Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: 5AFYzBVTwY1bSygargzPg01pZ5G5/vsoxnu7GRCJz4o=
Subject key identifier: C6:0F:2B:7A:16:82:1E:56:66:7A:C1:3D:F0:5B:CF:D0:8F:92:2F:0E
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 019A1FF6D4D2FC89EA2228CF4D83FBB1397B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 1700
Signing time: Sun 26 Oct 2025 10:01:01 +0000
Manifest this update: Sun 26 Oct 2025 10:01:01 +0000
Manifest next update: Mon 27 Oct 2025 10:01:01 +0000
Files and hashes: 1: 2D_sNr6LCkwTuTal-mPrYj8UHIs.roa (hash: /l1Yc3OQ+lo/otr90FJcr/UD3kDLNT0VbUXP3aw22fY=)
2: 4m5zxgIpcpLPeYwAolQiZO3OfJg.roa (hash: OQBGj0xAcvnf7DgtTAHxl/RhajJjDdIaXO2XNvZqjbE=)
3: Dlbvp3R98LlEu08WYGasx1T_LuI.roa (hash: qx2q+wnLl8fh2dLVy0eZydoQ+J+Xun6ifBd9DluCaL4=)
4: Xc8Qyh1LirsUEn7RQ8UyXB3RH0o.roa (hash: J+DRmxT7YhmhWsrfnEFIQoC5CTBLXKphVIrLyARlJ+w=)
5: XsUV3yVUcv5weCqiqsURBEgaXXY.roa (hash: 2vI6p11F93XXFNfMhYK7zAMvScbfypBZSjvbJS+JGeY=)
6: bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa (hash: 1kLGiKwdqoK2K8B7I5XFtIe5sNN2BCN7xnm7j0LEaA4=)
7: oIKeScBXNP08SzFzC94DmvUIs80.roa (hash: NFvZgh8Blc1rDmTWkTD21o0JAYAkx72d5ckrzpZJxzc=)
8: q2eujhaGxjto_h4mpcBHS_tUO-c.roa (hash: A8Qfn4Eyu6/KJoJdotmmc1YYF1CYLR184Z3dlvuyTnQ=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: N/6xCQWHx/NHLz0JW/5lceNYCsGKhTF7scNnNMx5dYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:f6:d4:d2:fc:89:ea:22:28:cf:4d:83:fb:b1:39:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Oct 26 10:01:01 2025 GMT
Not After : Oct 27 10:01:01 2025 GMT
Subject: CN=c60f2b7a16821e56667ac13df05bcfd08f922f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:b6:ec:3f:b8:31:48:bb:21:f4:2b:de:50:
f3:e5:5c:43:dc:49:47:47:a3:ce:5f:19:3c:6a:cc:
33:08:94:49:57:6a:5d:bf:32:ed:f6:b7:7d:c9:51:
cb:b5:02:00:6a:73:8a:df:eb:2c:28:f1:3c:10:fd:
ba:c4:21:1b:67:8c:17:76:ec:c3:34:d4:e2:95:fb:
39:15:40:9c:b4:a9:35:57:b3:08:ee:7e:46:fc:22:
76:4e:5f:1e:d0:40:91:54:bc:9c:69:f6:0d:df:b2:
e1:15:d3:dc:f7:81:57:e8:51:13:b9:62:9d:bb:72:
b8:ec:c7:59:a9:a2:c9:94:85:f5:2e:ab:5a:15:c6:
db:32:17:83:a1:91:c3:3d:34:32:7d:d1:3b:5d:c6:
46:25:aa:d7:5d:db:6a:82:8c:a0:97:db:39:52:93:
53:0d:41:8d:b4:5c:6d:86:39:a6:fd:1b:ca:12:22:
34:6d:25:db:96:81:43:0f:48:59:d3:6d:12:79:d2:
d0:dc:d0:0a:bd:bc:4d:26:4c:4e:98:3f:86:d0:fb:
85:2e:d8:c6:e7:84:59:15:07:ea:99:db:0f:09:19:
08:c8:11:7a:a8:72:bf:5c:37:3a:11:91:81:31:a4:
e1:b4:c8:90:d0:2b:c6:2c:f8:36:a3:d7:d4:5c:82:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0F:2B:7A:16:82:1E:56:66:7A:C1:3D:F0:5B:CF:D0:8F:92:2F:0E
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:bb:0f:af:17:8d:9d:36:71:fe:41:ab:1e:3c:3b:4f:ef:74:
13:49:84:df:bd:28:74:2d:36:cf:4c:50:94:75:09:85:f7:31:
62:ca:0a:bc:85:8e:08:d5:e1:f3:9f:68:14:d3:3d:09:cb:81:
84:54:26:8c:3a:c3:e5:68:1a:12:2f:f7:be:4c:6b:37:71:2d:
c5:eb:de:d9:41:40:1a:34:ed:88:b1:72:ba:5f:de:2a:f7:cf:
fa:d1:ad:7a:74:d9:ad:0b:fb:e9:6e:a8:b4:38:f7:e1:9f:af:
44:ae:60:ad:35:18:9f:22:7e:4e:63:86:65:b9:5d:bb:49:3e:
26:b5:91:76:2c:80:82:8f:f6:8a:ce:a6:2e:29:06:39:47:cf:
b1:57:0f:77:91:2c:c6:e7:c7:50:07:93:f5:a3:4c:1d:e3:16:
ac:ea:62:2d:80:b1:2e:c9:06:61:f0:84:0d:ff:6f:7d:3d:30:
2b:fe:1d:65:c9:8d:4c:20:e2:07:d1:e3:7a:ea:62:dd:fe:92:
41:09:4c:e7:ca:fd:63:59:3e:ff:b9:63:5b:36:b2:9d:6c:3b:
bf:91:04:3f:e7:f7:d2:16:04:5c:17:c2:da:dd:30:a6:52:b1:
d0:be:6d:41:3e:ec:93:91:f3:dc:34:70:34:6b:fa:ff:e4:dd:
0a:4d:3a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:42:49 2025 by rpki-client