Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
File: KqFL_4NIDRDND767gLLLUJH8-C8.mft (raw, json)
Hash identifier: COehyKDREbF+MYUIMtQI3LB/+YLuWgvCKcj5zxF7PRM=
Subject key identifier: 40:8E:8C:63:53:1E:D0:B9:3B:9D:72:E2:8E:B1:01:77:08:71:02:1E
Authority key identifier: 2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
Certificate issuer: /CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Certificate serial: 0199FB4620D3E0CC906F5EDA1068BA74E73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 07:01:41 +0000
Manifest this update: Sun 19 Oct 2025 07:01:41 +0000
Manifest next update: Mon 20 Oct 2025 07:01:41 +0000
Files and hashes: 1: 0zY-sGp0Ft0AM9Sf-NYlNdybUWg.roa (hash: eX1zp0GC5bqV6hOy4nxEisONQ8sH8x4mX06jY0ZL3fw=)
2: KqFL_4NIDRDND767gLLLUJH8-C8.crl (hash: 4EIFR+LuGAMVggY0uBlegbcIIj+Z7278Hb32yXecRRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:20:d3:e0:cc:90:6f:5e:da:10:68:ba:74:e7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Validity
Not Before: Oct 19 07:01:41 2025 GMT
Not After : Oct 20 07:01:41 2025 GMT
Subject: CN=408e8c63531ed0b93b9d72e28eb101770871021e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3b:66:46:9e:ca:cc:ef:44:ef:ab:88:c8:9a:
25:f6:29:73:8a:54:97:7f:f8:e1:d1:6d:5f:5d:ce:
e0:26:a4:69:2c:51:26:04:52:4f:e9:71:57:5e:13:
da:a9:93:71:47:a0:cf:f2:0a:55:bd:c6:5c:61:93:
93:b8:6f:1a:cd:a0:21:c1:8d:f6:c8:0a:07:b0:38:
95:bf:47:92:30:9a:17:87:22:ef:6e:d2:4a:5d:9c:
de:03:28:58:7d:11:60:f5:a9:7f:5e:52:81:a9:2c:
17:23:c2:c8:64:ed:40:f6:46:0d:b1:64:d3:94:7e:
a4:fe:1c:f4:64:f8:b1:cc:63:d5:0b:5b:35:83:b6:
b7:3c:cc:15:7c:c3:bd:c7:d5:0d:61:ed:cb:b1:20:
03:30:e9:2e:e4:fc:b8:ce:ff:46:b0:81:af:e6:f2:
4a:d6:2e:10:ca:e1:e5:a1:af:d5:90:92:db:19:f2:
6d:96:c2:71:61:9b:1a:37:1d:46:de:22:e4:1e:da:
1d:2b:f7:a2:f6:60:42:6c:b1:02:b8:3b:19:76:2a:
70:25:c9:55:9f:f9:51:cf:44:84:67:37:40:d0:65:
28:13:54:85:5f:a9:dc:b9:9e:b2:a8:14:84:29:f4:
33:e2:f4:7f:d1:e2:15:7b:66:77:6f:56:27:a1:44:
24:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8E:8C:63:53:1E:D0:B9:3B:9D:72:E2:8E:B1:01:77:08:71:02:1E
X509v3 Authority Key Identifier:
keyid:2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b0:f9:cc:26:b4:f3:18:f0:b8:0c:eb:fa:e4:49:65:4d:8c:
19:7b:e7:4a:60:25:55:c2:ac:66:19:3f:38:ec:8f:34:c3:ba:
d3:84:3a:16:a0:e6:13:81:25:b0:d4:4b:ca:2f:1f:a2:73:a5:
3e:30:f2:7c:a2:72:fa:f2:f1:f8:97:da:18:36:5a:98:de:89:
88:29:fd:fd:10:4d:0a:de:33:d9:83:f8:96:5c:fe:f4:6f:1c:
28:c8:3b:88:70:30:7a:df:d0:df:65:be:8f:11:15:b6:43:f9:
27:cc:9d:6c:9c:95:d2:f9:35:3c:86:9d:bc:4f:28:eb:68:c3:
6f:88:cb:32:42:d7:bf:2c:16:4d:bf:4b:d2:51:ff:f8:c0:a1:
82:db:a3:c4:95:41:99:b3:dc:e3:fc:b3:18:74:8e:67:74:eb:
e7:10:5a:03:27:97:0a:1a:26:a3:89:ab:e4:ea:45:6c:31:15:
8e:c0:f4:be:d9:65:fc:59:28:18:e3:6e:f4:0c:87:93:22:a9:
bf:7d:e4:31:4f:40:41:42:0f:9b:38:a9:f6:52:4e:9a:0b:db:
45:78:2e:d8:73:d6:f9:b7:ca:9c:8d:60:3c:4d:90:aa:22:4f:
a6:24:a9:da:4b:e4:f6:b0:78:16:3a:0f:76:04:73:4f:c8:3d:
b8:cd:cc:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RiDT4MyQb17aEGi6dOc+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTE0YmZmODM0ODBkMTBjZDBmYmViYjgwYjJjYjUwOTFm
Y2Y4MmYwHhcNMjUxMDE5MDcwMTQxWhcNMjUxMDIwMDcwMTQxWjAzMTEwLwYDVQQD
Eyg0MDhlOGM2MzUzMWVkMGI5M2I5ZDcyZTI4ZWIxMDE3NzA4NzEwMjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DtmRp7KzO9E76uIyJol9ilzilSX
f/jh0W1fXc7gJqRpLFEmBFJP6XFXXhPaqZNxR6DP8gpVvcZcYZOTuG8azaAhwY32
yAoHsDiVv0eSMJoXhyLvbtJKXZzeAyhYfRFg9al/XlKBqSwXI8LIZO1A9kYNsWTT
lH6k/hz0ZPixzGPVC1s1g7a3PMwVfMO9x9UNYe3LsSADMOku5Py4zv9GsIGv5vJK
1i4QyuHloa/VkJLbGfJtlsJxYZsaNx1G3iLkHtodK/ei9mBCbLECuDsZdipwJclV
n/lRz0SEZzdA0GUoE1SFX6ncuZ6yqBSEKfQz4vR/0eIVe2Z3b1YnoUQk4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECOjGNTHtC5O51y4o6xAXcIcQIeMB8GA1UdIwQY
MBaAFCqhS/+DSA0QzQ++u4Cyy1CR/PgvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMTk4MTEtZmEyMy00N2IwLWI1Nzct
MTc2OThmODhjM2JkLzEvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iMTk4MTEtZmEyMy00N2IwLWI1NzctMTc2OThmODhjM2Jk
LzEvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbD5zCa0
8xjwuAzr+uRJZU2MGXvnSmAlVcKsZhk/OOyPNMO604Q6FqDmE4ElsNRLyi8fonOl
PjDyfKJy+vLx+JfaGDZamN6JiCn9/RBNCt4z2YP4llz+9G8cKMg7iHAwet/Q32W+
jxEVtkP5J8ydbJyV0vk1PIadvE8o62jDb4jLMkLXvywWTb9L0lH/+MChgtujxJVB
mbPc4/yzGHSOZ3Tr5xBaAyeXChomo4mr5OpFbDEVjsD0vtll/FkoGONu9AyHkyKp
v33kMU9AQUIPmzip9lJOmgvbRXgu2HPW+bfKnI1gPE2QqiJPpiSp2kvk9rB4FjoP
dgRzT8g9uM3M8w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:57:15 2025 by rpki-client