Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: Az6TWYyI1OrCXuQs77hGoajmexN3z7kcq+vgPrY77mk=
Subject key identifier: 0D:82:6A:9D:2A:83:54:1D:68:27:19:CE:E3:52:40:38:DF:17:57:63
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 0199FD344C551A0F98B906398945544C9F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 16EE
Signing time: Sun 19 Oct 2025 16:01:26 +0000
Manifest this update: Sun 19 Oct 2025 16:01:26 +0000
Manifest next update: Mon 20 Oct 2025 16:01:26 +0000
Files and hashes: 1: 2D_sNr6LCkwTuTal-mPrYj8UHIs.roa (hash: /l1Yc3OQ+lo/otr90FJcr/UD3kDLNT0VbUXP3aw22fY=)
2: 4m5zxgIpcpLPeYwAolQiZO3OfJg.roa (hash: OQBGj0xAcvnf7DgtTAHxl/RhajJjDdIaXO2XNvZqjbE=)
3: Dlbvp3R98LlEu08WYGasx1T_LuI.roa (hash: qx2q+wnLl8fh2dLVy0eZydoQ+J+Xun6ifBd9DluCaL4=)
4: Xc8Qyh1LirsUEn7RQ8UyXB3RH0o.roa (hash: J+DRmxT7YhmhWsrfnEFIQoC5CTBLXKphVIrLyARlJ+w=)
5: XsUV3yVUcv5weCqiqsURBEgaXXY.roa (hash: 2vI6p11F93XXFNfMhYK7zAMvScbfypBZSjvbJS+JGeY=)
6: bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa (hash: 1kLGiKwdqoK2K8B7I5XFtIe5sNN2BCN7xnm7j0LEaA4=)
7: oIKeScBXNP08SzFzC94DmvUIs80.roa (hash: NFvZgh8Blc1rDmTWkTD21o0JAYAkx72d5ckrzpZJxzc=)
8: q2eujhaGxjto_h4mpcBHS_tUO-c.roa (hash: A8Qfn4Eyu6/KJoJdotmmc1YYF1CYLR184Z3dlvuyTnQ=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: ty12xYEnMbSTpNduPMWX6hMziZCkTzzOdxsZ4bQAJjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4c:55:1a:0f:98:b9:06:39:89:45:54:4c:9f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Oct 19 16:01:26 2025 GMT
Not After : Oct 20 16:01:26 2025 GMT
Subject: CN=0d826a9d2a83541d682719cee3524038df175763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c9:fc:89:59:ed:76:85:22:76:1a:b2:4f:7f:
7c:60:f1:12:74:ef:aa:5f:4d:48:d9:98:c0:dc:32:
c8:f1:63:8c:9b:e8:67:9b:7b:ed:25:5c:dc:30:55:
65:74:41:20:62:d4:36:48:89:b0:da:9f:b3:ae:fb:
64:74:dc:f4:e7:b6:86:ff:e4:5b:4a:5f:8e:b1:38:
4e:b2:80:c5:44:e2:00:16:bc:19:a6:c0:fd:24:b8:
14:f8:8d:21:99:4a:d1:a3:39:58:1b:ac:22:58:7a:
15:fb:75:96:c1:c0:73:68:82:9a:25:77:b6:1c:13:
48:2d:6f:60:76:7b:92:a2:02:b9:1a:e0:95:ae:2f:
c4:1a:d4:fb:15:e8:72:0e:3f:84:95:08:1b:b8:83:
80:7a:e1:07:41:32:0d:d0:56:b6:1f:ec:a3:18:d1:
62:41:a0:48:d6:b0:f4:e1:99:0f:ac:0d:45:40:1e:
8a:d1:9f:71:ad:2a:4f:2f:30:b6:98:b9:6a:43:06:
24:95:e3:b8:58:85:36:58:83:96:59:77:c0:1b:63:
d4:18:c4:0c:5d:f3:60:da:b5:13:0b:ad:c0:e2:3f:
4d:f9:53:c0:c4:74:20:89:27:d4:af:21:cc:38:07:
d2:45:2a:6f:b6:d0:3c:14:69:08:77:75:2b:ad:5c:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:82:6A:9D:2A:83:54:1D:68:27:19:CE:E3:52:40:38:DF:17:57:63
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:96:85:0c:f5:94:d8:89:70:29:2a:34:c7:c4:94:ec:79:4f:
91:a3:10:28:1f:48:24:21:56:e0:1d:08:7f:2d:99:e0:e8:20:
36:1e:e4:29:e2:8d:32:a6:11:b8:6c:2e:bb:c5:8e:58:f5:37:
91:1b:ff:e4:21:97:29:f2:cf:82:86:11:44:e8:88:0c:39:08:
25:4a:3e:f7:2d:3c:3e:37:8a:0f:ab:20:ff:ad:f4:6e:c3:11:
b0:df:d7:9c:49:bc:50:80:e3:33:06:97:07:4b:d5:2e:7c:81:
8a:13:8b:a5:c0:24:b8:91:b2:ae:ca:30:96:f5:63:8d:41:1b:
95:81:44:9c:07:cc:4c:7f:6a:08:e4:a8:74:b4:aa:60:eb:21:
21:9d:77:6b:27:ae:4f:57:af:f4:15:da:6b:30:dd:62:1e:eb:
1a:bf:1a:42:72:1a:3d:2a:b6:fe:57:c5:81:51:6e:94:9a:82:
fc:17:72:68:bb:42:ec:73:9f:a9:8b:ef:11:e7:ce:ba:47:c8:
de:f7:44:3a:2c:a6:43:e2:13:9d:60:c0:95:75:1c:5c:7d:de:
27:79:43:84:bc:e0:74:f2:1f:ed:ab:77:0f:62:f1:af:76:61:
32:ae:b8:63:e9:6b:a0:ec:8e:dd:22:cb:2c:ed:3c:ed:be:6f:
b2:d9:1e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:37:00 2025 by rpki-client