Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
File: qklDGDthG-Ogd1OCUJSQBIsK1zg.mft (raw, json)
Hash identifier: bSuuClWXKCxLEdSQszHeYoKIafc6vuSdj0Mkac1ysJE=
Subject key identifier: AD:03:ED:64:70:07:DC:7E:EA:A0:8E:E3:1A:9D:2F:93:30:DB:80:DA
Authority key identifier: AA:49:43:18:3B:61:1B:E3:A0:77:53:82:50:94:90:04:8B:0A:D7:38
Certificate issuer: /CN=aa4943183b611be3a0775382509490048b0ad738
Certificate serial: 0198D7736FC988673E4C0DBB82DB64F86929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 15:02:03 +0000
Manifest this update: Sat 23 Aug 2025 15:02:03 +0000
Manifest next update: Sun 24 Aug 2025 15:02:03 +0000
Files and hashes: 1: _b9uzDBnaBhrr4RiKYd-HrjhIyY.roa (hash: zuVo5YCjE6oxIWEPlMV6dA4fTWapSfHiFlgPsUG/qhk=)
2: qklDGDthG-Ogd1OCUJSQBIsK1zg.crl (hash: E8yYVo8+gR9O9nlIpoxUxdqA+c3g0SOEn7i4LRkMx3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:6f:c9:88:67:3e:4c:0d:bb:82:db:64:f8:69:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4943183b611be3a0775382509490048b0ad738
Validity
Not Before: Aug 23 15:02:03 2025 GMT
Not After : Aug 24 15:02:03 2025 GMT
Subject: CN=ad03ed647007dc7eeaa08ee31a9d2f9330db80da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:f4:24:7a:df:eb:6b:7a:82:15:9b:05:5d:
37:93:f6:61:6a:0a:16:e0:30:2a:cf:98:bc:ec:32:
67:d7:76:26:8e:0f:c8:56:c4:07:d8:6e:e1:8e:14:
5c:75:64:15:31:00:81:a9:ee:a5:b2:34:69:e7:b0:
bf:51:70:35:91:0d:ea:c9:86:6a:63:38:c5:bf:c8:
ac:2a:4b:f4:60:89:a6:cc:ce:ce:b1:d1:dc:cb:f9:
44:1d:01:48:52:8b:26:ab:83:5b:33:d0:c7:a9:d9:
77:b3:e4:5c:c2:aa:37:f0:16:29:c4:66:31:fc:82:
14:17:0a:87:38:51:ac:6c:6d:64:89:18:a1:de:71:
a6:76:2c:9a:38:f9:e1:2d:9e:33:5f:cf:fb:3b:35:
1d:2e:1b:bf:ca:42:4c:84:e7:1a:c6:88:24:50:a3:
74:24:f8:d6:da:e7:b2:2f:6e:a1:47:ce:24:b4:8a:
da:4a:39:2f:19:20:3e:5a:b9:a2:68:96:11:f2:70:
ae:fe:8b:21:d0:12:79:ac:e9:d3:57:fa:18:c9:8d:
27:27:39:2d:54:3b:f8:2b:d6:39:76:77:d2:62:5b:
31:6e:fc:0e:a0:ee:97:d9:5f:08:f1:b8:02:91:8a:
d8:8c:46:e0:94:d6:3d:96:e0:36:fc:82:b6:38:e4:
7f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:03:ED:64:70:07:DC:7E:EA:A0:8E:E3:1A:9D:2F:93:30:DB:80:DA
X509v3 Authority Key Identifier:
keyid:AA:49:43:18:3B:61:1B:E3:A0:77:53:82:50:94:90:04:8B:0A:D7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:88:48:22:77:1a:ea:b8:cb:e9:52:56:57:50:fe:97:95:12:
86:7f:9d:c1:a2:d8:f8:6e:5b:55:e6:5b:d7:32:20:04:d2:bd:
ca:b2:39:37:69:5b:ab:89:32:12:90:55:f2:ca:d4:f1:15:b2:
3b:20:33:03:01:b4:15:d7:61:c0:d5:4a:ad:c2:36:ea:19:66:
c4:a2:a6:b1:fd:09:14:b6:f5:b1:7d:a0:01:d4:8b:36:90:99:
1b:e1:16:ba:ce:d5:2b:33:ac:a7:45:db:1a:1e:b3:a7:ff:62:
05:b2:b5:1d:3d:98:6c:82:06:91:43:b3:38:a5:1b:04:be:6b:
a3:84:e1:b5:45:33:5c:53:fa:02:44:24:b8:2d:79:18:b1:d6:
de:dd:b6:8c:00:5f:4b:13:4f:b8:8b:54:11:1e:60:b6:45:41:
56:f3:0b:86:a2:cd:eb:dd:56:6f:92:4d:7f:00:e2:9f:d8:04:
13:f9:ad:d6:f4:e7:68:a7:ca:93:13:6c:a5:af:63:aa:0e:9b:
28:17:e5:43:94:c3:62:8e:2f:f4:c0:ef:f3:34:d4:2e:65:34:
cd:82:ee:95:46:0a:f9:01:32:67:11:9b:74:1d:0e:6c:34:75:
7f:be:27:42:ba:88:aa:3e:f8:3b:51:0a:d8:2c:f7:07:7f:ae:
de:1c:49:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXc2/JiGc+TA27gttk+GkpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDk0MzE4M2I2MTFiZTNhMDc3NTM4MjUwOTQ5MDA0OGIw
YWQ3MzgwHhcNMjUwODIzMTUwMjAzWhcNMjUwODI0MTUwMjAzWjAzMTEwLwYDVQQD
EyhhZDAzZWQ2NDcwMDdkYzdlZWFhMDhlZTMxYTlkMmY5MzMwZGI4MGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y30JHrf62t6ghWbBV03k/ZhagoW
4DAqz5i87DJn13Ymjg/IVsQH2G7hjhRcdWQVMQCBqe6lsjRp57C/UXA1kQ3qyYZq
YzjFv8isKkv0YImmzM7OsdHcy/lEHQFIUosmq4NbM9DHqdl3s+Rcwqo38BYpxGYx
/IIUFwqHOFGsbG1kiRih3nGmdiyaOPnhLZ4zX8/7OzUdLhu/ykJMhOcaxogkUKN0
JPjW2ueyL26hR84ktIraSjkvGSA+WrmiaJYR8nCu/osh0BJ5rOnTV/oYyY0nJzkt
VDv4K9Y5dnfSYlsxbvwOoO6X2V8I8bgCkYrYjEbglNY9luA2/IK2OOR/WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0D7WRwB9x+6qCO4xqdL5Mw24DaMB8GA1UdIwQY
MBaAFKpJQxg7YRvjoHdTglCUkASLCtc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtsREdEdGhHLU9nZDFPQ1VKU1FCSXNLMXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YmIwMzgtMDFiYy00ZDg1LTlmMDQt
ZDIyMjc0YmJhNzEzLzEvcWtsREdEdGhHLU9nZDFPQ1VKU1FCSXNLMXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS83YmIwMzgtMDFiYy00ZDg1LTlmMDQtZDIyMjc0YmJhNzEz
LzEvcWtsREdEdGhHLU9nZDFPQ1VKU1FCSXNLMXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYhIInca
6rjL6VJWV1D+l5UShn+dwaLY+G5bVeZb1zIgBNK9yrI5N2lbq4kyEpBV8srU8RWy
OyAzAwG0FddhwNVKrcI26hlmxKKmsf0JFLb1sX2gAdSLNpCZG+EWus7VKzOsp0Xb
Gh6zp/9iBbK1HT2YbIIGkUOzOKUbBL5ro4ThtUUzXFP6AkQkuC15GLHW3t22jABf
SxNPuItUER5gtkVBVvMLhqLN691Wb5JNfwDin9gEE/mt1vTnaKfKkxNspa9jqg6b
KBflQ5TDYo4v9MDv8zTULmU0zYLulUYK+QEyZxGbdB0ObDR1f74nQrqIqj74O1EK
2Cz3B3+u3hxJhg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:55:11 2025 by rpki-client