Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: 9wPU14CkPdBhrDGvEK+HHsEruvfhtmRBSwL6YtYRZOk=
Subject key identifier: 2D:5D:3D:8D:BF:09:7A:1B:B0:50:80:E1:F5:87:37:C3:B0:90:6C:E6
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 0196BAB61F4F4C6601845F6D25B54429A023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 153D
Signing time: Sat 10 May 2025 15:00:19 +0000
Manifest this update: Sat 10 May 2025 15:00:19 +0000
Manifest next update: Sun 11 May 2025 15:00:19 +0000
Files and hashes: 1: 2D_sNr6LCkwTuTal-mPrYj8UHIs.roa (hash: /l1Yc3OQ+lo/otr90FJcr/UD3kDLNT0VbUXP3aw22fY=)
2: 4m5zxgIpcpLPeYwAolQiZO3OfJg.roa (hash: OQBGj0xAcvnf7DgtTAHxl/RhajJjDdIaXO2XNvZqjbE=)
3: Dlbvp3R98LlEu08WYGasx1T_LuI.roa (hash: qx2q+wnLl8fh2dLVy0eZydoQ+J+Xun6ifBd9DluCaL4=)
4: Xc8Qyh1LirsUEn7RQ8UyXB3RH0o.roa (hash: J+DRmxT7YhmhWsrfnEFIQoC5CTBLXKphVIrLyARlJ+w=)
5: XsUV3yVUcv5weCqiqsURBEgaXXY.roa (hash: 2vI6p11F93XXFNfMhYK7zAMvScbfypBZSjvbJS+JGeY=)
6: bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa (hash: 1kLGiKwdqoK2K8B7I5XFtIe5sNN2BCN7xnm7j0LEaA4=)
7: oIKeScBXNP08SzFzC94DmvUIs80.roa (hash: NFvZgh8Blc1rDmTWkTD21o0JAYAkx72d5ckrzpZJxzc=)
8: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: us4QvQz+YLsG+wypKq4fUXFiS24CQ4Z3ERPTXXHqcNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:1f:4f:4c:66:01:84:5f:6d:25:b5:44:29:a0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: May 10 15:00:19 2025 GMT
Not After : May 11 15:00:19 2025 GMT
Subject: CN=2d5d3d8dbf097a1bb05080e1f58737c3b0906ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:14:e6:2a:b6:4f:c4:d8:23:03:98:b0:bd:
12:9a:44:ce:26:5e:71:d7:8b:96:46:de:f2:8c:88:
5c:4c:a1:95:ad:43:bb:1b:26:83:d8:5b:fe:f5:ab:
db:fb:1a:92:fc:15:cd:01:29:63:c4:8e:e0:10:48:
47:64:ee:c3:14:ce:ba:b8:1b:62:2d:5a:22:00:b4:
7e:9b:cc:17:64:87:92:87:32:13:0d:33:18:95:15:
d3:fd:2f:71:0e:3c:7e:dd:ba:76:58:71:f5:1e:08:
83:0a:3d:8a:69:dc:3e:86:6f:b1:aa:92:36:d2:52:
c7:71:37:2a:db:58:2a:19:b7:a4:06:14:fe:bc:53:
3a:58:c3:dc:68:b7:66:eb:e6:de:f1:67:f5:b4:33:
c9:17:8b:f9:5b:4e:f2:2b:38:58:df:9f:b0:00:f0:
3e:bb:3b:fb:92:56:aa:57:ef:57:f2:0f:c9:e1:ab:
90:4a:51:af:94:ea:b3:36:04:1b:1d:ee:6f:e1:97:
e9:bb:15:9a:fa:10:34:17:6c:a9:24:66:67:b1:ac:
eb:cd:a0:d1:4d:21:e3:d4:4b:ae:ca:87:bf:31:96:
cf:ff:f9:68:ed:b1:54:5a:78:3a:e4:94:18:94:3a:
25:5a:52:84:76:14:a0:c1:12:6e:97:29:11:40:6d:
6e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5D:3D:8D:BF:09:7A:1B:B0:50:80:E1:F5:87:37:C3:B0:90:6C:E6
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:75:9f:75:ac:3d:ba:1d:9a:5a:5e:e4:a5:bf:ce:20:4b:87:
b0:48:c8:df:50:b6:4a:af:3d:4a:de:17:48:e9:0c:a8:fa:6c:
e1:e3:ae:09:e3:c6:87:66:e0:4a:3f:7f:8e:35:5f:e3:d7:5d:
97:cc:18:c3:ea:c8:6a:8b:94:b1:8c:70:4f:24:f6:72:de:0b:
e0:47:c6:74:06:f0:cc:1b:1e:4a:04:96:a2:e1:aa:0a:f9:9a:
cf:7b:71:95:26:b4:73:c8:01:b4:09:60:25:14:36:d6:31:d5:
e7:e8:33:87:70:be:00:62:60:b2:12:93:3b:bb:84:b2:73:51:
64:df:ea:d4:dc:17:34:93:3a:88:ab:7a:19:88:e7:45:fa:c0:
bd:70:a5:c8:27:62:ec:53:7a:3a:24:35:db:b4:ed:2d:d4:ae:
f9:5a:a3:b7:1c:91:ff:86:ce:95:c1:48:d1:79:c3:e5:f3:e6:
10:bc:95:57:06:d2:00:4a:5c:db:ea:00:b9:45:fc:65:35:2a:
3d:ca:c9:8b:9c:a7:7c:14:bd:32:c5:9b:9f:1f:59:b5:59:7e:
82:aa:4d:8b:a2:86:49:78:c2:18:be:f9:04:20:9f:79:79:04:
6a:8f:fa:ed:21:95:20:01:4c:fd:b3:a1:7b:ca:39:fd:bc:b1:
5e:f1:90:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:17:19 2025 by rpki-client