Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: /IH0PEIzxRFLW2S4OfmzmB0+hobMiAjle2AqEs+63Po=
Subject key identifier: AE:F4:07:4F:11:40:A9:86:13:B1:07:35:0F:0B:A3:16:3D:CD:63:E1
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 01987E9CA45313839C5F737D9659C1DDDD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 1627
Signing time: Wed 06 Aug 2025 09:00:51 +0000
Manifest this update: Wed 06 Aug 2025 09:00:51 +0000
Manifest next update: Thu 07 Aug 2025 09:00:51 +0000
Files and hashes: 1: 2D_sNr6LCkwTuTal-mPrYj8UHIs.roa (hash: /l1Yc3OQ+lo/otr90FJcr/UD3kDLNT0VbUXP3aw22fY=)
2: 4m5zxgIpcpLPeYwAolQiZO3OfJg.roa (hash: OQBGj0xAcvnf7DgtTAHxl/RhajJjDdIaXO2XNvZqjbE=)
3: Dlbvp3R98LlEu08WYGasx1T_LuI.roa (hash: qx2q+wnLl8fh2dLVy0eZydoQ+J+Xun6ifBd9DluCaL4=)
4: Xc8Qyh1LirsUEn7RQ8UyXB3RH0o.roa (hash: J+DRmxT7YhmhWsrfnEFIQoC5CTBLXKphVIrLyARlJ+w=)
5: XsUV3yVUcv5weCqiqsURBEgaXXY.roa (hash: 2vI6p11F93XXFNfMhYK7zAMvScbfypBZSjvbJS+JGeY=)
6: bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa (hash: 1kLGiKwdqoK2K8B7I5XFtIe5sNN2BCN7xnm7j0LEaA4=)
7: oIKeScBXNP08SzFzC94DmvUIs80.roa (hash: NFvZgh8Blc1rDmTWkTD21o0JAYAkx72d5ckrzpZJxzc=)
8: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: XKr69zcyL7857zRtQNbqhJCBd1g2nxnzlvtyo2yNNHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:a4:53:13:83:9c:5f:73:7d:96:59:c1:dd:dd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Aug 6 09:00:51 2025 GMT
Not After : Aug 7 09:00:51 2025 GMT
Subject: CN=aef4074f1140a98613b107350f0ba3163dcd63e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:ce:4c:91:e9:0d:05:a1:37:40:3b:17:fe:
fa:e1:d4:f8:bd:50:f3:61:1d:b9:e7:ef:19:46:bc:
0c:5a:9f:37:35:9f:f3:d8:e8:19:ce:d8:64:39:ed:
94:f3:e9:b2:c6:fc:db:4c:35:32:b1:a9:6a:c6:14:
e4:48:3e:b0:2c:a1:9a:58:28:58:0f:b5:0a:b4:22:
24:1c:89:ed:13:ce:66:d6:44:fb:5b:64:30:64:d3:
62:41:01:79:f7:dd:30:92:3e:87:db:ec:b3:e1:83:
a0:f5:58:42:80:7a:9a:d4:86:f3:df:bb:06:13:13:
0a:86:27:de:50:e7:2c:ee:1d:47:ea:86:a1:50:5e:
68:9a:c9:b6:c7:28:ef:89:78:13:25:3b:23:ef:bf:
60:8a:dd:4c:47:a1:04:8f:f2:47:f2:f3:ff:6c:a7:
fb:ff:08:4f:64:2c:91:d7:c9:fc:a6:70:b4:89:d5:
ac:3b:2c:85:3a:99:53:b7:da:37:ff:97:6e:17:ff:
00:e0:57:73:d4:9d:d6:87:ea:cd:4f:9c:71:2c:6e:
41:0d:b6:ea:52:0a:2a:d3:d3:3f:2c:68:6a:94:96:
e9:4c:26:a0:66:fe:18:19:b2:8b:3b:fc:23:ea:fb:
78:3c:03:0f:a1:e6:d9:de:e4:6a:b8:9c:20:78:64:
24:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F4:07:4F:11:40:A9:86:13:B1:07:35:0F:0B:A3:16:3D:CD:63:E1
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1f:d4:9e:68:82:ae:ea:9a:2b:b5:94:d1:1c:6a:29:a6:f7:
cd:ae:f5:ed:af:5f:3d:62:db:05:9d:a7:0b:a9:f6:2c:28:86:
b8:67:9f:c6:80:fd:04:11:67:09:09:94:77:30:f6:e8:e3:17:
31:2c:43:a2:f4:b1:03:47:aa:c9:51:37:93:ee:3d:ea:ca:91:
97:19:4b:e5:e8:53:54:5e:61:6d:a4:16:61:8b:dc:66:e8:c4:
47:6d:da:71:37:c8:b2:26:94:2f:6e:81:d5:79:83:32:d6:7f:
27:af:09:a8:39:99:d3:54:59:2d:65:4a:51:cf:cf:82:c2:7c:
76:bd:26:73:ea:7e:ce:ad:a8:a1:3f:7a:87:3d:07:c4:5c:45:
dd:00:c0:0f:db:ec:cf:a1:b3:dc:19:cd:57:c8:ce:f3:4a:1c:
6b:85:a6:26:b4:81:86:ee:e8:59:7c:0a:3d:6e:fc:69:66:7f:
df:f8:96:58:81:08:7d:1d:03:5a:84:6e:96:16:bd:ee:d0:36:
9a:04:02:c2:91:b7:d1:f2:98:ad:50:05:35:f9:50:e7:aa:06:
b9:fa:95:2f:a0:7e:26:04:34:3a:17:a6:84:7e:93:37:37:0b:
81:cb:1c:be:66:0c:e1:10:db:20:5c:32:d3:a6:83:fe:1e:d0:
05:84:3b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:39:36 2025 by rpki-client