Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
File: KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft (raw, json)
Hash identifier: ux64n82w+eRO2/OyA1f2aLDEK8XM5zEBsN6DTANZFBM=
Subject key identifier: 94:CD:2F:A4:DC:EB:AA:15:86:79:66:16:EE:44:36:63:7F:6A:24:D0
Authority key identifier: 29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
Certificate issuer: /CN=29081d68bddea8bebf26e61821978594f223bcbe
Certificate serial: 0199FC585BE595541A6021B7B8D018244D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
Manifest number: 08E2
Signing time: Sun 19 Oct 2025 12:01:13 +0000
Manifest this update: Sun 19 Oct 2025 12:01:13 +0000
Manifest next update: Mon 20 Oct 2025 12:01:13 +0000
Files and hashes: 1: KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl (hash: jNtr2vqAM3fUjjzItbqXyvOi5EeB2W0KgitanAWDrWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:5b:e5:95:54:1a:60:21:b7:b8:d0:18:24:4d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29081d68bddea8bebf26e61821978594f223bcbe
Validity
Not Before: Oct 19 12:01:13 2025 GMT
Not After : Oct 20 12:01:13 2025 GMT
Subject: CN=94cd2fa4dcebaa1586796616ee4436637f6a24d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:88:ba:61:18:9b:4b:3b:45:a9:98:a8:f1:
2e:51:1f:e1:d0:0d:6a:a1:c8:61:14:3c:0f:fa:7e:
85:bd:64:77:3b:cb:82:e8:7f:9b:59:ef:1c:2a:59:
e0:07:10:b7:bf:fd:25:9a:a6:77:23:a6:0c:96:75:
cd:cd:0c:0e:73:fe:bf:18:9d:42:be:39:c3:e5:d5:
8e:54:75:98:68:a5:7b:cd:84:aa:b5:0f:6e:31:5f:
bb:15:fc:ce:60:0f:d2:70:0f:9c:be:2f:fc:b3:7e:
a8:a0:43:83:e3:23:90:8c:27:0a:21:2b:b3:9b:e8:
44:e2:6c:56:6c:71:96:7b:fc:44:80:0c:89:e8:c3:
7b:39:c6:ac:4d:e9:58:9f:30:15:a5:f5:14:13:e2:
65:cf:86:20:57:cd:75:bf:9c:4f:ec:b6:e9:fc:2f:
7c:72:35:03:87:e7:4e:df:bd:95:3a:25:2b:72:ed:
5c:30:f2:47:e8:41:5d:56:4d:1d:b5:d9:7e:64:c9:
79:65:79:55:0f:8a:25:22:be:c9:4b:7e:2b:aa:12:
ee:ba:d1:25:4d:ef:1e:8d:7b:ab:88:7d:8a:0f:86:
17:25:fb:cb:0e:b6:07:f6:a4:cc:89:45:d2:6f:cf:
57:41:c6:89:11:74:fc:a8:68:ee:eb:9c:4f:2c:a4:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CD:2F:A4:DC:EB:AA:15:86:79:66:16:EE:44:36:63:7F:6A:24:D0
X509v3 Authority Key Identifier:
keyid:29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:08:d1:0e:b1:bb:d1:39:93:b2:58:45:13:ca:c9:f9:e0:97:
6a:5e:aa:31:ee:14:b2:b8:84:f9:ff:6e:1f:a2:d4:a6:12:7e:
7f:c3:8e:d7:5c:55:b5:1a:cf:ca:47:8b:e1:2b:a5:a3:1c:98:
fb:31:43:8f:18:b9:81:60:e6:a0:0d:25:73:a1:14:e2:fa:15:
0b:f8:c6:2e:97:4b:17:65:0d:89:f9:1c:7b:13:67:02:f2:16:
b0:75:f5:3c:5e:a0:1a:0c:35:52:dc:76:a8:ff:cd:14:79:37:
25:9d:33:a6:bc:a1:5e:f4:c7:2c:72:48:82:7f:24:aa:ec:4c:
f9:d2:92:96:52:0c:39:d9:d4:81:22:50:ad:b0:12:af:5b:da:
ec:42:52:5d:20:4e:aa:a9:4e:6b:f6:5e:f0:79:e6:51:de:a1:
fc:bf:be:06:eb:df:1a:d8:17:cf:5b:12:0d:14:83:65:ed:58:
9f:94:7b:86:e6:20:0a:ae:f0:5b:dc:af:be:c4:92:21:23:ca:
58:c7:4d:b1:c9:09:fb:1f:d8:dc:cb:99:b8:b2:c1:ee:b3:4f:
67:54:fb:2a:75:d0:97:06:32:b1:80:20:c4:d4:40:ad:4b:7f:
c8:49:36:10:fd:38:ea:7c:8c:9c:38:25:cd:1a:9e:9b:39:41:
53:82:4a:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WFvllVQaYCG3uNAYJE1MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDgxZDY4YmRkZWE4YmViZjI2ZTYxODIxOTc4NTk0ZjIy
M2JjYmUwHhcNMjUxMDE5MTIwMTEzWhcNMjUxMDIwMTIwMTEzWjAzMTEwLwYDVQQD
Eyg5NGNkMmZhNGRjZWJhYTE1ODY3OTY2MTZlZTQ0MzY2MzdmNmEyNGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04GIumEYm0s7RamYqPEuUR/h0A1q
ochhFDwP+n6FvWR3O8uC6H+bWe8cKlngBxC3v/0lmqZ3I6YMlnXNzQwOc/6/GJ1C
vjnD5dWOVHWYaKV7zYSqtQ9uMV+7FfzOYA/ScA+cvi/8s36ooEOD4yOQjCcKISuz
m+hE4mxWbHGWe/xEgAyJ6MN7OcasTelYnzAVpfUUE+Jlz4YgV811v5xP7Lbp/C98
cjUDh+dO372VOiUrcu1cMPJH6EFdVk0dtdl+ZMl5ZXlVD4olIr7JS34rqhLuutEl
Te8ejXuriH2KD4YXJfvLDrYH9qTMiUXSb89XQcaJEXT8qGju65xPLKRvzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTNL6Tc66oVhnlmFu5ENmN/aiTQMB8GA1UdIwQY
MBaAFCkIHWi93qi+vybmGCGXhZTyI7y+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FnZGFMM2VxTDZfSnVZWUlaZUZsUElqdkw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iNjhmNmYtOTYwZC00ZTMzLTg3M2Yt
NzM2N2MwZjIwYmM5LzEvS1FnZGFMM2VxTDZfSnVZWUlaZUZsUElqdkw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9iNjhmNmYtOTYwZC00ZTMzLTg3M2YtNzM2N2MwZjIwYmM5
LzEvS1FnZGFMM2VxTDZfSnVZWUlaZUZsUElqdkw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgjRDrG7
0TmTslhFE8rJ+eCXal6qMe4UsriE+f9uH6LUphJ+f8OO11xVtRrPykeL4SuloxyY
+zFDjxi5gWDmoA0lc6EU4voVC/jGLpdLF2UNifkcexNnAvIWsHX1PF6gGgw1Utx2
qP/NFHk3JZ0zpryhXvTHLHJIgn8kquxM+dKSllIMOdnUgSJQrbASr1va7EJSXSBO
qqlOa/Ze8HnmUd6h/L++BuvfGtgXz1sSDRSDZe1Yn5R7huYgCq7wW9yvvsSSISPK
WMdNsckJ+x/Y3MuZuLLB7rNPZ1T7KnXQlwYysYAgxNRArUt/yEk2EP046nyMnDgl
zRqemzlBU4JKDg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:36 2025 by rpki-client