Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
File: KqFL_4NIDRDND767gLLLUJH8-C8.mft (raw, json)
Hash identifier: YcmoHtex82k1pFYjt7RqHCLli5qljhBL+rJMlwm1Uqg=
Subject key identifier: D7:92:E3:A4:58:6E:2A:4A:7B:A0:8C:7A:22:26:0C:45:1A:7C:E9:A2
Authority key identifier: 2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
Certificate issuer: /CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Certificate serial: 0198D5BC056461D9FA2B3E02887AC2363E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:02:05 +0000
Manifest this update: Sat 23 Aug 2025 07:02:05 +0000
Manifest next update: Sun 24 Aug 2025 07:02:05 +0000
Files and hashes: 1: 0zY-sGp0Ft0AM9Sf-NYlNdybUWg.roa (hash: eX1zp0GC5bqV6hOy4nxEisONQ8sH8x4mX06jY0ZL3fw=)
2: KqFL_4NIDRDND767gLLLUJH8-C8.crl (hash: Yh8p0/Cf7J6M80b5J1Cc12POXp3xvBnzZXYtZu5vBHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:05:64:61:d9:fa:2b:3e:02:88:7a:c2:36:3e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Validity
Not Before: Aug 23 07:02:05 2025 GMT
Not After : Aug 24 07:02:05 2025 GMT
Subject: CN=d792e3a4586e2a4a7ba08c7a22260c451a7ce9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a0:c5:11:68:41:9a:4f:73:84:0a:b4:e1:87:
00:c2:f2:2f:45:66:1d:64:ba:b2:6e:7d:7b:e1:74:
bf:62:da:7d:b5:d2:fe:80:5a:b7:6e:7c:49:a9:99:
6a:68:19:61:72:f9:8d:8d:ae:1c:3a:cf:ab:ed:f5:
02:f6:fd:fb:cf:21:c2:b6:16:05:25:22:8b:42:32:
9c:52:4d:7e:a7:97:62:f6:ef:8f:e6:57:a5:13:8e:
74:3f:fb:fd:d9:97:bc:a4:f7:9e:cc:ca:7b:f0:00:
a0:3d:b7:c0:36:8c:4b:79:2f:f8:0f:6f:0c:04:42:
20:68:99:40:36:a6:f6:5b:80:81:5f:ab:70:2d:43:
d0:2a:cd:e2:35:78:6e:a2:a3:66:a2:62:c8:fb:63:
2e:06:40:fd:f2:8d:65:ca:da:9e:0c:87:ba:d7:54:
4d:05:1d:8f:31:24:48:90:8a:e0:23:ae:ed:19:45:
c6:f6:bb:fa:22:4c:c8:df:0c:7f:a6:74:c4:2f:32:
db:3f:79:3b:99:fc:c8:ca:d5:56:d4:20:d9:70:7e:
d2:3f:b5:a5:76:9b:18:36:0d:9b:f1:71:ce:f7:0e:
2d:8a:47:cb:85:17:b8:7d:18:f9:49:b5:0a:c6:3e:
15:ad:9e:6d:5a:fc:67:06:a6:65:08:27:71:79:b0:
6f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:92:E3:A4:58:6E:2A:4A:7B:A0:8C:7A:22:26:0C:45:1A:7C:E9:A2
X509v3 Authority Key Identifier:
keyid:2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:bc:4c:9b:dd:ef:0a:13:9c:0d:2e:82:ce:39:4c:e2:97:e2:
3a:1a:41:4e:94:e4:c3:6d:c2:86:5d:a4:7f:2e:92:1c:5f:c5:
7e:e9:e6:2c:0d:20:3c:e5:b8:6e:5e:63:4b:62:19:ad:f7:a3:
41:94:28:5e:03:46:d2:5a:c0:02:b0:cd:91:4a:1d:3b:fd:8a:
e5:4c:5a:9d:75:58:7c:de:d3:ab:77:c0:bb:6f:cb:de:d2:ac:
e4:05:1e:77:58:b7:3b:34:d2:aa:90:ba:af:47:51:7a:f2:5d:
cf:6a:43:14:08:97:06:42:b7:2d:8d:97:bb:e9:12:ac:00:7a:
ca:af:f3:86:30:37:dc:a4:26:e1:71:a0:a8:aa:89:5e:28:19:
47:53:09:78:98:13:62:23:7b:d0:05:be:7e:38:6d:98:30:45:
2e:e6:62:48:9c:0a:af:e0:54:eb:11:5b:c5:e5:ac:6c:99:81:
60:df:2e:ca:de:dc:66:50:44:a8:cf:5a:7c:95:83:eb:31:7d:
a6:b7:2b:1c:0c:4d:6c:87:aa:c2:68:81:38:75:11:a6:dd:28:
24:c9:79:03:a2:28:71:e6:06:1c:42:cb:d6:6a:47:a2:e4:50:
88:32:1e:3d:66:ff:50:ed:6e:f7:82:1b:7a:9d:08:6e:f7:63:
39:03:fb:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvAVkYdn6Kz4CiHrCNj6KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTE0YmZmODM0ODBkMTBjZDBmYmViYjgwYjJjYjUwOTFm
Y2Y4MmYwHhcNMjUwODIzMDcwMjA1WhcNMjUwODI0MDcwMjA1WjAzMTEwLwYDVQQD
EyhkNzkyZTNhNDU4NmUyYTRhN2JhMDhjN2EyMjI2MGM0NTFhN2NlOWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaDFEWhBmk9zhAq04YcAwvIvRWYd
ZLqybn174XS/Ytp9tdL+gFq3bnxJqZlqaBlhcvmNja4cOs+r7fUC9v37zyHCthYF
JSKLQjKcUk1+p5di9u+P5lelE450P/v92Ze8pPeezMp78ACgPbfANoxLeS/4D28M
BEIgaJlANqb2W4CBX6twLUPQKs3iNXhuoqNmomLI+2MuBkD98o1lytqeDIe611RN
BR2PMSRIkIrgI67tGUXG9rv6IkzI3wx/pnTELzLbP3k7mfzIytVW1CDZcH7SP7Wl
dpsYNg2b8XHO9w4tikfLhRe4fRj5SbUKxj4VrZ5tWvxnBqZlCCdxebBvUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeS46RYbipKe6CMeiImDEUafOmiMB8GA1UdIwQY
MBaAFCqhS/+DSA0QzQ++u4Cyy1CR/PgvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMTk4MTEtZmEyMy00N2IwLWI1Nzct
MTc2OThmODhjM2JkLzEvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iMTk4MTEtZmEyMy00N2IwLWI1NzctMTc2OThmODhjM2Jk
LzEvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7xMm93v
ChOcDS6CzjlM4pfiOhpBTpTkw23Chl2kfy6SHF/FfunmLA0gPOW4bl5jS2IZrfej
QZQoXgNG0lrAArDNkUodO/2K5UxanXVYfN7Tq3fAu2/L3tKs5AUed1i3OzTSqpC6
r0dRevJdz2pDFAiXBkK3LY2Xu+kSrAB6yq/zhjA33KQm4XGgqKqJXigZR1MJeJgT
YiN70AW+fjhtmDBFLuZiSJwKr+BU6xFbxeWsbJmBYN8uyt7cZlBEqM9afJWD6zF9
prcrHAxNbIeqwmiBOHURpt0oJMl5A6IoceYGHELL1mpHouRQiDIePWb/UO1u94Ib
ep0IbvdjOQP7bQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:15 2025 by rpki-client