Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: 6SBeC0R6jDdCDjYUIHni62grKLTIC3T8C64vUGFwBlM=
Subject key identifier: 41:53:21:04:40:01:1C:5D:BB:CD:88:F1:40:35:9B:D3:6B:38:40:CF
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 0199327C2A691E734B5B221B87780011434B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 1685
Signing time: Wed 10 Sep 2025 07:17:01 +0000
Manifest this update: Wed 10 Sep 2025 07:17:01 +0000
Manifest next update: Thu 11 Sep 2025 07:17:01 +0000
Files and hashes: 1: 2D_sNr6LCkwTuTal-mPrYj8UHIs.roa (hash: /l1Yc3OQ+lo/otr90FJcr/UD3kDLNT0VbUXP3aw22fY=)
2: 4m5zxgIpcpLPeYwAolQiZO3OfJg.roa (hash: OQBGj0xAcvnf7DgtTAHxl/RhajJjDdIaXO2XNvZqjbE=)
3: Dlbvp3R98LlEu08WYGasx1T_LuI.roa (hash: qx2q+wnLl8fh2dLVy0eZydoQ+J+Xun6ifBd9DluCaL4=)
4: Xc8Qyh1LirsUEn7RQ8UyXB3RH0o.roa (hash: J+DRmxT7YhmhWsrfnEFIQoC5CTBLXKphVIrLyARlJ+w=)
5: XsUV3yVUcv5weCqiqsURBEgaXXY.roa (hash: 2vI6p11F93XXFNfMhYK7zAMvScbfypBZSjvbJS+JGeY=)
6: bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa (hash: 1kLGiKwdqoK2K8B7I5XFtIe5sNN2BCN7xnm7j0LEaA4=)
7: oIKeScBXNP08SzFzC94DmvUIs80.roa (hash: NFvZgh8Blc1rDmTWkTD21o0JAYAkx72d5ckrzpZJxzc=)
8: q2eujhaGxjto_h4mpcBHS_tUO-c.roa (hash: A8Qfn4Eyu6/KJoJdotmmc1YYF1CYLR184Z3dlvuyTnQ=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: GEW3Iw6ysEDNzQrhejd98/xJaygoxGZ6KFJLc5Qajvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:7c:2a:69:1e:73:4b:5b:22:1b:87:78:00:11:43:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Sep 10 07:17:01 2025 GMT
Not After : Sep 11 07:17:01 2025 GMT
Subject: CN=4153210440011c5dbbcd88f140359bd36b3840cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:ce:54:0e:74:44:c2:20:89:96:33:a5:04:
24:c8:79:3b:3c:8f:81:89:88:75:a7:a1:e5:65:ef:
79:10:5f:37:8e:67:87:b6:6b:0d:05:6c:d3:63:9f:
b0:9b:e8:a5:79:ea:e2:5c:4e:5b:8e:77:d5:65:fe:
76:02:d5:ec:0b:d2:d8:14:2a:24:34:17:e4:51:a7:
e4:ca:0e:ec:46:c7:78:3b:df:07:59:14:9b:a9:a2:
02:2a:a2:3f:d2:f7:dd:d4:6a:16:1f:24:fd:c7:e0:
e6:c0:e3:d2:7a:6f:a4:9b:b3:90:f6:3c:6a:74:5d:
1b:05:79:84:40:1f:a4:64:28:1f:86:d0:9c:e6:1d:
3e:53:9b:cf:eb:db:5e:f8:72:6f:d0:b9:99:7b:00:
dd:44:00:dd:4a:e5:50:07:6d:77:ba:da:3e:e4:07:
da:96:ff:b5:74:a9:c9:56:fd:0a:05:fb:37:80:e1:
c0:b3:87:f5:10:86:f4:b0:1a:d7:98:e9:7e:87:0f:
9b:82:f0:77:ab:10:0c:13:97:68:77:d0:41:93:35:
25:1a:2e:62:d2:a3:4d:28:de:72:78:cb:a5:4f:5e:
8f:a8:85:74:b1:5d:6e:d7:d6:0d:76:b5:e0:dc:c7:
ae:9e:3e:1a:6a:22:53:cc:cd:8c:d1:de:ce:ee:29:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:53:21:04:40:01:1C:5D:BB:CD:88:F1:40:35:9B:D3:6B:38:40:CF
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ce:f1:95:80:53:5c:9b:3f:1e:f4:d9:e6:51:03:56:84:34:
ef:71:39:1f:42:e9:e1:6e:20:dd:d9:be:a6:3f:e1:1c:9e:e8:
a3:3c:63:72:1b:e8:b8:20:a1:2f:2e:84:b3:ad:ee:ac:a1:99:
01:09:80:39:0f:1b:00:bd:f6:80:60:f1:7b:1f:3c:e6:64:86:
9c:17:2b:30:ac:a3:77:94:53:48:a1:23:7b:72:2c:37:4f:aa:
17:41:46:b6:30:1b:66:2c:a4:7c:b8:04:f3:90:9e:ac:77:74:
c4:5c:9e:77:17:88:79:ad:a5:2c:d0:d2:36:fb:8e:e0:85:6f:
4a:b9:38:a2:8b:92:a1:17:24:7b:da:3a:bc:31:00:c6:77:03:
81:9d:3a:8b:d4:cd:81:63:9e:56:d1:06:8c:4d:f3:bd:b9:10:
67:e3:62:e6:d5:7a:7b:d7:9f:c7:54:4f:1b:c3:f8:93:7d:aa:
4e:ac:ca:31:26:83:df:9c:4c:4a:07:a5:d2:24:cb:20:34:4b:
29:d6:41:a3:57:3b:95:f9:44:d2:fd:7c:6f:7a:cd:99:0f:d5:
25:40:57:e3:c1:20:c4:92:0c:45:0b:b9:b1:45:02:9c:0f:a8:
37:23:b6:89:e2:5a:97:cf:61:da:22:66:33:9c:7b:ec:f3:33:
02:e3:f8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:58:42 2025 by rpki-client