34:1d:f5:81:1d:34:73:2d:1d:a1:b1:3a:64:ac:37:
a3:e0:21:dc:b1:3c:3f:f2:e3:f0:66:ff:68:a3:d8:
7e:39:92:89:a6:41:31:1c:ad:18:2a:32:40:4b:c9:
00:0d:01:43:35:a3:35:2e:c4:06:6b:49:f2:4d:7a:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FC:C7:84:E0:40:EE:DF:57:4B:6C:D1:E7:D9:16:E6:80:C5:50:AD
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7d:39:72:70:8e:8d:37:f7:e6:75:da:e0:47:32:8f:35:77:
55:00:1f:a1:6c:7a:a6:9a:5c:a0:23:ab:17:ee:5c:ee:a8:01:
9a:90:af:41:0d:4d:ee:f4:df:31:fd:54:55:fe:58:6c:a7:f5:
16:ac:4c:23:0f:92:ea:c0:f6:a1:3b:f7:49:b5:ca:69:03:de:
91:93:8d:25:a3:3c:5b:30:2a:21:34:24:5d:45:41:77:09:dc:
6e:a6:52:bb:7e:8f:1b:2e:8b:ce:83:c5:88:73:d3:f6:22:c8:
d2:1a:36:7f:2a:05:12:f9:ad:e3:1e:91:ae:63:7a:5e:93:4f:
91:11:09:2e:e7:af:93:21:bf:29:31:af:64:b1:75:c4:a4:2d:
59:7f:23:53:6d:7a:a5:c3:18:cc:be:25:88:14:44:38:20:18:
b3:2a:20:25:54:bf:36:8f:58:14:57:5b:7c:eb:5c:f1:e8:8f:
b5:f2:7d:65:c8:ca:e0:b5:c8:d4:7d:10:2c:40:c1:c8:e7:e2:
f9:6a:2e:38:1c:e5:01:12:f7:31:44:4a:f5:6d:d0:65:40:f9:
48:cf:83:69:8e:a2:bf:b5:31:8f:f8:7b:73:72:98:e4:97:d7:
fd:28:45:70:d3:7d:7e:8c:ee:f8:8d:19:8d:53:26:ca:8e:4d:
5d:d2:7b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:46:15 2025 by rpki-client