Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: EvlbRig62ovzKMeVc1VwnGREdarYb+8ojtuDHNXuMR4=
Subject key identifier: 7D:42:1C:FF:FA:1C:59:30:0A:E2:E5:5C:3F:2B:5D:F1:EF:55:43:A9
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 019A4E18EC080BBB172D02FF39DAB35D1296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 09:00:47 +0000
Manifest this update: Tue 04 Nov 2025 09:00:47 +0000
Manifest next update: Wed 05 Nov 2025 09:00:47 +0000
Files and hashes: 1: CTedhf-UDhDCo0gKWN1eFB95iME.roa (hash: Vr6y6sdI8B/BSyNE6gcBQftZW1dE4fIdtomKsz3LLNE=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: H51MV25nDW80Vn4OW2cfNS9S5W5gb1fnpo8wOtU1LIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ec:08:0b:bb:17:2d:02:ff:39:da:b3:5d:12:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Nov 4 09:00:47 2025 GMT
Not After : Nov 5 09:00:47 2025 GMT
Subject: CN=7d421cfffa1c59300ae2e55c3f2b5df1ef5543a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:42:9b:f8:37:9b:a5:8b:90:3e:1e:bf:5c:98:
d2:07:a8:d0:bd:41:e6:87:22:77:f8:02:2c:b4:cb:
ee:7f:91:c6:c0:9c:f5:ad:9f:38:83:5f:a1:35:18:
95:90:71:fa:89:af:b7:60:3d:5f:98:08:05:74:d3:
d1:e2:15:4b:c1:e8:de:2d:95:7a:3a:cd:37:f2:fd:
54:38:73:76:44:b0:b8:8c:42:69:17:b8:1e:90:07:
60:37:86:78:35:fa:25:9a:41:ea:fb:88:93:8c:59:
6d:14:f8:3c:40:47:00:34:2d:b9:c1:96:12:15:db:
a8:dd:f6:21:3d:6f:33:f9:44:c8:a8:06:7c:63:dc:
b6:a1:9e:8c:bb:1a:da:cb:25:71:52:12:e2:9f:b7:
03:41:6e:41:7f:97:d0:d6:2f:c5:d8:67:97:e4:c5:
2e:5d:02:bb:80:3b:0a:19:af:bb:8b:6b:76:b3:e7:
39:ca:d2:8b:6d:1f:83:4c:f8:20:71:1e:80:37:34:
ea:20:04:cf:d5:2a:3b:94:d5:e4:ce:9a:df:45:72:
a4:42:6a:56:59:0b:f2:0a:5d:c6:95:b4:59:a9:42:
aa:17:ea:c1:9f:6b:62:4e:a2:3e:40:4a:3e:83:0a:
aa:4b:df:e4:2c:0c:da:a6:13:dc:51:66:41:a2:09:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:42:1C:FF:FA:1C:59:30:0A:E2:E5:5C:3F:2B:5D:F1:EF:55:43:A9
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5d:e7:69:fd:17:44:ef:32:a2:13:fd:f5:8a:22:51:ac:95:
8f:1c:3f:bb:b0:6c:79:62:f3:fc:e1:72:22:30:cc:2d:55:06:
71:70:2f:29:a0:98:b1:50:b3:67:0b:db:ef:21:fa:a6:2d:a7:
0a:41:30:47:af:2d:54:6e:a4:54:d0:bc:69:5f:dd:9b:61:e2:
24:3d:e2:d2:7b:3f:31:1c:55:c2:f4:a6:22:12:1e:98:0a:dd:
3c:54:66:31:d0:11:ba:f3:46:9f:0d:05:9c:8d:20:7d:f1:34:
25:77:fe:2a:8b:66:84:be:38:3a:3c:2a:01:3f:1f:cf:da:e8:
18:da:ae:de:6d:c2:24:fe:d9:3f:36:f5:43:8c:95:64:15:9d:
ea:8e:3e:94:39:7c:70:0e:d5:05:43:36:d6:c0:88:10:12:e0:
27:94:c9:e2:ea:54:88:bd:2e:15:b3:be:86:6a:c1:ca:35:68:
75:dd:61:63:e5:5e:95:44:c1:3f:3d:2b:5c:b9:27:85:c1:70:
96:49:f8:e4:bf:c5:9a:1a:26:8d:0b:e9:8a:d1:36:71:b9:bc:
48:81:fb:6a:fb:b8:c5:3b:43:4b:43:e3:82:4e:0e:69:35:04:
5c:1c:c0:5a:88:44:ea:f3:86:98:c1:f2:a4:79:3e:8e:c2:bb:
1f:ca:4a:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGOwIC7sXLQL/OdqzXRKWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YThlNDRlNTczYzUzYzcxOTIzMTJmY2M3MjE1MGQyZGUz
NzdkNmQwHhcNMjUxMTA0MDkwMDQ3WhcNMjUxMTA1MDkwMDQ3WjAzMTEwLwYDVQQD
Eyg3ZDQyMWNmZmZhMWM1OTMwMGFlMmU1NWMzZjJiNWRmMWVmNTU0M2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70Kb+DebpYuQPh6/XJjSB6jQvUHm
hyJ3+AIstMvuf5HGwJz1rZ84g1+hNRiVkHH6ia+3YD1fmAgFdNPR4hVLwejeLZV6
Os038v1UOHN2RLC4jEJpF7gekAdgN4Z4NfolmkHq+4iTjFltFPg8QEcANC25wZYS
Fduo3fYhPW8z+UTIqAZ8Y9y2oZ6MuxrayyVxUhLin7cDQW5Bf5fQ1i/F2GeX5MUu
XQK7gDsKGa+7i2t2s+c5ytKLbR+DTPggcR6ANzTqIATP1So7lNXkzprfRXKkQmpW
WQvyCl3GlbRZqUKqF+rBn2tiTqI+QEo+gwqqS9/kLAzaphPcUWZBogkvCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1CHP/6HFkwCuLlXD8rXfHvVUOpMB8GA1UdIwQY
MBaAFKmo5E5XPFPHGSMS/MchUNLeN31tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYt
MTk1MTM0NWNlYTMzLzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYtMTk1MTM0NWNlYTMz
LzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEl3naf0X
RO8yohP99YoiUayVjxw/u7BseWLz/OFyIjDMLVUGcXAvKaCYsVCzZwvb7yH6pi2n
CkEwR68tVG6kVNC8aV/dm2HiJD3i0ns/MRxVwvSmIhIemArdPFRmMdARuvNGnw0F
nI0gffE0JXf+KotmhL44OjwqAT8fz9roGNqu3m3CJP7ZPzb1Q4yVZBWd6o4+lDl8
cA7VBUM21sCIEBLgJ5TJ4upUiL0uFbO+hmrByjVodd1hY+VelUTBPz0rXLknhcFw
lkn45L/FmhomjQvpitE2cbm8SIH7avu4xTtDS0Pjgk4OaTUEXBzAWohE6vOGmMHy
pHk+jsK7H8pK6A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:06 2025 by rpki-client