Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File: qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier: dbzm/3h5tF2PEdoK2APSnq2r07qXKAA3l9/7ie3O0ls=
Subject key identifier: 85:56:0F:E3:9B:C6:D7:1F:38:CF:10:51:8D:12:FD:A9:BE:BA:6D:72
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 01988AA0A42394410CC2B3C3D5FB77E2C5B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 17:00:40 +0000
Manifest this update: Fri 08 Aug 2025 17:00:40 +0000
Manifest next update: Sat 09 Aug 2025 17:00:40 +0000
Files and hashes: 1: 6IkTOlXjuiMiUAcYz6JmNLyjzkI.roa (hash: lvYkGWBMeYPfRVhHecKPB+lCXAgyiJ169VcA0wekGsU=)
2: e4TuQp4c2N02mdWdlxAx2GM5rFg.roa (hash: TkgW2WEclpl44YPmskP1q4vEinXMPrmbVI0ndJ9d/ec=)
3: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: 4Y6wv3dX+TYbAO28PizlyNW21mh3xMeeME3ZKIQ2ycY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:a4:23:94:41:0c:c2:b3:c3:d5:fb:77:e2:c5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: Aug 8 17:00:40 2025 GMT
Not After : Aug 9 17:00:40 2025 GMT
Subject: CN=85560fe39bc6d71f38cf10518d12fda9beba6d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:14:01:5f:63:30:f9:82:91:06:6d:d0:10:
87:74:26:42:e6:ec:d9:77:f5:9a:98:43:39:ff:22:
d6:59:17:39:b8:50:16:04:43:a5:c0:89:84:56:cf:
72:e8:1f:7a:75:28:82:c3:5b:f2:74:03:52:f1:75:
91:7a:3b:ea:f0:26:1a:04:af:ee:24:28:91:ce:ee:
ec:76:de:79:56:f2:46:f1:d9:26:48:6d:4a:e8:be:
ab:e2:eb:3c:c9:93:31:30:dd:d8:d6:23:b4:f7:8f:
12:6a:0f:bb:e7:fa:c1:ca:c5:45:09:a2:fd:22:9e:
2e:b8:91:ac:13:1c:94:46:41:9a:eb:03:43:e9:f9:
23:84:36:b9:e2:b5:77:b8:46:74:fb:f7:8c:20:5f:
88:de:75:71:78:ad:25:87:fa:ce:da:c5:c3:d6:cf:
4a:bc:b6:78:1d:b4:5c:b7:75:13:53:e3:2e:48:96:
3f:64:6c:9a:03:cb:f1:a3:41:7a:5c:cf:0e:49:66:
83:aa:f5:50:01:6d:13:37:4d:40:ac:07:31:3c:c6:
6b:89:7f:7b:bf:44:6d:89:ff:d5:93:6b:93:54:02:
24:55:8a:da:0e:09:48:77:1e:40:cf:e8:6b:7f:63:
a6:9f:8b:bd:d1:a7:05:5c:af:4e:14:77:a2:4e:d6:
ef:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:56:0F:E3:9B:C6:D7:1F:38:CF:10:51:8D:12:FD:A9:BE:BA:6D:72
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:3f:9b:ad:a1:6b:68:10:db:59:d9:d5:88:67:a8:ee:fc:69:
49:78:ab:ff:3b:ce:19:a5:35:a6:f2:1b:ab:94:6a:7f:cd:88:
e0:76:d0:f6:41:61:b6:0c:63:a0:2d:f9:ae:e4:ac:4f:d4:15:
d7:fa:9c:be:06:e3:b1:e4:11:fd:1d:80:6f:0c:f5:6d:28:e0:
95:ab:56:2f:8e:4f:a6:cc:1c:79:fb:b4:3b:58:df:2b:82:d0:
7d:ec:67:21:b9:76:13:47:f8:f6:83:68:75:b0:11:13:8c:ef:
2f:32:36:ae:c0:94:df:e9:30:59:68:be:c7:1b:95:91:20:98:
25:19:ae:3c:51:d5:52:e1:23:9f:96:49:1c:8c:38:15:8a:1c:
93:84:3e:9b:64:b7:42:14:04:e3:55:b7:08:b7:01:1c:1c:5f:
09:2e:3f:c4:4a:9f:f6:fb:cc:cc:00:a3:77:eb:6d:0c:f5:bd:
05:96:a7:e7:64:05:84:77:01:84:e7:a3:b6:f7:32:19:10:c1:
43:e9:65:44:67:ec:e4:1f:c9:ef:11:18:09:c4:76:d7:0c:05:
a2:14:14:fe:21:05:1c:65:89:c2:bf:cd:f9:de:5d:34:ab:c4:
dc:b3:92:3d:f7:f4:e4:62:ed:ed:e9:3a:3d:87:a9:cf:11:bc:
ff:48:7e:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKoKQjlEEMwrPD1ft34sWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhM2FlZDkxZjI5YjJjYzdkM2UwNWYyNDBkOTkxMzc1ODFk
OWI1YjMwHhcNMjUwODA4MTcwMDQwWhcNMjUwODA5MTcwMDQwWjAzMTEwLwYDVQQD
Eyg4NTU2MGZlMzliYzZkNzFmMzhjZjEwNTE4ZDEyZmRhOWJlYmE2ZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoEUAV9jMPmCkQZt0BCHdCZC5uzZ
d/WamEM5/yLWWRc5uFAWBEOlwImEVs9y6B96dSiCw1vydANS8XWRejvq8CYaBK/u
JCiRzu7sdt55VvJG8dkmSG1K6L6r4us8yZMxMN3Y1iO0948Sag+75/rBysVFCaL9
Ip4uuJGsExyURkGa6wND6fkjhDa54rV3uEZ0+/eMIF+I3nVxeK0lh/rO2sXD1s9K
vLZ4HbRct3UTU+MuSJY/ZGyaA8vxo0F6XM8OSWaDqvVQAW0TN01ArAcxPMZriX97
v0Rtif/Vk2uTVAIkVYraDglIdx5Az+hrf2Omn4u90acFXK9OFHeiTtbvIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVWD+ObxtcfOM8QUY0S/am+um1yMB8GA1UdIwQY
MBaAFKo67ZHymyzH0+BfJA2ZE3WB2bWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpydGtmS2JMTWZUNEY4a0Raa1RkWUhadGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84ZTBmNjMtZWY3YS00NjYyLWIwNDYt
MDRlMWViMmE5MzI4LzEvcWpydGtmS2JMTWZUNEY4a0Raa1RkWUhadGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84ZTBmNjMtZWY3YS00NjYyLWIwNDYtMDRlMWViMmE5MzI4
LzEvcWpydGtmS2JMTWZUNEY4a0Raa1RkWUhadGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtj+braFr
aBDbWdnViGeo7vxpSXir/zvOGaU1pvIbq5Rqf82I4HbQ9kFhtgxjoC35ruSsT9QV
1/qcvgbjseQR/R2Abwz1bSjglatWL45Ppswcefu0O1jfK4LQfexnIbl2E0f49oNo
dbARE4zvLzI2rsCU3+kwWWi+xxuVkSCYJRmuPFHVUuEjn5ZJHIw4FYock4Q+m2S3
QhQE41W3CLcBHBxfCS4/xEqf9vvMzACjd+ttDPW9BZan52QFhHcBhOejtvcyGRDB
Q+llRGfs5B/J7xEYCcR21wwFohQU/iEFHGWJwr/N+d5dNKvE3LOSPff05GLt7ek6
PYepzxG8/0h+aA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:47:04 2025 by rpki-client