Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: 7tgQnU/s2yfFNIIAY2af7WRzoqv5RX34LTlhyk7GB1k=
Subject key identifier: B5:EA:4B:02:15:E3:76:DA:1B:1F:E3:DF:7A:97:48:C0:21:C9:E2:DD
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 019A50AB990FD3946B0C289F5EC92B2568E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 171A
Signing time: Tue 04 Nov 2025 21:00:14 +0000
Manifest this update: Tue 04 Nov 2025 21:00:14 +0000
Manifest next update: Wed 05 Nov 2025 21:00:14 +0000
Files and hashes: 1: 2D_sNr6LCkwTuTal-mPrYj8UHIs.roa (hash: /l1Yc3OQ+lo/otr90FJcr/UD3kDLNT0VbUXP3aw22fY=)
2: 4m5zxgIpcpLPeYwAolQiZO3OfJg.roa (hash: OQBGj0xAcvnf7DgtTAHxl/RhajJjDdIaXO2XNvZqjbE=)
3: Dlbvp3R98LlEu08WYGasx1T_LuI.roa (hash: qx2q+wnLl8fh2dLVy0eZydoQ+J+Xun6ifBd9DluCaL4=)
4: X0xBUO01yDVN5CRqvm4XAUfMOJU.roa (hash: 4DOTlT3v5tZvSddUKapPHYVNXtvABPFyf5Abe5iqGYM=)
5: Xc8Qyh1LirsUEn7RQ8UyXB3RH0o.roa (hash: J+DRmxT7YhmhWsrfnEFIQoC5CTBLXKphVIrLyARlJ+w=)
6: XsUV3yVUcv5weCqiqsURBEgaXXY.roa (hash: 2vI6p11F93XXFNfMhYK7zAMvScbfypBZSjvbJS+JGeY=)
7: bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa (hash: 1kLGiKwdqoK2K8B7I5XFtIe5sNN2BCN7xnm7j0LEaA4=)
8: oIKeScBXNP08SzFzC94DmvUIs80.roa (hash: NFvZgh8Blc1rDmTWkTD21o0JAYAkx72d5ckrzpZJxzc=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: 3sQJoscTXAPv+Zq63SU6X4pCdcjnMSc3tgPOakkxdrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:ab:99:0f:d3:94:6b:0c:28:9f:5e:c9:2b:25:68:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Nov 4 21:00:14 2025 GMT
Not After : Nov 5 21:00:14 2025 GMT
Subject: CN=b5ea4b0215e376da1b1fe3df7a9748c021c9e2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4f:83:87:17:9f:78:f9:de:34:6e:fe:60:64:
b7:db:1b:6c:3d:1b:65:fe:78:b4:1e:3f:2b:55:77:
91:c4:ca:79:a6:15:d9:8f:eb:52:50:95:9c:56:af:
1f:08:ea:22:2c:5e:c7:56:c9:4f:dd:73:9b:85:10:
f9:c7:ab:6f:c8:59:93:5a:5b:5e:48:ac:8b:88:4b:
45:31:39:99:94:b5:89:40:f8:94:75:42:fd:84:1e:
9a:8a:42:bb:14:98:02:bc:31:2e:3b:0d:8c:3d:97:
b7:ce:ab:bf:67:aa:71:b0:a9:67:c0:06:b6:e7:31:
32:99:82:a5:95:c0:aa:19:c7:2c:ef:24:a3:83:01:
2f:ce:3b:0e:70:01:bb:23:64:7e:ea:e0:8f:6f:02:
59:bc:56:dc:10:c4:8b:d5:a4:ed:6b:ad:f6:14:38:
ae:1b:82:9f:32:52:42:aa:16:22:b7:92:09:d8:a8:
8f:51:f7:50:c7:41:19:e1:ec:01:b2:b7:9b:bb:0b:
d5:83:eb:63:e3:8d:4d:ba:74:8a:81:91:3e:72:70:
da:cc:80:af:14:6f:e2:0e:2e:1d:c7:ce:a6:0a:f0:
2e:66:18:f1:8a:3d:a0:72:82:47:d0:53:11:0b:04:
e7:4a:65:5d:60:03:24:98:29:9a:b8:85:3b:00:52:
af:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EA:4B:02:15:E3:76:DA:1B:1F:E3:DF:7A:97:48:C0:21:C9:E2:DD
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f6:15:0c:1f:ae:6f:d4:52:d4:13:00:34:83:39:1f:39:60:
81:e7:0b:71:fc:b8:64:a2:a3:04:5f:23:44:3f:33:0e:3d:0c:
57:a5:aa:38:b6:95:23:03:13:7a:f1:53:0d:ee:90:a6:e4:4e:
7f:5a:d0:8a:90:57:d6:c9:5b:41:3f:25:4a:ca:1b:00:9d:02:
d1:68:23:60:f3:b1:fc:c9:0e:fb:7f:5e:45:32:1a:d6:cc:26:
f9:24:58:6a:89:ed:ad:7e:8e:ce:02:d0:74:1e:7b:7a:8c:7d:
7a:da:30:e4:ba:3c:0b:e9:37:14:ff:e2:33:3f:de:39:c4:c0:
f4:08:f4:2a:90:67:70:68:a5:81:17:24:0e:01:98:7a:9f:77:
c3:49:47:d8:90:15:26:e6:b2:2f:ef:bb:69:b0:07:df:98:c3:
b5:cd:21:9f:08:16:02:c8:a1:1a:28:aa:98:06:46:72:42:7a:
d7:6e:a2:7b:f6:43:20:6c:f9:9b:f8:76:67:07:bd:6f:cc:08:
e9:f3:f6:99:35:46:ec:53:36:a6:86:1a:42:65:25:e4:78:1b:
b3:e2:f5:4d:29:c4:1a:bd:d4:92:5e:e0:ca:1e:96:03:c5:70:
69:3f:23:67:1f:4e:46:5e:8f:77:96:29:ac:80:aa:bd:58:93:
5f:64:24:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:07 2025 by rpki-client