Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: uqahnaC/9LB++dtOl8PaELs1uUSo8kQ9wvibiTorFW0=
Subject key identifier: 56:FF:20:66:E0:68:8A:22:B4:84:5F:22:D6:7C:64:53:4B:6C:50:43
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 019747B1076B04987670C6FC2B5DDC54761C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 1586
Signing time: Sat 07 Jun 2025 00:01:13 +0000
Manifest this update: Sat 07 Jun 2025 00:01:13 +0000
Manifest next update: Sun 08 Jun 2025 00:01:13 +0000
Files and hashes: 1: 2D_sNr6LCkwTuTal-mPrYj8UHIs.roa (hash: /l1Yc3OQ+lo/otr90FJcr/UD3kDLNT0VbUXP3aw22fY=)
2: 4m5zxgIpcpLPeYwAolQiZO3OfJg.roa (hash: OQBGj0xAcvnf7DgtTAHxl/RhajJjDdIaXO2XNvZqjbE=)
3: Dlbvp3R98LlEu08WYGasx1T_LuI.roa (hash: qx2q+wnLl8fh2dLVy0eZydoQ+J+Xun6ifBd9DluCaL4=)
4: Xc8Qyh1LirsUEn7RQ8UyXB3RH0o.roa (hash: J+DRmxT7YhmhWsrfnEFIQoC5CTBLXKphVIrLyARlJ+w=)
5: XsUV3yVUcv5weCqiqsURBEgaXXY.roa (hash: 2vI6p11F93XXFNfMhYK7zAMvScbfypBZSjvbJS+JGeY=)
6: bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa (hash: 1kLGiKwdqoK2K8B7I5XFtIe5sNN2BCN7xnm7j0LEaA4=)
7: oIKeScBXNP08SzFzC94DmvUIs80.roa (hash: NFvZgh8Blc1rDmTWkTD21o0JAYAkx72d5ckrzpZJxzc=)
8: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: ZPS6USkhOcW1ezM8VHnhCnaBxnsHodDimRg4vBR8TTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:07:6b:04:98:76:70:c6:fc:2b:5d:dc:54:76:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jun 7 00:01:13 2025 GMT
Not After : Jun 8 00:01:13 2025 GMT
Subject: CN=56ff2066e0688a22b4845f22d67c64534b6c5043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:e6:ea:cf:dc:fb:88:5d:01:dd:04:26:ad:
1e:f5:26:6a:dd:00:7e:ad:0e:c3:60:92:d9:cf:bf:
a5:00:dc:a4:a4:9c:0f:cb:f9:09:69:46:8d:ee:4f:
4e:58:11:65:f8:e4:e9:3e:09:35:ab:2b:34:b7:1d:
a1:75:a2:1b:a7:eb:49:7c:92:fb:a8:e4:f8:ff:60:
8c:3f:0b:f0:28:8b:05:69:ec:21:aa:c9:a3:53:49:
12:a3:36:49:ee:07:76:c3:d0:1b:33:bd:6b:fc:39:
30:d2:ff:5d:7e:b6:2a:5c:a4:b0:3a:1a:20:88:72:
2e:3c:6d:17:7f:07:08:a4:86:f0:6c:75:56:8d:86:
dc:7c:56:b5:69:b3:19:f3:ae:86:51:12:13:74:1f:
b5:5a:3c:53:96:15:2c:ac:ad:0b:47:0e:20:36:64:
09:05:84:ea:df:a3:01:2a:77:46:a2:a8:b1:cb:98:
c1:93:60:a6:b7:bf:57:43:e0:4a:b2:fe:7d:d0:d8:
3c:a5:ca:c8:c9:c2:2e:f8:c8:57:bb:32:e9:a9:e2:
b6:fc:80:50:cf:89:ce:cc:3c:c4:81:48:c8:b2:c3:
03:d9:04:a4:0a:2b:37:8f:6c:45:c7:3a:81:5f:90:
a3:e7:0d:f3:49:0b:b4:92:23:36:59:f6:48:0c:22:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FF:20:66:E0:68:8A:22:B4:84:5F:22:D6:7C:64:53:4B:6C:50:43
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8b:6a:ac:4f:b0:cb:6a:b5:dd:cf:e5:39:53:ab:4a:72:15:
d4:ab:7c:d9:a9:e0:6c:40:9b:08:d8:7a:e8:9c:18:22:1f:93:
1f:ab:61:69:04:41:3c:42:04:b0:ad:3f:1a:34:4d:ff:97:9f:
28:b0:85:16:f0:94:5d:1f:87:c1:97:01:fe:8b:e1:93:a2:28:
87:d4:a2:8d:bf:ff:6e:b2:6d:1f:f1:94:67:d0:7b:47:20:02:
c6:cc:a4:2f:24:6d:1b:45:0f:11:e1:28:b8:a3:bb:99:98:57:
fe:1a:e7:6e:f2:c2:8e:67:b3:45:59:29:1d:40:05:b2:9d:d7:
70:36:8e:7d:db:cd:c0:f8:7e:aa:93:de:4d:90:92:a4:21:f8:
d8:bc:50:5d:73:82:9e:e8:8f:d8:7c:a2:e3:47:2c:85:fc:52:
65:35:79:7b:4d:e4:8c:9a:bc:3a:12:c0:22:8f:2d:0d:b9:7e:
d1:81:fb:41:89:eb:2f:5c:4a:fe:74:f4:6b:61:7c:c7:9e:e6:
17:5c:1b:a6:14:ee:77:37:6a:1e:af:41:96:b4:30:25:c0:12:
2e:e2:78:04:b5:29:22:3c:2f:73:e7:47:af:e6:82:ca:64:9c:
6b:60:85:8f:20:89:b5:1e:ad:0b:2f:0e:b4:4e:11:12:27:99:
6b:d9:c6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:51 2025 by rpki-client