Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: yV+xZMElN2ypdrvkBhgITVVgZECtsRGCS1Xvb6w54bQ=
Subject key identifier: DF:99:88:96:E2:F5:1D:16:F0:A4:B8:4D:8E:80:D7:7F:13:96:9D:42
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 0197B7B323F5901EB6B586D72B8B8081489D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 15C0
Signing time: Sat 28 Jun 2025 18:01:00 +0000
Manifest this update: Sat 28 Jun 2025 18:01:00 +0000
Manifest next update: Sun 29 Jun 2025 18:01:00 +0000
Files and hashes: 1: 2D_sNr6LCkwTuTal-mPrYj8UHIs.roa (hash: /l1Yc3OQ+lo/otr90FJcr/UD3kDLNT0VbUXP3aw22fY=)
2: 4m5zxgIpcpLPeYwAolQiZO3OfJg.roa (hash: OQBGj0xAcvnf7DgtTAHxl/RhajJjDdIaXO2XNvZqjbE=)
3: Dlbvp3R98LlEu08WYGasx1T_LuI.roa (hash: qx2q+wnLl8fh2dLVy0eZydoQ+J+Xun6ifBd9DluCaL4=)
4: Xc8Qyh1LirsUEn7RQ8UyXB3RH0o.roa (hash: J+DRmxT7YhmhWsrfnEFIQoC5CTBLXKphVIrLyARlJ+w=)
5: XsUV3yVUcv5weCqiqsURBEgaXXY.roa (hash: 2vI6p11F93XXFNfMhYK7zAMvScbfypBZSjvbJS+JGeY=)
6: bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa (hash: 1kLGiKwdqoK2K8B7I5XFtIe5sNN2BCN7xnm7j0LEaA4=)
7: oIKeScBXNP08SzFzC94DmvUIs80.roa (hash: NFvZgh8Blc1rDmTWkTD21o0JAYAkx72d5ckrzpZJxzc=)
8: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: CO+nJL0ubmbmL+hEIDpPM1WFYaXGWxh8fSvRu50QDFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:23:f5:90:1e:b6:b5:86:d7:2b:8b:80:81:48:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jun 28 18:01:00 2025 GMT
Not After : Jun 29 18:01:00 2025 GMT
Subject: CN=df998896e2f51d16f0a4b84d8e80d77f13969d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:3c:a8:8f:b2:51:bd:9e:47:ed:e6:b7:7c:
5c:d8:dc:b5:c1:f2:f9:7e:cb:20:89:3f:2f:e9:d2:
d5:b4:c2:f6:10:1b:f1:14:b8:cf:9b:50:cf:15:7a:
0b:ef:9a:84:a7:e4:0c:1a:8e:60:fc:2f:06:3f:b3:
c1:74:96:3a:a4:ee:c9:9d:7f:2a:cb:91:f7:50:2f:
fb:5c:0d:04:d5:25:e4:a6:72:bb:86:1f:53:f2:46:
17:88:89:27:9e:f8:7b:2c:79:3a:d6:05:fa:ef:54:
6d:96:67:d0:4f:e2:84:b6:3d:c3:72:d0:d7:bd:b6:
5c:87:b9:89:85:4e:c7:08:59:50:c0:c8:e8:8b:5b:
12:d0:fd:52:9e:a8:80:89:16:a3:90:84:d3:b8:1f:
4a:39:d6:ba:65:1d:7c:16:fc:95:34:73:87:b0:19:
13:49:d4:e1:90:bb:e6:02:68:9e:15:44:72:a2:4e:
cd:52:b3:3c:d2:f7:1c:d9:7c:b7:3b:fc:51:2b:4e:
f8:20:57:e6:42:09:a3:aa:b6:cc:4b:d9:01:8c:c3:
31:0e:1b:30:21:91:0b:d4:17:9d:00:d8:b7:e6:9e:
18:c7:8a:df:f1:fe:fe:60:fa:ca:d2:cf:e3:49:7c:
c3:ec:db:d8:c0:31:3e:b4:37:14:05:79:00:b0:86:
82:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:99:88:96:E2:F5:1D:16:F0:A4:B8:4D:8E:80:D7:7F:13:96:9D:42
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c8:20:72:77:55:8c:b5:b6:ed:c1:1b:90:30:1f:a1:d6:e3:
b6:2a:e9:d1:d3:da:c0:9f:96:13:db:89:b5:bf:61:6c:00:85:
9c:72:e8:63:52:91:b5:9c:e1:77:d2:ae:62:17:fd:0b:bb:0a:
fb:23:56:55:25:41:8a:6a:57:17:fa:5f:a7:db:de:2c:a9:64:
e4:93:76:2e:4d:a9:be:80:42:d8:13:8d:73:15:a2:0e:28:a2:
31:b0:9c:34:14:d9:f7:76:95:c2:a8:26:13:ad:c5:70:83:66:
57:61:46:80:ad:1c:f4:79:38:f0:0d:8e:e6:b8:f4:e5:be:3b:
58:ac:ca:5a:2a:55:61:95:47:58:04:06:f6:f9:95:f2:29:b7:
af:fe:5d:d3:7a:0c:cd:82:94:b9:65:73:03:4c:be:e6:09:07:
50:a5:3b:48:dd:21:f5:2d:68:c3:83:9b:e0:9d:73:f2:2a:f3:
3e:29:d7:65:6a:da:5a:22:e8:d2:3c:a2:e6:da:61:90:54:67:
dc:e6:b8:28:11:d3:31:c1:5b:7f:e6:bd:c6:f8:fc:06:ac:08:
2a:77:0e:5c:06:e0:c7:8e:c4:c6:1f:a2:f6:c3:a8:0d:56:e9:
cb:07:4b:84:f3:69:d0:f5:b0:8a:27:18:5f:80:cf:17:fe:1c:
4a:7a:19:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:51 2025 by rpki-client