Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
File: qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft (raw, json)
Hash identifier: EoC99hCla+OblrdIN98GsMsojindA7ByIsfxck3Xyu0=
Subject key identifier: 4D:87:4C:CE:8D:D0:8A:13:40:A6:98:65:0F:3A:08:B2:7B:D1:F1:9B
Authority key identifier: AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
Certificate issuer: /CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Certificate serial: 0198D66014F9E8561EF8498F9E934E1F5D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:01:17 +0000
Manifest this update: Sat 23 Aug 2025 10:01:17 +0000
Manifest next update: Sun 24 Aug 2025 10:01:17 +0000
Files and hashes: 1: Ksr0uLkRk2xgBxHqi3sQnitvzew.roa (hash: WSC+ZUBgflwaiPFD1qCd7YKaOxvqrLSTyitqpFIOSP4=)
2: qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl (hash: /ZGEebtPMHX3LBo44pF12OlLwzmXfWSp2xvcrm8taQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:14:f9:e8:56:1e:f8:49:8f:9e:93:4e:1f:5d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Validity
Not Before: Aug 23 10:01:17 2025 GMT
Not After : Aug 24 10:01:17 2025 GMT
Subject: CN=4d874cce8dd08a1340a698650f3a08b27bd1f19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:8b:20:29:56:99:93:75:bd:ce:96:24:24:
ee:26:f1:c3:72:5f:d3:5c:4c:a3:33:73:3c:3a:96:
ae:88:96:99:79:69:72:40:30:a6:32:8d:f1:ac:f7:
4b:a7:d8:a5:6c:4b:52:c7:bc:fb:03:f8:15:6b:9d:
e9:8b:84:99:96:e6:e2:fa:17:23:a9:86:9d:60:13:
de:95:25:51:7b:38:1a:a3:00:8b:ba:84:7f:33:4f:
24:15:8d:3f:5b:8d:a8:f3:2c:15:58:1d:d2:ed:a4:
d3:77:3e:27:78:76:20:53:87:ad:c8:e7:36:a7:c3:
d6:78:7a:7c:b5:60:7b:4a:3f:33:e1:4f:e4:64:6d:
36:00:08:97:6f:93:94:df:da:a9:3e:e8:5d:f4:ec:
79:ca:a0:e3:5d:e7:34:89:5c:22:b4:30:9d:83:95:
ad:d7:e6:e1:fd:38:66:d0:9a:6f:73:b1:94:00:e9:
88:3f:81:ae:8b:cd:71:8a:ce:10:25:a5:5a:bf:e6:
45:d5:8b:e8:de:75:40:24:a4:5d:15:ea:4b:e1:64:
a1:29:d3:ef:75:8f:f1:d0:dd:78:7a:84:6d:62:0a:
d1:90:1e:a4:ae:a4:0d:13:f1:d7:cc:97:63:9c:1b:
30:bb:08:c6:6c:76:0a:9b:1a:13:49:1a:75:0c:b2:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:87:4C:CE:8D:D0:8A:13:40:A6:98:65:0F:3A:08:B2:7B:D1:F1:9B
X509v3 Authority Key Identifier:
keyid:AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:aa:5d:43:5c:88:76:b5:0a:47:c4:9b:2d:1a:ce:44:01:8c:
d5:72:3b:a1:11:e3:27:0f:5b:80:69:ff:85:d2:fb:90:b4:61:
40:33:7c:11:a7:2f:6e:dd:df:7f:46:7e:f1:f1:d4:78:a7:f8:
51:6a:02:91:28:63:26:7b:bf:ae:c8:e1:80:f9:ef:35:a9:4e:
cf:bb:fb:df:d0:a8:5b:46:1c:65:f3:df:b9:54:a1:ef:35:ba:
44:07:98:d4:2b:d8:3c:4b:a3:75:83:cb:b9:0d:8d:8d:87:81:
f2:3f:6c:f2:fb:00:80:ee:21:4d:2f:d6:6a:39:86:bb:77:1e:
1f:85:b6:82:69:65:a8:31:1b:a4:ae:db:c7:94:e2:61:10:12:
c9:99:2d:67:79:fd:cd:bf:54:02:16:d8:d9:e4:eb:8a:77:9c:
2a:e5:be:5f:83:ce:c1:96:de:ee:80:68:af:cd:af:aa:60:b3:
37:66:f7:e3:0b:b6:d7:2d:dd:ee:6f:bd:7a:fb:55:da:f8:f6:
4b:d2:04:83:37:29:4c:25:40:42:0d:b5:f4:4c:71:50:41:48:
3d:6e:87:0b:33:67:27:b0:8d:6b:bc:1a:1d:8a:5c:42:89:10:
0a:03:71:b7:84:cc:85:73:b3:aa:80:f1:d5:e4:a9:51:c4:38:
a8:d9:c2:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYBT56FYe+EmPnpNOH11rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDRlMmU4MTJmMDlhYzRmZTJiNDdlNDI2OWNlMWEwMjAy
MWNhMGUwHhcNMjUwODIzMTAwMTE3WhcNMjUwODI0MTAwMTE3WjAzMTEwLwYDVQQD
Eyg0ZDg3NGNjZThkZDA4YTEzNDBhNjk4NjUwZjNhMDhiMjdiZDFmMTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk6LIClWmZN1vc6WJCTuJvHDcl/T
XEyjM3M8OpauiJaZeWlyQDCmMo3xrPdLp9ilbEtSx7z7A/gVa53pi4SZlubi+hcj
qYadYBPelSVRezgaowCLuoR/M08kFY0/W42o8ywVWB3S7aTTdz4neHYgU4etyOc2
p8PWeHp8tWB7Sj8z4U/kZG02AAiXb5OU39qpPuhd9Ox5yqDjXec0iVwitDCdg5Wt
1+bh/Thm0Jpvc7GUAOmIP4Gui81xis4QJaVav+ZF1Yvo3nVAJKRdFepL4WShKdPv
dY/x0N14eoRtYgrRkB6krqQNE/HXzJdjnBswuwjGbHYKmxoTSRp1DLJjxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2HTM6N0IoTQKaYZQ86CLJ70fGbMB8GA1UdIwQY
MBaAFKpE4ugS8JrE/itH5Cac4aAgIcoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYTZhMjQtODA3NS00N2RlLWIxZTYt
ODY2NDBmY2EzM2JmLzEvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lYTZhMjQtODA3NS00N2RlLWIxZTYtODY2NDBmY2EzM2Jm
LzEvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAapdQ1yI
drUKR8SbLRrORAGM1XI7oRHjJw9bgGn/hdL7kLRhQDN8Eacvbt3ff0Z+8fHUeKf4
UWoCkShjJnu/rsjhgPnvNalOz7v739CoW0YcZfPfuVSh7zW6RAeY1CvYPEujdYPL
uQ2NjYeB8j9s8vsAgO4hTS/WajmGu3ceH4W2gmllqDEbpK7bx5TiYRASyZktZ3n9
zb9UAhbY2eTrinecKuW+X4POwZbe7oBor82vqmCzN2b34wu21y3d7m+9evtV2vj2
S9IEgzcpTCVAQg219ExxUEFIPW6HCzNnJ7CNa7waHYpcQokQCgNxt4TMhXOzqoDx
1eSpUcQ4qNnCCA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:05:08 2025 by rpki-client