Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: fUq/rghJ1thAoub6U0dtFn5Gn4AgvhMTxOiWWrxTKKo=
Subject key identifier: 65:4F:01:9A:E1:DF:86:8C:FD:E8:59:78:6C:D4:23:40:42:5F:FC:1B
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 0198D473CF58708D489895A8F925856CCC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:03:36 +0000
Manifest this update: Sat 23 Aug 2025 01:03:36 +0000
Manifest next update: Sun 24 Aug 2025 01:03:36 +0000
Files and hashes: 1: DxU6Tj_sH9i6nYuhG62Zr3rykbI.roa (hash: m10v06RZq7QrBohirh1LPManMxgfja3ZfQ1j9hj5ZLI=)
2: kZG65yjYhzWbyjVxS5nDngYTn7o.roa (hash: NxEcj6vOgWy2wxB1Tg6EXlBHbNa6oBK7xEqZZsDpfQk=)
3: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: x5z6sCYLo2MzpQQOELSshhysftM/+9Cj1go6mLug1VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:cf:58:70:8d:48:98:95:a8:f9:25:85:6c:cc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Aug 23 01:03:36 2025 GMT
Not After : Aug 24 01:03:36 2025 GMT
Subject: CN=654f019ae1df868cfde859786cd42340425ffc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:15:41:45:61:71:b2:df:9a:76:f8:9a:e5:
55:21:43:9f:07:44:f3:03:18:47:3b:d5:52:b4:c6:
37:59:0d:56:b4:5f:11:a4:d7:af:6a:55:2e:ae:e3:
dd:b0:e8:56:76:5e:56:aa:bb:07:ae:2d:46:18:70:
be:cd:76:3a:f2:6e:ee:fc:46:3b:fe:1a:18:bc:d6:
e2:4d:dc:5b:bc:38:53:d4:61:dc:7b:5a:52:29:b7:
3d:d7:29:50:0d:e6:b9:0b:2b:62:20:8d:24:87:3c:
51:b2:d4:ab:a4:5b:e1:56:ec:33:18:77:21:ff:64:
92:94:31:16:42:5a:6b:c5:95:0e:65:86:ce:22:3b:
94:86:6c:9e:e8:b8:9e:fb:eb:77:df:e5:8c:dc:a6:
80:12:f7:87:1f:d3:a5:eb:e4:ff:28:2c:35:b2:88:
63:fe:41:25:af:65:44:77:a5:c3:49:0f:7e:8c:36:
3e:68:f3:ed:d4:14:1e:38:83:91:10:7c:6a:cb:6b:
a9:59:6d:83:b3:28:da:50:78:88:22:13:3c:9c:84:
38:1f:13:06:40:16:6d:ba:38:10:a2:83:76:5d:85:
a6:a9:b0:28:6d:41:0b:75:8c:c0:18:26:73:75:5d:
1f:cf:63:26:42:79:34:da:70:61:21:f3:ed:fa:b6:
63:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4F:01:9A:E1:DF:86:8C:FD:E8:59:78:6C:D4:23:40:42:5F:FC:1B
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:99:46:6d:59:86:7b:ed:99:24:bf:da:33:66:2c:fa:24:dd:
e5:a3:52:f0:7a:84:48:de:4b:4e:88:b2:38:c7:17:9e:0f:e7:
4e:77:d8:df:f2:a6:a4:d5:60:77:e0:37:6f:ec:5e:bd:e9:16:
3d:59:d1:f1:25:40:4c:5b:f0:b3:fd:c7:ad:8a:ff:b7:e4:0f:
03:66:1c:a9:60:d3:7d:f9:f7:af:03:bb:e9:c0:b2:12:f8:5a:
c9:ec:13:68:57:04:96:5d:22:25:42:84:c6:e3:70:08:c0:5c:
e1:e0:53:db:b0:15:fe:4c:c5:6d:bc:8d:25:05:4b:91:bb:49:
48:f7:b9:cb:99:a7:6f:ee:3b:79:0d:9d:01:43:97:ce:42:30:
31:9e:8a:05:6e:a3:ba:17:e4:47:98:f2:37:63:28:7f:f0:b6:
e0:0c:e6:cc:13:a4:8f:c3:b2:52:d4:7c:4a:d4:bb:eb:88:c7:
49:db:98:7c:c7:26:9f:d3:c5:d3:a1:8f:d3:31:1a:28:22:28:
85:b0:52:2b:3b:20:d7:ca:a7:1b:48:9a:c5:23:1d:62:5b:ea:
e9:a9:31:43:48:02:4d:7a:a4:3c:af:5c:21:11:93:ad:55:01:
91:ec:95:38:dc:60:7a:14:7e:2a:9d:93:9d:ee:7d:64:bc:52:
b0:84:00:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc89YcI1ImJWo+SWFbMx2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzVmOTA3ZWM3ZGJmOWM2NWI4MTVhYTNkNzIwMmI2ZGZh
ZTMxNDgwHhcNMjUwODIzMDEwMzM2WhcNMjUwODI0MDEwMzM2WjAzMTEwLwYDVQQD
Eyg2NTRmMDE5YWUxZGY4NjhjZmRlODU5Nzg2Y2Q0MjM0MDQyNWZmYzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4MVQUVhcbLfmnb4muVVIUOfB0Tz
AxhHO9VStMY3WQ1WtF8RpNevalUuruPdsOhWdl5WqrsHri1GGHC+zXY68m7u/EY7
/hoYvNbiTdxbvDhT1GHce1pSKbc91ylQDea5CytiII0khzxRstSrpFvhVuwzGHch
/2SSlDEWQlprxZUOZYbOIjuUhmye6Lie++t33+WM3KaAEveHH9Ol6+T/KCw1sohj
/kElr2VEd6XDSQ9+jDY+aPPt1BQeOIOREHxqy2upWW2DsyjaUHiIIhM8nIQ4HxMG
QBZtujgQooN2XYWmqbAobUELdYzAGCZzdV0fz2MmQnk02nBhIfPt+rZj9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVPAZrh34aM/ehZeGzUI0BCX/wbMB8GA1UdIwQY
MBaAFKo1+Qfsfb+cZbgVqj1yArbfrjFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMWM1MGUtYWYyNy00YTYyLWFlMjMt
YjZmMWNmYWE2OTg1LzEvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iMWM1MGUtYWYyNy00YTYyLWFlMjMtYjZmMWNmYWE2OTg1
LzEvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZlGbVmG
e+2ZJL/aM2Ys+iTd5aNS8HqESN5LToiyOMcXng/nTnfY3/KmpNVgd+A3b+xevekW
PVnR8SVATFvws/3HrYr/t+QPA2YcqWDTffn3rwO76cCyEvhayewTaFcEll0iJUKE
xuNwCMBc4eBT27AV/kzFbbyNJQVLkbtJSPe5y5mnb+47eQ2dAUOXzkIwMZ6KBW6j
uhfkR5jyN2Mof/C24AzmzBOkj8OyUtR8StS764jHSduYfMcmn9PF06GP0zEaKCIo
hbBSKzsg18qnG0iaxSMdYlvq6akxQ0gCTXqkPK9cIRGTrVUBkeyVONxgehR+Kp2T
ne59ZLxSsIQADQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:34 2025 by rpki-client