Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: BBFuaV0fMW/KB0G/OIHk1gY8zO1VWgRg9aVbb01aWpY=
Subject key identifier: 7A:E1:8B:93:3F:2F:D1:0C:14:50:4B:FC:97:3A:71:E5:EE:55:7B:86
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 0197741BA47AD08BF18B6A83A8DAE5BEDE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 159D
Signing time: Sun 15 Jun 2025 15:00:57 +0000
Manifest this update: Sun 15 Jun 2025 15:00:57 +0000
Manifest next update: Mon 16 Jun 2025 15:00:57 +0000
Files and hashes: 1: 2D_sNr6LCkwTuTal-mPrYj8UHIs.roa (hash: /l1Yc3OQ+lo/otr90FJcr/UD3kDLNT0VbUXP3aw22fY=)
2: 4m5zxgIpcpLPeYwAolQiZO3OfJg.roa (hash: OQBGj0xAcvnf7DgtTAHxl/RhajJjDdIaXO2XNvZqjbE=)
3: Dlbvp3R98LlEu08WYGasx1T_LuI.roa (hash: qx2q+wnLl8fh2dLVy0eZydoQ+J+Xun6ifBd9DluCaL4=)
4: Xc8Qyh1LirsUEn7RQ8UyXB3RH0o.roa (hash: J+DRmxT7YhmhWsrfnEFIQoC5CTBLXKphVIrLyARlJ+w=)
5: XsUV3yVUcv5weCqiqsURBEgaXXY.roa (hash: 2vI6p11F93XXFNfMhYK7zAMvScbfypBZSjvbJS+JGeY=)
6: bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa (hash: 1kLGiKwdqoK2K8B7I5XFtIe5sNN2BCN7xnm7j0LEaA4=)
7: oIKeScBXNP08SzFzC94DmvUIs80.roa (hash: NFvZgh8Blc1rDmTWkTD21o0JAYAkx72d5ckrzpZJxzc=)
8: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: mWaQ5yLXRirAa2LodKgmb3lk4v7nOtxjw9XqJs1V9og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:1b:a4:7a:d0:8b:f1:8b:6a:83:a8:da:e5:be:de:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jun 15 15:00:57 2025 GMT
Not After : Jun 16 15:00:57 2025 GMT
Subject: CN=7ae18b933f2fd10c14504bfc973a71e5ee557b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:fa:56:86:2c:2a:9b:5a:1b:f0:09:46:98:
bc:6e:a7:00:e6:46:37:c5:00:27:e4:a8:83:d0:14:
ab:0a:14:8f:9a:cb:d7:fe:36:c6:3e:f5:35:4c:4b:
33:7b:5d:c7:99:e1:22:6a:65:0b:2a:6a:ab:1a:8e:
89:80:8f:f7:49:1f:b6:3d:17:fc:1b:43:51:c6:b0:
a9:05:82:3b:9e:8b:bb:d2:dd:2a:19:3b:e8:71:4f:
3f:d4:ea:d1:de:4c:a6:2b:bb:2c:d2:6f:3b:80:18:
0e:6a:e3:76:d1:17:4e:8a:70:47:36:5c:40:fa:bd:
e9:47:be:9f:b3:14:d6:2d:f6:c7:f4:10:69:85:96:
89:16:de:76:fc:96:f3:00:77:f1:4e:63:8a:b8:4e:
19:fe:63:41:0d:fd:b1:30:6b:e4:af:8d:dd:5b:d6:
e9:01:c7:0b:c7:73:c9:c4:ee:db:84:b6:38:bb:09:
d3:92:81:46:b8:d5:b3:71:e4:77:e1:33:5a:6a:2d:
11:af:04:5f:fa:ef:11:4f:a1:98:c8:cf:85:26:5a:
e3:32:0d:0c:81:c4:f9:6d:dd:1e:46:b8:ae:03:ee:
db:2b:bf:3f:a5:36:5b:d6:c8:57:6e:c7:32:35:7c:
6f:cc:e2:28:41:75:d2:25:c5:8d:73:92:b5:6f:1c:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E1:8B:93:3F:2F:D1:0C:14:50:4B:FC:97:3A:71:E5:EE:55:7B:86
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:08:8c:bf:1a:87:42:e2:25:37:5e:7b:43:db:d0:7d:f8:c2:
44:dc:24:36:94:97:e8:e7:47:e6:6a:f5:7a:ea:a9:74:6d:68:
54:d9:c5:33:21:7e:a9:87:10:66:c6:31:2e:5f:2f:f4:7c:02:
0e:97:dd:5a:a6:6d:78:78:34:08:97:4f:7c:7c:8f:72:09:3f:
de:63:fa:06:f1:f2:a2:91:59:5a:a2:b1:db:9d:4b:32:4e:8a:
fe:59:a2:a2:79:89:58:8d:88:27:ff:cf:ae:b9:c8:f7:63:48:
d0:bd:d9:26:af:1c:49:35:5f:a1:af:25:48:04:31:ea:da:25:
e6:0c:b4:3c:0f:3d:be:f2:e0:ce:ca:5a:0c:85:77:2b:49:4a:
dd:60:35:54:d1:4c:41:fd:6f:2c:8d:a5:a1:64:ad:67:33:a8:
18:2a:b9:4b:cb:0f:0c:c3:c9:89:e5:c6:7b:c1:21:54:b0:0e:
6a:8f:d2:45:54:0e:b9:29:52:f5:87:17:26:ea:18:00:8b:c7:
0d:31:99:a6:52:ab:8f:80:f0:23:44:6e:f4:38:3e:3b:14:17:
cf:ba:a3:e5:f7:b3:4a:c8:42:18:55:0a:b6:63:57:28:92:01:
f9:bc:37:cd:cd:d6:3f:f9:1d:46:38:87:78:d1:ae:a8:fd:5a:
ee:38:59:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:08:21 2025 by rpki-client