Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File: qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier: B/Hpaf5bnDNv4oluVVUprhyD44HVnuQIlOO6NWBib6I=
Subject key identifier: 06:72:EB:0E:FD:90:01:D6:CD:49:7E:B4:9F:C1:46:94:9B:62:16:30
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 0198D40488EDB7633AC48F18E72C9CE7E9C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number: 1647
Signing time: Fri 22 Aug 2025 23:02:03 +0000
Manifest this update: Fri 22 Aug 2025 23:02:03 +0000
Manifest next update: Sat 23 Aug 2025 23:02:03 +0000
Files and hashes: 1: 6IkTOlXjuiMiUAcYz6JmNLyjzkI.roa (hash: lvYkGWBMeYPfRVhHecKPB+lCXAgyiJ169VcA0wekGsU=)
2: e4TuQp4c2N02mdWdlxAx2GM5rFg.roa (hash: TkgW2WEclpl44YPmskP1q4vEinXMPrmbVI0ndJ9d/ec=)
3: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: dGDRgqsucC7+GlCo+zehPzO/kd9FakaFBunS2a0ftpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:88:ed:b7:63:3a:c4:8f:18:e7:2c:9c:e7:e9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: Aug 22 23:02:03 2025 GMT
Not After : Aug 23 23:02:03 2025 GMT
Subject: CN=0672eb0efd9001d6cd497eb49fc146949b621630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2a:fc:59:97:57:c2:0f:b8:b1:fd:a2:ee:8c:
05:94:5f:fa:8c:b1:b7:2a:2a:c5:11:04:7c:5b:94:
57:bf:ab:8d:ad:99:31:00:f3:5e:97:87:8a:43:32:
66:21:6a:09:12:9a:15:ef:5e:f1:de:05:e7:f2:a7:
a2:19:47:c8:fa:f8:fd:2b:89:5f:9c:5a:1f:5a:ec:
24:f0:63:b6:4d:9b:cc:c3:78:a5:11:ff:12:af:1d:
89:d0:8c:16:8d:21:b3:72:db:55:c4:78:99:2b:30:
90:45:a5:46:76:20:55:31:3d:63:24:58:82:d4:39:
10:88:09:33:30:42:08:2f:d2:c2:6e:7c:1f:cb:1b:
f4:23:8a:78:2d:a8:92:fc:e0:bd:c8:38:a8:8f:94:
d1:61:be:90:f7:07:b3:5b:69:13:c3:69:a5:87:66:
e6:63:22:5e:62:33:49:64:f5:13:41:40:f7:d7:a1:
6a:f2:a1:64:09:d4:e6:97:49:de:39:bd:60:49:f2:
01:15:f4:06:97:4d:a8:6d:74:ca:93:09:22:cb:39:
f5:48:da:80:fa:74:e2:a0:0f:29:eb:a0:85:e6:f6:
a6:3a:48:7b:95:19:01:d5:b7:df:0b:bf:c9:e2:20:
7b:17:a5:03:ab:54:7b:96:ad:bf:ed:b8:be:94:a2:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:72:EB:0E:FD:90:01:D6:CD:49:7E:B4:9F:C1:46:94:9B:62:16:30
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:59:ed:36:3b:b9:29:78:c5:36:d5:d1:8d:f4:61:b3:76:ee:
b5:78:a3:b8:55:64:ef:3b:f5:1a:cf:17:54:e8:c5:bc:c7:2e:
bc:80:94:b8:8f:18:a7:f5:d9:7b:de:9b:85:f9:9e:56:a0:ae:
33:0e:47:6b:32:56:3b:ff:eb:f7:97:49:7a:a0:92:c6:6e:2e:
8a:b6:1a:85:6e:2d:54:79:24:d8:43:e6:d3:84:5a:08:6a:60:
25:29:8c:f2:cd:a1:e4:c5:4a:d8:1f:06:2b:ca:4e:9f:ee:84:
9e:6a:38:cb:76:2a:15:44:3d:29:56:30:61:1e:45:bc:3f:48:
54:e7:3f:c2:a3:56:78:68:72:2d:c1:c4:d5:1b:f2:38:ef:f6:
a4:48:fe:5e:58:27:c5:27:10:84:a4:69:f7:c9:73:a1:40:15:
bf:55:c0:24:e9:a0:0e:96:c5:37:44:1b:b5:ef:e9:1c:ea:46:
93:4c:30:69:17:8b:0f:e6:a9:4d:5f:54:b7:36:eb:51:32:71:
86:c7:49:22:ab:33:5d:23:f6:7d:de:a5:66:b7:76:83:5e:35:
3a:21:09:20:5d:fa:f1:c9:26:8e:d7:ac:26:f2:82:ef:8b:59:
7e:49:98:33:33:e8:be:0f:d6:28:45:af:07:e3:82:c3:8a:56:
da:d9:1c:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBIjtt2M6xI8Y5yyc5+nHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhM2FlZDkxZjI5YjJjYzdkM2UwNWYyNDBkOTkxMzc1ODFk
OWI1YjMwHhcNMjUwODIyMjMwMjAzWhcNMjUwODIzMjMwMjAzWjAzMTEwLwYDVQQD
EygwNjcyZWIwZWZkOTAwMWQ2Y2Q0OTdlYjQ5ZmMxNDY5NDliNjIxNjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyr8WZdXwg+4sf2i7owFlF/6jLG3
KirFEQR8W5RXv6uNrZkxAPNel4eKQzJmIWoJEpoV717x3gXn8qeiGUfI+vj9K4lf
nFofWuwk8GO2TZvMw3ilEf8Srx2J0IwWjSGzcttVxHiZKzCQRaVGdiBVMT1jJFiC
1DkQiAkzMEIIL9LCbnwfyxv0I4p4LaiS/OC9yDioj5TRYb6Q9wezW2kTw2mlh2bm
YyJeYjNJZPUTQUD316Fq8qFkCdTml0neOb1gSfIBFfQGl02obXTKkwkiyzn1SNqA
+nTioA8p66CF5vamOkh7lRkB1bffC7/J4iB7F6UDq1R7lq2/7bi+lKL7XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZy6w79kAHWzUl+tJ/BRpSbYhYwMB8GA1UdIwQY
MBaAFKo67ZHymyzH0+BfJA2ZE3WB2bWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpydGtmS2JMTWZUNEY4a0Raa1RkWUhadGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84ZTBmNjMtZWY3YS00NjYyLWIwNDYt
MDRlMWViMmE5MzI4LzEvcWpydGtmS2JMTWZUNEY4a0Raa1RkWUhadGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84ZTBmNjMtZWY3YS00NjYyLWIwNDYtMDRlMWViMmE5MzI4
LzEvcWpydGtmS2JMTWZUNEY4a0Raa1RkWUhadGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFntNju5
KXjFNtXRjfRhs3butXijuFVk7zv1Gs8XVOjFvMcuvICUuI8Yp/XZe96bhfmeVqCu
Mw5HazJWO//r95dJeqCSxm4uirYahW4tVHkk2EPm04RaCGpgJSmM8s2h5MVK2B8G
K8pOn+6Enmo4y3YqFUQ9KVYwYR5FvD9IVOc/wqNWeGhyLcHE1RvyOO/2pEj+Xlgn
xScQhKRp98lzoUAVv1XAJOmgDpbFN0Qbte/pHOpGk0wwaReLD+apTV9UtzbrUTJx
hsdJIqszXSP2fd6lZrd2g141OiEJIF368ckmjtesJvKC74tZfkmYMzPovg/WKEWv
B+OCw4pW2tkc1w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:17 2025 by rpki-client