Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: Btsf1F1TVASt+g0pKqZmmVr14HUPz5Kyi4gvaNBtPVM=
Subject key identifier: 4B:3C:39:A7:CC:F9:94:5A:87:56:72:83:F8:70:AF:63:51:7E:33:53
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 0198D583C47C73BDD311F3A4AA00C9E0922F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 06:00:39 +0000
Manifest this update: Sat 23 Aug 2025 06:00:39 +0000
Manifest next update: Sun 24 Aug 2025 06:00:39 +0000
Files and hashes: 1: CTedhf-UDhDCo0gKWN1eFB95iME.roa (hash: Vr6y6sdI8B/BSyNE6gcBQftZW1dE4fIdtomKsz3LLNE=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: AEQS8nmIgNK8iBUa/RgqtRXihcJZIx53yLcK8kTuJWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c4:7c:73:bd:d3:11:f3:a4:aa:00:c9:e0:92:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Aug 23 06:00:39 2025 GMT
Not After : Aug 24 06:00:39 2025 GMT
Subject: CN=4b3c39a7ccf9945a87567283f870af63517e3353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b5:5e:c6:79:e8:13:6a:d5:bb:0e:c3:fa:67:
45:2a:46:8f:59:dc:93:41:4e:20:01:0d:18:04:5a:
29:83:0c:6f:0c:4a:04:43:4a:0a:4f:0b:ae:c6:56:
d2:93:45:b1:54:a6:f8:8d:f6:b1:e7:d5:83:75:33:
1c:da:61:6c:97:c0:ef:04:ba:ef:bf:2b:7b:6b:09:
ac:2d:a9:84:cf:cf:a1:a8:d3:68:73:67:77:f2:1b:
c1:63:b0:b5:34:d5:e5:eb:63:5e:c2:b5:5b:4d:da:
e6:89:de:b1:da:c4:14:a8:77:88:13:82:78:6d:5c:
1b:37:ee:2c:c7:7d:f1:5b:52:90:aa:d3:85:2b:0d:
2c:f4:06:20:e9:1c:f3:c8:1a:e4:01:bb:b0:df:5d:
6c:53:e5:31:18:9b:93:39:ba:27:2f:13:68:77:f2:
2c:d1:22:33:c9:81:15:39:2e:aa:40:ec:8a:22:76:
49:5c:88:53:c8:05:77:9d:b7:62:c8:ae:5c:17:7f:
54:01:b8:2d:75:67:27:1d:23:e7:8d:ee:bb:78:f3:
77:7a:b8:80:cd:fc:05:67:54:fd:4d:1a:76:b6:cc:
7d:78:d5:70:35:c4:73:4a:e8:53:df:d2:08:a9:5a:
f2:4b:44:e0:2a:bd:a6:4d:d0:75:75:39:e4:34:e4:
47:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3C:39:A7:CC:F9:94:5A:87:56:72:83:F8:70:AF:63:51:7E:33:53
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c6:32:71:1b:c9:98:23:f7:1f:31:1c:fb:58:34:31:7d:0b:
b0:41:cc:1d:94:89:d4:5b:f0:d1:0d:da:c4:76:8c:6d:b7:54:
9a:8b:b1:7f:8e:20:1d:d0:ed:cd:32:81:ca:cc:a9:25:b1:aa:
cf:16:2c:fe:8b:c8:f2:43:fb:0d:32:f6:92:b6:6b:3b:d4:ac:
0c:b9:8c:d2:4c:6b:a2:27:51:5e:b9:a1:17:3c:30:3c:32:3d:
b9:b5:d1:e7:ac:c6:ce:e4:7b:e4:e4:9d:1d:21:da:b9:8a:14:
71:25:ad:7b:d3:a8:7a:7c:f4:73:33:89:ef:22:1c:94:c3:e5:
fd:88:a9:be:72:d4:d1:3f:5e:67:a6:25:72:8e:2a:90:47:55:
1f:ed:f3:34:a9:9e:1b:40:4d:c9:ea:90:b6:44:12:cf:e8:74:
26:99:2e:91:69:8e:75:b6:d3:00:df:e8:74:7f:c1:29:e4:91:
e9:0d:86:5e:b7:77:80:b9:1b:50:1f:ed:2f:2c:21:0a:60:f6:
53:d8:08:73:88:98:d1:9c:24:46:cb:85:e4:43:a1:9f:86:99:
04:d5:ef:ca:28:15:0e:6f:85:84:82:17:a5:55:e3:0a:2e:17:
50:ef:2d:33:e5:bc:29:9f:d1:a9:f0:b4:03:d7:e8:ed:6d:a2:
21:cf:fb:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg8R8c73TEfOkqgDJ4JIvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YThlNDRlNTczYzUzYzcxOTIzMTJmY2M3MjE1MGQyZGUz
NzdkNmQwHhcNMjUwODIzMDYwMDM5WhcNMjUwODI0MDYwMDM5WjAzMTEwLwYDVQQD
Eyg0YjNjMzlhN2NjZjk5NDVhODc1NjcyODNmODcwYWY2MzUxN2UzMzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rVexnnoE2rVuw7D+mdFKkaPWdyT
QU4gAQ0YBFopgwxvDEoEQ0oKTwuuxlbSk0WxVKb4jfax59WDdTMc2mFsl8DvBLrv
vyt7awmsLamEz8+hqNNoc2d38hvBY7C1NNXl62NewrVbTdrmid6x2sQUqHeIE4J4
bVwbN+4sx33xW1KQqtOFKw0s9AYg6RzzyBrkAbuw311sU+UxGJuTObonLxNod/Is
0SIzyYEVOS6qQOyKInZJXIhTyAV3nbdiyK5cF39UAbgtdWcnHSPnje67ePN3eriA
zfwFZ1T9TRp2tsx9eNVwNcRzSuhT39IIqVryS0TgKr2mTdB1dTnkNORHcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEs8OafM+ZRah1Zyg/hwr2NRfjNTMB8GA1UdIwQY
MBaAFKmo5E5XPFPHGSMS/MchUNLeN31tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYt
MTk1MTM0NWNlYTMzLzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYtMTk1MTM0NWNlYTMz
LzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMYycRvJ
mCP3HzEc+1g0MX0LsEHMHZSJ1Fvw0Q3axHaMbbdUmouxf44gHdDtzTKBysypJbGq
zxYs/ovI8kP7DTL2krZrO9SsDLmM0kxroidRXrmhFzwwPDI9ubXR56zGzuR75OSd
HSHauYoUcSWte9Ooenz0czOJ7yIclMPl/YipvnLU0T9eZ6Ylco4qkEdVH+3zNKme
G0BNyeqQtkQSz+h0JpkukWmOdbbTAN/odH/BKeSR6Q2GXrd3gLkbUB/tLywhCmD2
U9gIc4iY0ZwkRsuF5EOhn4aZBNXvyigVDm+FhIIXpVXjCi4XUO8tM+W8KZ/RqfC0
A9fo7W2iIc/7VQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:13 2025 by rpki-client