Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: TqW/nELrW2uQyexRt/TqAZTaevQGD9F8MLnCx8rNzYg=
Subject key identifier: 8F:CF:B7:7F:8A:AC:80:42:C1:8F:D8:4C:E8:3E:B1:70:08:D3:66:4F
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 0196771ED5D1B62FC2ADE22E5B64BBD01B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 151A
Signing time: Sun 27 Apr 2025 12:00:31 +0000
Manifest this update: Sun 27 Apr 2025 12:00:31 +0000
Manifest next update: Mon 28 Apr 2025 12:00:31 +0000
Files and hashes: 1: 2D_sNr6LCkwTuTal-mPrYj8UHIs.roa (hash: /l1Yc3OQ+lo/otr90FJcr/UD3kDLNT0VbUXP3aw22fY=)
2: 4m5zxgIpcpLPeYwAolQiZO3OfJg.roa (hash: OQBGj0xAcvnf7DgtTAHxl/RhajJjDdIaXO2XNvZqjbE=)
3: Dlbvp3R98LlEu08WYGasx1T_LuI.roa (hash: qx2q+wnLl8fh2dLVy0eZydoQ+J+Xun6ifBd9DluCaL4=)
4: Xc8Qyh1LirsUEn7RQ8UyXB3RH0o.roa (hash: J+DRmxT7YhmhWsrfnEFIQoC5CTBLXKphVIrLyARlJ+w=)
5: XsUV3yVUcv5weCqiqsURBEgaXXY.roa (hash: 2vI6p11F93XXFNfMhYK7zAMvScbfypBZSjvbJS+JGeY=)
6: bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa (hash: 1kLGiKwdqoK2K8B7I5XFtIe5sNN2BCN7xnm7j0LEaA4=)
7: oIKeScBXNP08SzFzC94DmvUIs80.roa (hash: NFvZgh8Blc1rDmTWkTD21o0JAYAkx72d5ckrzpZJxzc=)
8: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: z9L55p35q7ox7HwWvaPUy8XT9YP/efREMRzgSwnqmAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:d5:d1:b6:2f:c2:ad:e2:2e:5b:64:bb:d0:1b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Apr 27 12:00:31 2025 GMT
Not After : Apr 28 12:00:31 2025 GMT
Subject: CN=8fcfb77f8aac8042c18fd84ce83eb17008d3664f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1d:a6:30:ad:a4:07:7b:84:e0:ba:5c:6a:92:
99:a4:ce:42:57:ce:4b:49:15:7b:5c:3b:c0:22:62:
01:8d:b8:1d:4d:06:24:fa:ed:c8:83:58:e6:7e:7e:
57:45:85:21:8c:15:da:05:ee:e7:32:2a:1f:49:0f:
e8:6b:89:b5:ab:84:02:ef:a2:f3:e5:d3:97:7b:5a:
6e:c8:94:39:1e:2f:3b:fa:d4:0e:25:b6:32:d9:d6:
1f:94:72:35:b6:79:13:46:1a:a7:d0:98:c1:e8:57:
4d:6f:16:bb:d6:6d:04:6a:a6:c6:43:9b:7f:57:bb:
f5:da:de:d8:a1:af:89:81:e8:6a:01:12:b4:de:41:
24:b7:44:ea:54:dd:62:b6:d5:3c:c8:61:4f:d9:df:
e1:7c:88:2d:53:e3:d6:13:4d:d4:cf:9c:ed:84:b4:
9e:96:7d:68:56:21:3d:0a:d2:a2:01:d9:2f:e3:7d:
e7:73:21:a2:bf:91:3a:18:b6:ac:6d:3d:3c:6a:6d:
77:35:88:d0:10:68:03:0b:66:fd:8a:3d:27:7e:4b:
43:43:77:50:fa:d8:48:03:f3:0b:d9:ee:5e:24:40:
f8:03:21:a5:b0:2c:e0:2c:35:d4:3b:a0:40:67:fa:
76:ba:af:e9:08:84:24:2b:ff:bb:84:2c:e9:8c:0d:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CF:B7:7F:8A:AC:80:42:C1:8F:D8:4C:E8:3E:B1:70:08:D3:66:4F
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:34:05:76:c5:47:40:a0:12:c0:bb:a7:dd:93:8e:24:de:57:
c3:a0:da:af:fd:ef:55:fb:ef:23:b7:cc:a8:22:be:6b:5a:6c:
5e:87:e1:e4:ac:a9:66:4a:c7:17:08:2a:44:9a:b3:21:21:f1:
fd:c3:7f:4a:e4:0b:1d:a5:df:e5:cd:f4:6b:cf:20:60:7f:6d:
25:f6:f5:43:62:e9:25:29:01:59:b9:85:1a:7f:04:09:b8:7f:
ec:d5:0d:e7:b0:d7:3a:4b:af:da:ca:25:93:2e:11:f5:db:df:
21:65:f9:86:26:c6:bc:4d:9a:03:6e:5e:e0:22:c4:ee:17:07:
38:12:92:88:30:88:77:ff:92:f1:7e:05:66:f1:f8:16:4c:2c:
31:9d:63:c6:9a:28:75:e3:76:ae:82:ea:6d:b6:53:9e:30:a5:
23:62:20:20:3d:e4:2d:07:a7:a9:5e:e5:84:bb:ab:d2:2c:42:
25:fb:1b:4b:65:41:ba:58:05:41:c0:77:12:19:73:40:09:a8:
68:0d:3f:17:95:c9:79:90:de:b9:c0:ab:98:07:44:d4:24:f5:
77:cd:56:76:16:ea:9c:8c:31:5c:33:d2:1e:ac:d7:68:37:d9:
80:db:9b:bc:68:fe:41:44:c6:25:b6:79:6c:14:8c:1a:5a:d3:
c3:0f:ab:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:29 2025 by rpki-client