Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: qKIb/kJ5ga6Kls15I/ZroAYstb1cguH7s8CJdDkYFU4=
Subject key identifier: 6B:A1:2C:79:D5:75:B4:95:0E:5B:0D:01:FB:B1:CF:19:9A:18:8C:A1
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 0198D58376CD7CE0BC0545D238A2F9324711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 1654
Signing time: Sat 23 Aug 2025 06:00:19 +0000
Manifest this update: Sat 23 Aug 2025 06:00:19 +0000
Manifest next update: Sun 24 Aug 2025 06:00:19 +0000
Files and hashes: 1: 2D_sNr6LCkwTuTal-mPrYj8UHIs.roa (hash: /l1Yc3OQ+lo/otr90FJcr/UD3kDLNT0VbUXP3aw22fY=)
2: 4m5zxgIpcpLPeYwAolQiZO3OfJg.roa (hash: OQBGj0xAcvnf7DgtTAHxl/RhajJjDdIaXO2XNvZqjbE=)
3: Dlbvp3R98LlEu08WYGasx1T_LuI.roa (hash: qx2q+wnLl8fh2dLVy0eZydoQ+J+Xun6ifBd9DluCaL4=)
4: Xc8Qyh1LirsUEn7RQ8UyXB3RH0o.roa (hash: J+DRmxT7YhmhWsrfnEFIQoC5CTBLXKphVIrLyARlJ+w=)
5: XsUV3yVUcv5weCqiqsURBEgaXXY.roa (hash: 2vI6p11F93XXFNfMhYK7zAMvScbfypBZSjvbJS+JGeY=)
6: bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa (hash: 1kLGiKwdqoK2K8B7I5XFtIe5sNN2BCN7xnm7j0LEaA4=)
7: oIKeScBXNP08SzFzC94DmvUIs80.roa (hash: NFvZgh8Blc1rDmTWkTD21o0JAYAkx72d5ckrzpZJxzc=)
8: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: fJrXrlyBx+wMDoUWQGoujcSEhfh/PiWwczE6v4uck0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:76:cd:7c:e0:bc:05:45:d2:38:a2:f9:32:47:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Aug 23 06:00:19 2025 GMT
Not After : Aug 24 06:00:19 2025 GMT
Subject: CN=6ba12c79d575b4950e5b0d01fbb1cf199a188ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:48:75:42:95:ef:c7:14:75:51:2b:dd:8f:
ab:fc:5f:50:64:9b:fb:84:e4:9b:83:49:6c:fe:ee:
d0:2c:53:be:fa:e4:47:5f:a3:f6:06:8d:8c:13:4c:
0c:d0:3a:55:cc:2f:77:2d:47:b5:fe:97:f9:b9:cc:
21:ad:c8:b4:a1:b6:2f:99:37:7a:12:07:a9:8a:25:
09:97:1c:a2:72:1f:f1:06:9b:c3:20:19:28:41:b5:
06:5a:8f:44:34:3d:15:b9:f0:ae:eb:2b:cf:3f:32:
58:37:d2:15:ec:25:3f:59:d6:d8:8b:70:a7:c1:16:
e9:d2:bb:05:da:d6:c1:16:b3:4e:c4:c5:16:b6:15:
af:f9:f0:b8:c2:ce:3a:b2:9a:2e:c4:71:fb:d1:70:
69:0e:95:fb:4b:dc:34:13:15:15:72:07:38:59:f3:
d3:ab:b2:6d:48:a2:97:dd:d6:c8:c7:08:b9:a7:54:
44:d5:c1:66:c8:4d:32:92:a4:22:bd:f4:d9:88:ac:
fb:72:7b:2e:94:20:9b:4d:15:8a:c4:0d:17:3a:1c:
f5:73:3f:f2:8e:38:c6:a4:b7:38:af:8f:ce:69:5e:
24:57:b1:cf:f8:c3:e4:af:de:12:b8:fc:26:e8:77:
c4:6d:3a:bc:76:43:01:0c:43:3e:82:01:5c:90:0d:
1a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A1:2C:79:D5:75:B4:95:0E:5B:0D:01:FB:B1:CF:19:9A:18:8C:A1
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:83:37:9c:ca:0b:a9:96:46:28:e6:bc:e1:4f:54:d6:12:89:
30:8d:ac:01:17:ab:97:56:a4:c5:67:28:aa:99:bf:eb:7b:c7:
e9:84:3d:3e:9d:ef:14:1e:89:db:76:ad:d3:72:c4:5e:b9:96:
ec:d6:57:30:7f:03:4a:91:3f:bb:a8:32:58:97:dc:5e:8f:6f:
80:26:a9:9a:e5:92:96:b2:d1:ba:cd:a1:5f:ec:61:e1:bc:22:
ba:ed:53:dc:98:68:f6:7b:df:96:54:59:36:a9:bd:09:9c:79:
4a:92:85:16:44:e6:7b:74:c2:85:fe:96:f1:02:6a:a3:89:23:
08:9b:d2:5b:1e:ac:55:93:1c:8e:77:00:05:28:df:93:e5:32:
aa:ac:c1:ea:8e:00:e9:98:14:17:0d:89:b4:23:8e:b1:7a:3e:
89:16:8e:c3:13:4e:6f:61:eb:54:95:3d:a9:ba:93:86:d9:70:
10:87:35:c9:12:6b:5c:a1:31:00:0b:2a:87:89:b3:66:b2:18:
10:24:b9:a1:35:2a:2a:05:9b:4d:ec:30:92:50:57:51:72:e0:
72:c9:b8:95:96:b8:68:e1:19:91:23:76:1e:f3:c0:43:01:c7:
0b:45:6b:cf:54:ff:0f:bb:58:fd:ae:3e:ef:ba:8a:82:85:a0:
7b:0b:a0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:38 2025 by rpki-client