Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: ql6RM2gRxRR8aVsqAOKgCGlPPYdZsC6lYKWZl5RIEOw=
Subject key identifier: 51:92:DA:A1:F9:DF:22:CA:3E:34:14:85:BD:D3:64:78:14:40:35:BF
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 0198D4E02633A9F4C858814A2E51AD89EF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:01:56 +0000
Manifest this update: Sat 23 Aug 2025 03:01:56 +0000
Manifest next update: Sun 24 Aug 2025 03:01:56 +0000
Files and hashes: 1: 944hLyq4lZEVAFInZE509HNE3dY.roa (hash: u1nybjv+YghCeLuvRCrpHUYvYfZKGq/DNrzwKmuq+cA=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: fqUHTjhDalrM/Tfv9XOwj5DdLhEL678PLnk7k1sbvVE=)
3: sxEbMVXxezgFHIuSSYFInfXpizE.roa (hash: ZwybRY1zu9AemOu7O2YllM3HQ5PSxj94bjs9pLEXpyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:26:33:a9:f4:c8:58:81:4a:2e:51:ad:89:ef:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Aug 23 03:01:56 2025 GMT
Not After : Aug 24 03:01:56 2025 GMT
Subject: CN=5192daa1f9df22ca3e341485bdd36478144035bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:fd:75:a2:d8:a2:05:c3:f1:b0:ca:b0:6f:
45:e6:47:f0:65:b9:8d:6b:53:b3:34:f5:33:b1:c1:
be:e9:53:0a:92:aa:4d:8f:91:a9:3f:b9:bc:ec:e3:
84:93:fb:97:b0:ab:36:96:52:72:ff:ff:ed:52:48:
3c:e6:dd:35:5f:ef:80:a3:89:e7:fb:3c:c9:d0:73:
16:2f:d0:f5:87:a3:14:e7:b0:d3:ef:01:97:99:6d:
e6:0a:14:c6:f1:ab:c2:8e:6f:3e:e6:38:cc:7e:52:
fb:cf:4d:d5:f3:66:4a:30:76:9f:0b:95:c8:07:7f:
16:e7:c5:d8:86:ec:29:64:70:12:c1:7b:a8:c1:8a:
9d:3e:23:50:cf:c0:91:0f:c7:2b:22:d4:cd:b2:d5:
7a:72:c6:24:e3:9a:00:95:d7:a1:91:eb:ab:1b:53:
15:de:95:4d:1f:11:b8:4a:d1:c4:c0:fa:de:aa:85:
85:97:89:be:91:7c:3e:bf:2b:91:93:3e:2d:ec:9b:
67:67:76:f6:30:c0:5e:03:63:3e:4d:e1:9a:3f:ac:
b6:c5:76:21:cb:b9:12:29:68:b2:2a:02:c3:d2:7b:
a8:62:98:16:0c:f4:71:f1:a1:40:d8:fb:30:de:27:
10:b3:39:c8:77:b5:57:ca:82:e0:6c:d5:10:c5:01:
9b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:92:DA:A1:F9:DF:22:CA:3E:34:14:85:BD:D3:64:78:14:40:35:BF
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:11:b9:6e:af:4e:03:1f:f5:cd:f3:d4:24:b8:c5:e7:98:63:
cc:9d:12:db:b7:53:ec:67:37:e8:ec:af:08:85:45:25:65:9d:
a3:d4:b7:1e:cb:2b:ab:6d:80:5f:b2:c5:16:8a:73:ab:69:5a:
7f:aa:9a:16:0e:cf:4a:21:ee:0b:93:e6:68:4d:6b:f0:6d:58:
7e:0f:de:41:ca:34:aa:92:e9:17:cd:c5:5d:10:65:04:21:50:
ae:92:c1:92:8b:0c:c2:20:a4:27:b6:be:2e:f4:83:bc:25:59:
98:8c:d1:31:3a:20:5a:e1:1d:6f:b2:f9:4f:57:a7:a5:2b:d0:
b0:fa:2a:71:7a:bd:c1:4f:22:ab:0b:02:99:4a:c7:e0:04:7a:
40:29:da:af:87:fa:85:34:d8:24:84:9f:74:61:dd:11:56:13:
bc:3f:5f:9a:fe:b7:86:23:27:56:46:f8:ec:62:b8:ee:f0:6d:
e8:0d:8f:6f:68:52:ae:79:2b:78:b5:48:41:4a:80:a7:96:4d:
49:a8:23:74:05:9b:21:a4:8b:55:b2:16:f4:78:ac:d1:c5:7f:
64:ee:d2:34:88:ad:24:24:65:4b:55:8b:64:6d:8a:48:db:6c:
ed:4e:36:95:68:2d:7d:b4:d3:ae:9d:29:f2:f1:6c:b6:ab:d8:
ad:b5:7b:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4CYzqfTIWIFKLlGtie8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYTI0OWVhZGViMmE5MjhmZTBjMmU3NWM5MTgyNDhiNWEx
YTI4YjkwHhcNMjUwODIzMDMwMTU2WhcNMjUwODI0MDMwMTU2WjAzMTEwLwYDVQQD
Eyg1MTkyZGFhMWY5ZGYyMmNhM2UzNDE0ODViZGQzNjQ3ODE0NDAzNWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkn9daLYogXD8bDKsG9F5kfwZbmN
a1OzNPUzscG+6VMKkqpNj5GpP7m87OOEk/uXsKs2llJy///tUkg85t01X++Ao4nn
+zzJ0HMWL9D1h6MU57DT7wGXmW3mChTG8avCjm8+5jjMflL7z03V82ZKMHafC5XI
B38W58XYhuwpZHASwXuowYqdPiNQz8CRD8crItTNstV6csYk45oAldehkeurG1MV
3pVNHxG4StHEwPreqoWFl4m+kXw+vyuRkz4t7JtnZ3b2MMBeA2M+TeGaP6y2xXYh
y7kSKWiyKgLD0nuoYpgWDPRx8aFA2Psw3icQsznId7VXyoLgbNUQxQGbSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGS2qH53yLKPjQUhb3TZHgUQDW/MB8GA1UdIwQY
MBaAFECiSeresqko/gwudckYJItaGii5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAt
ODMzMGU3ZTMyZTE5LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAtODMzMGU3ZTMyZTE5
LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexG5bq9O
Ax/1zfPUJLjF55hjzJ0S27dT7Gc36OyvCIVFJWWdo9S3Hssrq22AX7LFFopzq2la
f6qaFg7PSiHuC5PmaE1r8G1Yfg/eQco0qpLpF83FXRBlBCFQrpLBkosMwiCkJ7a+
LvSDvCVZmIzRMTogWuEdb7L5T1enpSvQsPoqcXq9wU8iqwsCmUrH4AR6QCnar4f6
hTTYJISfdGHdEVYTvD9fmv63hiMnVkb47GK47vBt6A2Pb2hSrnkreLVIQUqAp5ZN
SagjdAWbIaSLVbIW9His0cV/ZO7SNIitJCRlS1WLZG2KSNts7U42lWgtfbTTrp0p
8vFstqvYrbV7yw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:52 2025 by rpki-client