Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: Q5MAXEDNtefrmikewKculF7Mqn749iR9UcO3U6W2X0A=
Subject key identifier: B9:8F:77:EE:CA:BD:46:B8:F0:F8:F2:0A:36:D3:A5:49:32:DD:7E:4D
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 019886565B7A74CC8DD329C9FD5E36CAA449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 1626
Signing time: Thu 07 Aug 2025 21:01:03 +0000
Manifest this update: Thu 07 Aug 2025 21:01:03 +0000
Manifest next update: Fri 08 Aug 2025 21:01:03 +0000
Files and hashes: 1: CTedhf-UDhDCo0gKWN1eFB95iME.roa (hash: Vr6y6sdI8B/BSyNE6gcBQftZW1dE4fIdtomKsz3LLNE=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: MsTjK42R6w8g6sMZskdXP+al5UxoPw2movuYOGAoFbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:56:5b:7a:74:cc:8d:d3:29:c9:fd:5e:36:ca:a4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Aug 7 21:01:03 2025 GMT
Not After : Aug 8 21:01:03 2025 GMT
Subject: CN=b98f77eecabd46b8f0f8f20a36d3a54932dd7e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:4d:51:51:54:f1:97:ea:1b:4c:c6:0d:91:
e7:4e:51:8f:94:8c:e1:7e:91:26:89:2c:09:ba:f0:
20:6a:ba:f0:0a:90:21:9b:95:40:72:d7:d5:b8:2f:
0d:95:3b:e2:86:1d:08:ae:e2:a4:dc:cb:18:95:3d:
07:f1:96:fa:da:f0:0c:19:33:2b:a1:2b:cc:61:2d:
22:f8:9a:63:aa:2f:f0:ec:36:8e:c9:1f:17:65:ef:
7d:75:6a:c2:7c:06:14:d8:cc:13:ee:b9:42:6b:bb:
72:95:ec:7d:0a:1f:86:d0:5c:b2:75:4d:f6:78:c5:
a3:bc:54:78:f4:aa:46:50:93:67:38:f7:c1:d4:f2:
f2:39:9b:54:d3:18:e7:da:59:87:ff:1a:9f:b2:72:
16:d8:62:2e:2c:b3:08:8f:e9:30:b1:62:8d:17:6e:
5c:4c:67:eb:c6:9f:76:81:4a:17:2a:9f:b0:17:15:
d9:bf:2d:f7:f6:06:23:32:9c:a6:26:0b:3a:b6:70:
5f:6b:5d:35:be:75:bf:16:33:16:c4:f0:3f:52:8b:
78:37:99:0c:d7:53:8f:2d:6c:9e:31:9c:54:b3:eb:
69:c3:77:c2:78:41:de:73:dc:cf:13:5d:79:fc:98:
b2:af:33:85:1e:79:10:f8:90:57:ea:33:6b:80:f1:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8F:77:EE:CA:BD:46:B8:F0:F8:F2:0A:36:D3:A5:49:32:DD:7E:4D
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c8:6f:98:05:ae:dd:5e:24:12:03:57:ab:dc:08:23:d4:ed:
de:4c:85:be:1f:a9:8e:92:88:c5:4c:db:30:9e:66:97:30:a7:
5e:03:e5:b4:05:88:0e:f6:b4:e3:4c:03:5b:e2:9a:44:00:72:
79:b1:2c:21:07:73:c9:8b:a1:f0:0b:6f:1b:e7:db:bf:53:ee:
81:dc:90:97:22:08:69:a5:f9:c8:d7:d2:60:0c:96:db:df:41:
cf:7b:7a:bb:2d:7b:fb:88:40:1c:41:3d:80:28:fc:61:9b:04:
0f:bb:26:ba:24:8d:37:bf:d8:5e:13:c0:1f:8b:17:70:47:29:
bf:ab:dd:ba:8b:9a:ba:c6:fe:6a:09:cd:1e:52:66:ea:da:f7:
90:e4:d2:45:06:19:0c:b8:40:87:f8:96:ec:52:37:6b:96:6e:
ea:fc:25:42:4d:fb:c7:48:1f:b5:82:29:bb:67:05:0b:ce:27:
8a:97:dc:ac:23:58:41:78:5d:dc:9d:91:bc:90:4a:47:67:ae:
22:dd:f9:d5:31:2c:82:5f:c7:96:b0:d7:ca:5a:0b:c5:52:58:
84:d4:8f:00:3d:7c:4f:ac:af:d6:54:b7:08:8e:65:2e:76:b4:
e3:c3:83:bf:64:58:a8:b5:2a:e2:dd:46:28:83:90:16:08:87:
54:73:78:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiGVlt6dMyN0ynJ/V42yqRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YThlNDRlNTczYzUzYzcxOTIzMTJmY2M3MjE1MGQyZGUz
NzdkNmQwHhcNMjUwODA3MjEwMTAzWhcNMjUwODA4MjEwMTAzWjAzMTEwLwYDVQQD
EyhiOThmNzdlZWNhYmQ0NmI4ZjBmOGYyMGEzNmQzYTU0OTMyZGQ3ZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GNNUVFU8ZfqG0zGDZHnTlGPlIzh
fpEmiSwJuvAgarrwCpAhm5VActfVuC8NlTvihh0IruKk3MsYlT0H8Zb62vAMGTMr
oSvMYS0i+Jpjqi/w7DaOyR8XZe99dWrCfAYU2MwT7rlCa7tylex9Ch+G0FyydU32
eMWjvFR49KpGUJNnOPfB1PLyOZtU0xjn2lmH/xqfsnIW2GIuLLMIj+kwsWKNF25c
TGfrxp92gUoXKp+wFxXZvy339gYjMpymJgs6tnBfa101vnW/FjMWxPA/Uot4N5kM
11OPLWyeMZxUs+tpw3fCeEHec9zPE115/JiyrzOFHnkQ+JBX6jNrgPH8KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmPd+7KvUa48PjyCjbTpUky3X5NMB8GA1UdIwQY
MBaAFKmo5E5XPFPHGSMS/MchUNLeN31tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYt
MTk1MTM0NWNlYTMzLzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYtMTk1MTM0NWNlYTMz
LzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIshvmAWu
3V4kEgNXq9wII9Tt3kyFvh+pjpKIxUzbMJ5mlzCnXgPltAWIDva040wDW+KaRABy
ebEsIQdzyYuh8AtvG+fbv1PugdyQlyIIaaX5yNfSYAyW299Bz3t6uy17+4hAHEE9
gCj8YZsED7smuiSNN7/YXhPAH4sXcEcpv6vduouausb+agnNHlJm6tr3kOTSRQYZ
DLhAh/iW7FI3a5Zu6vwlQk37x0gftYIpu2cFC84nipfcrCNYQXhd3J2RvJBKR2eu
It351TEsgl/HlrDXyloLxVJYhNSPAD18T6yv1lS3CI5lLna048ODv2RYqLUq4t1G
KIOQFgiHVHN4og==
-----END CERTIFICATE-----
Generated at Thu Aug 7 23:57:32 2025 by rpki-client