Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
File: KqttsAX47NmhIcY2hYB17xMUXbA.mft (raw, json)
Hash identifier: wtqcAuUvYYqhPaRRHJpm44UB8bfUr2MaYZUqI3Yhl3k=
Subject key identifier: 2A:73:18:ED:C1:68:1B:55:53:4C:E1:20:18:0A:3F:8E:A9:7E:D7:49
Authority key identifier: 2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
Certificate issuer: /CN=2aab6db005f8ecd9a121c636858075ef13145db0
Certificate serial: 0198D474237F753E9DFAFC6F20C3E0A4C5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 01:03:57 +0000
Manifest this update: Sat 23 Aug 2025 01:03:57 +0000
Manifest next update: Sun 24 Aug 2025 01:03:57 +0000
Files and hashes: 1: KqttsAX47NmhIcY2hYB17xMUXbA.crl (hash: 64coCviogSuEHClEF56794zA2H7ec40oXXKjvWP8u+0=)
2: NTwv9MrFUxU0rREuWqapE-DiajI.roa (hash: hq+d0ybPFOeu8D+rx2edFf/i0EP0Jbrx83E12M+26zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:23:7f:75:3e:9d:fa:fc:6f:20:c3:e0:a4:c5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aab6db005f8ecd9a121c636858075ef13145db0
Validity
Not Before: Aug 23 01:03:57 2025 GMT
Not After : Aug 24 01:03:57 2025 GMT
Subject: CN=2a7318edc1681b55534ce120180a3f8ea97ed749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:f2:40:24:71:25:d5:2a:09:91:73:34:c1:
45:80:3e:9c:11:93:77:35:bc:9e:69:af:9a:cd:27:
19:c5:fc:03:04:45:a9:7c:14:4e:29:1e:08:a5:ea:
5c:a5:af:3d:07:20:bd:b4:be:19:94:7b:5c:31:9d:
8c:3c:36:e4:50:7c:52:5f:9f:1c:00:cf:cb:d3:11:
03:10:de:7e:7b:cb:fa:91:9c:28:ba:ef:61:35:49:
af:8b:77:26:2d:92:d7:0e:3b:3a:e8:25:e7:15:9c:
97:ee:71:95:ff:4a:07:24:9a:46:7e:00:cf:0d:98:
32:65:2a:78:83:c3:81:3d:c8:3c:ad:ef:29:f9:38:
e2:0b:f0:ca:44:26:24:21:3d:d7:ec:88:5a:31:c2:
28:a9:82:9e:2a:9a:d5:01:a6:08:0d:b0:63:04:7b:
cc:46:85:06:6b:1e:ad:bb:84:c5:51:58:f3:88:32:
a1:3f:78:93:b4:b5:6d:61:ea:59:f7:10:6d:00:d7:
4b:10:d9:25:86:47:ec:e9:8e:e6:ec:02:31:0f:fe:
c3:42:68:27:af:1c:46:0e:37:7e:01:ab:1c:0e:2b:
9f:48:b0:08:03:bc:73:36:07:1a:2c:15:d1:7b:41:
58:cf:62:b6:62:c8:a5:a0:cb:05:20:cb:da:84:3f:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:73:18:ED:C1:68:1B:55:53:4C:E1:20:18:0A:3F:8E:A9:7E:D7:49
X509v3 Authority Key Identifier:
keyid:2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ca:a4:0d:87:c9:b0:f5:35:45:40:f9:03:a2:58:0e:b8:32:
64:5b:a6:77:10:81:63:a0:8e:2f:26:7f:ac:5f:8b:be:d0:fb:
0e:2a:47:e4:08:8c:8d:a8:88:79:a3:4b:3a:44:80:1f:23:02:
87:ff:fe:8a:90:44:b1:59:ed:63:5e:ec:1e:d3:48:78:d1:10:
a0:54:23:c2:bd:3e:71:8d:1a:09:c0:1a:b2:4e:01:ff:1a:f7:
4f:24:b7:27:1e:9a:71:31:9b:cc:18:e4:f4:ba:a9:bd:c7:aa:
84:0b:94:25:ae:26:f6:46:5f:cc:0b:3d:13:62:f9:ec:62:09:
30:b6:62:0f:36:96:35:c4:e3:e7:e3:41:d5:b6:ed:8b:5a:18:
26:30:7c:8b:88:a5:04:3a:00:89:b1:dc:0d:50:b8:90:2e:5c:
55:3e:cc:bc:09:ab:c6:04:e1:b3:ce:b8:1c:21:39:91:52:f2:
ae:00:ac:a8:32:07:7f:fc:77:31:45:ed:cf:9f:62:29:47:ed:
82:c7:65:6d:1d:3a:55:4d:f2:13:42:24:41:19:ff:5d:65:aa:
55:ee:f6:2a:62:3b:51:be:14:a0:d2:35:eb:99:94:55:a7:cb:
ca:77:2a:c3:ae:0d:f3:0b:cd:06:ce:d5:80:47:31:43:6a:27:
f5:fa:60:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdCN/dT6d+vxvIMPgpMWyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYWI2ZGIwMDVmOGVjZDlhMTIxYzYzNjg1ODA3NWVmMTMx
NDVkYjAwHhcNMjUwODIzMDEwMzU3WhcNMjUwODI0MDEwMzU3WjAzMTEwLwYDVQQD
EygyYTczMThlZGMxNjgxYjU1NTM0Y2UxMjAxODBhM2Y4ZWE5N2VkNzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQLyQCRxJdUqCZFzNMFFgD6cEZN3
Nbyeaa+azScZxfwDBEWpfBROKR4Ipepcpa89ByC9tL4ZlHtcMZ2MPDbkUHxSX58c
AM/L0xEDEN5+e8v6kZwouu9hNUmvi3cmLZLXDjs66CXnFZyX7nGV/0oHJJpGfgDP
DZgyZSp4g8OBPcg8re8p+TjiC/DKRCYkIT3X7IhaMcIoqYKeKprVAaYIDbBjBHvM
RoUGax6tu4TFUVjziDKhP3iTtLVtYepZ9xBtANdLENklhkfs6Y7m7AIxD/7DQmgn
rxxGDjd+AascDiufSLAIA7xzNgcaLBXRe0FYz2K2YsiloMsFIMvahD+VVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpzGO3BaBtVU0zhIBgKP46pftdJMB8GA1UdIwQY
MBaAFCqrbbAF+OzZoSHGNoWAde8TFF2wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YzE3YmEtNWFiNC00ZjU5LWI0YmUt
YWQ2YTgxYjgyYTE3LzEvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84YzE3YmEtNWFiNC00ZjU5LWI0YmUtYWQ2YTgxYjgyYTE3
LzEvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcqkDYfJ
sPU1RUD5A6JYDrgyZFumdxCBY6COLyZ/rF+LvtD7DipH5AiMjaiIeaNLOkSAHyMC
h//+ipBEsVntY17sHtNIeNEQoFQjwr0+cY0aCcAask4B/xr3TyS3Jx6acTGbzBjk
9LqpvceqhAuUJa4m9kZfzAs9E2L57GIJMLZiDzaWNcTj5+NB1bbti1oYJjB8i4il
BDoAibHcDVC4kC5cVT7MvAmrxgThs864HCE5kVLyrgCsqDIHf/x3MUXtz59iKUft
gsdlbR06VU3yE0IkQRn/XWWqVe72KmI7Ub4UoNI165mUVafLyncqw64N8wvNBs7V
gEcxQ2on9fpgWg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:32 2025 by rpki-client