Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: 6t5Og3zuO5vB003jlsra2XJt9rG+abPi2ff3HOiX43k=
Subject key identifier: 8F:2F:F6:01:E0:B2:62:88:65:CE:AF:0D:27:A7:68:6D:A3:83:3E:4C
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 0198469B0D5B0C95C06886324D305E64736C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 160A
Signing time: Sat 26 Jul 2025 12:00:23 +0000
Manifest this update: Sat 26 Jul 2025 12:00:23 +0000
Manifest next update: Sun 27 Jul 2025 12:00:23 +0000
Files and hashes: 1: 2D_sNr6LCkwTuTal-mPrYj8UHIs.roa (hash: /l1Yc3OQ+lo/otr90FJcr/UD3kDLNT0VbUXP3aw22fY=)
2: 4m5zxgIpcpLPeYwAolQiZO3OfJg.roa (hash: OQBGj0xAcvnf7DgtTAHxl/RhajJjDdIaXO2XNvZqjbE=)
3: Dlbvp3R98LlEu08WYGasx1T_LuI.roa (hash: qx2q+wnLl8fh2dLVy0eZydoQ+J+Xun6ifBd9DluCaL4=)
4: Xc8Qyh1LirsUEn7RQ8UyXB3RH0o.roa (hash: J+DRmxT7YhmhWsrfnEFIQoC5CTBLXKphVIrLyARlJ+w=)
5: XsUV3yVUcv5weCqiqsURBEgaXXY.roa (hash: 2vI6p11F93XXFNfMhYK7zAMvScbfypBZSjvbJS+JGeY=)
6: bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa (hash: 1kLGiKwdqoK2K8B7I5XFtIe5sNN2BCN7xnm7j0LEaA4=)
7: oIKeScBXNP08SzFzC94DmvUIs80.roa (hash: NFvZgh8Blc1rDmTWkTD21o0JAYAkx72d5ckrzpZJxzc=)
8: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: /ptpYD2f6FYFY98NDyE1BYTUDnKEeySac0qc1UWswwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:0d:5b:0c:95:c0:68:86:32:4d:30:5e:64:73:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jul 26 12:00:23 2025 GMT
Not After : Jul 27 12:00:23 2025 GMT
Subject: CN=8f2ff601e0b2628865ceaf0d27a7686da3833e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:b9:e6:3a:c8:08:35:24:fd:3f:b2:fc:d4:
90:46:b0:53:04:a6:35:14:d8:a7:39:23:88:9c:a5:
11:36:d9:b3:44:f5:09:72:de:2b:71:02:8d:5d:66:
77:96:9c:36:12:37:64:ce:7a:ee:bc:8c:18:de:66:
a7:06:2a:f5:56:b4:0a:fe:9f:00:e6:22:33:a1:22:
2e:a5:c4:6d:13:9e:22:26:9c:23:b3:e8:68:a2:fe:
86:24:ce:ef:7d:cb:36:94:ea:78:9e:ad:b8:04:a4:
81:bd:04:04:84:65:f7:32:62:5f:04:5e:fe:8a:00:
04:e9:87:5f:f7:24:fa:56:00:d6:1d:ad:0d:50:ee:
2b:6b:35:bf:59:33:66:2d:51:d1:5e:79:e5:0c:c8:
dd:5e:ec:ed:fc:bf:fa:29:12:ea:45:87:f8:13:46:
f9:10:3f:5c:ea:62:40:5b:21:00:25:72:2f:a1:d2:
62:09:51:c5:4e:62:76:02:40:01:94:b1:6a:33:84:
8f:f9:ab:6c:da:7f:7d:dd:43:91:39:61:00:d3:3e:
c8:d8:d3:ae:b2:36:ce:49:6c:4a:c0:ab:97:fe:b4:
cf:a8:b7:a2:15:a9:b1:3c:7d:6d:2a:1c:03:2b:b8:
da:61:ab:62:2b:18:81:9f:fa:aa:b1:bb:dc:bc:49:
22:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2F:F6:01:E0:B2:62:88:65:CE:AF:0D:27:A7:68:6D:A3:83:3E:4C
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ef:69:ab:61:58:03:48:6f:57:3e:12:70:fb:80:8a:86:30:
4d:d4:be:11:54:4d:93:49:c3:ac:b5:96:5f:f7:9e:1e:c9:28:
6d:f5:cb:98:8c:e8:5b:b5:64:b4:d3:31:54:32:8e:41:db:61:
fd:72:98:14:01:46:68:18:6b:28:9a:3f:d3:da:19:5a:b9:8b:
b9:e0:1e:ea:0a:b2:c2:41:0e:44:24:14:26:0a:b2:57:19:50:
8d:15:2e:c8:77:9f:ff:6d:1d:80:37:18:40:75:20:44:ef:db:
0a:86:81:36:10:e9:b6:9b:ec:76:d3:c7:a4:d0:db:e4:c4:17:
86:dc:c9:88:e9:51:f2:ad:74:3d:42:aa:d1:8a:e0:be:83:7f:
f8:07:de:84:31:81:03:cb:d6:76:4e:bc:26:45:a3:7d:f8:66:
07:55:98:ce:30:3c:a9:e7:fa:45:06:93:ee:9e:df:ad:03:95:
5e:f7:3f:84:67:79:06:13:f1:c0:e4:8d:9f:ac:24:37:bd:f3:
e6:1d:ee:72:8d:05:84:65:b8:01:25:fb:44:f1:3b:ce:07:3f:
2d:f8:b4:23:bc:52:49:9d:ce:6f:35:be:1e:b6:ae:89:50:58:
0b:65:19:17:04:7c:fc:60:90:30:37:d7:93:02:d0:6d:e3:1e:
e1:3a:63:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:09:17 2025 by rpki-client