
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
File: KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json)
Hash identifier: 3WXAs+cAGeFFJiRpXQxsyT9DWvyBcpazbu7wJSO+ypY=
Subject key identifier: EB:24:2E:16:66:B0:2F:A9:F7:AE:7D:38:54:BD:18:BB:27:0B:72:06
Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
Certificate issuer: /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Certificate serial: 0199FCFD819CF826BF7217319767784298FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
Manifest number: 0ACC
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: B-4mThf4e-80zWpEOjTSvUoatyg.roa (hash: iLGZvkSCMs5F+PZw6Uabdz+fABoTG9YghxbSRDf22wI=)
2: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: DePkjIQrkQrULjrm3v/Xq+Yh8L+srTnynelhF7ZIO8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:81:9c:f8:26:bf:72:17:31:97:67:78:42:98:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=eb242e1666b02fa9f7ae7d3854bd18bb270b7206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6b:80:b6:24:14:88:2a:c4:f0:46:09:de:d3:
e4:7d:d6:d5:18:ef:7a:91:4e:02:b3:01:98:41:d0:
57:71:cf:27:fc:cb:76:33:95:e8:e0:89:41:f1:89:
65:0b:53:46:e7:e0:44:f6:bc:10:95:bb:22:67:9a:
ef:1c:df:3b:d3:94:01:8c:85:c2:be:5b:be:45:73:
dc:5c:6f:3e:88:65:78:82:10:00:04:fb:1a:3a:9b:
07:46:fa:e7:c1:94:47:82:84:d8:20:19:2a:7a:be:
b0:8d:61:18:09:50:5b:c1:ef:7a:65:8b:22:ce:d9:
29:57:51:a9:56:b5:29:44:5e:9b:78:66:11:23:68:
3e:41:73:62:de:82:2e:26:d9:6c:ba:5e:db:35:65:
24:0b:9c:f1:d8:34:d2:3c:a9:89:3b:18:3c:9c:9e:
5e:99:21:ab:51:ec:8f:5d:a8:81:50:44:f9:ff:38:
4f:fe:4a:df:60:00:cc:0b:db:bc:bf:03:60:9d:ad:
44:f8:9e:74:d6:a4:bc:97:ef:79:a9:3a:37:95:27:
5c:5e:ab:e2:69:91:c7:c2:ab:68:9d:1b:50:96:25:
32:0a:e0:59:42:20:cd:7e:f4:2b:e0:7e:91:c7:99:
8c:b4:88:e9:e2:34:2a:f5:e3:80:79:47:c0:1e:5d:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:24:2E:16:66:B0:2F:A9:F7:AE:7D:38:54:BD:18:BB:27:0B:72:06
X509v3 Authority Key Identifier:
keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6a:6a:ef:96:7d:94:9a:b7:dc:26:d2:1c:27:7e:cf:3e:0c:
09:14:20:30:2d:21:5c:53:67:20:bd:bc:b8:d4:78:b7:21:a9:
da:11:7c:0c:ca:b6:36:79:6e:80:fb:31:83:15:e2:5f:be:5d:
07:bc:c9:80:10:70:4a:74:78:02:bf:f1:98:d9:aa:50:25:27:
46:98:d4:ba:16:d6:57:63:a4:37:93:2d:3d:80:00:45:08:8b:
23:8b:4b:56:17:d0:57:1e:d8:48:6e:91:56:0e:92:2c:d2:35:
f9:70:0d:fe:e4:25:59:57:76:17:06:7b:75:3f:ee:c4:93:8b:
ec:b2:7c:f2:c5:56:b4:3e:5f:06:f3:14:c2:a8:13:a9:a0:b9:
34:55:3d:2e:63:42:85:1e:7f:99:13:d4:63:b3:9a:f3:0a:77:
34:59:1e:78:e4:4d:20:34:78:73:d2:dc:9a:f4:04:08:43:53:
ce:c6:aa:64:51:93:9d:31:67:6c:00:80:6e:92:1d:fd:a6:d0:
7f:d5:b7:ba:a5:65:3d:a4:50:b5:4d:29:14:4a:a5:1f:17:9f:
f8:a8:26:c1:dd:05:96:0a:fb:33:d7:09:a1:c3:e5:39:0b:6b:
c5:b3:17:e1:ef:9a:92:2a:3e:e4:14:81:48:b1:08:8c:39:b8:
93:8b:b4:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/YGc+Ca/chcxl2d4Qpj8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTE3ZWQ0MDc0MzJjNDE4YjFjOWVhZjYxZmQxY2ExY2Jm
ZjZhNzQwHhcNMjUxMDE5MTUwMTM2WhcNMjUxMDIwMTUwMTM2WjAzMTEwLwYDVQQD
EyhlYjI0MmUxNjY2YjAyZmE5ZjdhZTdkMzg1NGJkMThiYjI3MGI3MjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82uAtiQUiCrE8EYJ3tPkfdbVGO96
kU4CswGYQdBXcc8n/Mt2M5Xo4IlB8YllC1NG5+BE9rwQlbsiZ5rvHN8705QBjIXC
vlu+RXPcXG8+iGV4ghAABPsaOpsHRvrnwZRHgoTYIBkqer6wjWEYCVBbwe96ZYsi
ztkpV1GpVrUpRF6beGYRI2g+QXNi3oIuJtlsul7bNWUkC5zx2DTSPKmJOxg8nJ5e
mSGrUeyPXaiBUET5/zhP/krfYADMC9u8vwNgna1E+J501qS8l+95qTo3lSdcXqvi
aZHHwqtonRtQliUyCuBZQiDNfvQr4H6Rx5mMtIjp4jQq9eOAeUfAHl0TEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOskLhZmsC+p9659OFS9GLsnC3IGMB8GA1UdIwQY
MBaAFCqhftQHQyxBixyer2H9HKHL/2p0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81NGQ0MzctYTI3Ny00MWJkLTk4OGYt
OTUwZjBhMDEwMWE5LzEvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni81NGQ0MzctYTI3Ny00MWJkLTk4OGYtOTUwZjBhMDEwMWE5
LzEvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGpq75Z9
lJq33CbSHCd+zz4MCRQgMC0hXFNnIL28uNR4tyGp2hF8DMq2NnlugPsxgxXiX75d
B7zJgBBwSnR4Ar/xmNmqUCUnRpjUuhbWV2OkN5MtPYAARQiLI4tLVhfQVx7YSG6R
Vg6SLNI1+XAN/uQlWVd2FwZ7dT/uxJOL7LJ88sVWtD5fBvMUwqgTqaC5NFU9LmNC
hR5/mRPUY7Oa8wp3NFkeeORNIDR4c9LcmvQECENTzsaqZFGTnTFnbACAbpId/abQ
f9W3uqVlPaRQtU0pFEqlHxef+Kgmwd0Flgr7M9cJocPlOQtrxbMX4e+akio+5BSB
SLEIjDm4k4u0vg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:39 2025 by rpki-client