Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
File: KqttsAX47NmhIcY2hYB17xMUXbA.mft (raw, json)
Hash identifier: 4qFhdqW/v4f0jbO/iMfPxe6dq1HV5fVTFy2fa50kkxw=
Subject key identifier: 22:84:7A:F4:72:4F:4C:92:2A:15:06:33:95:87:54:F5:A6:7A:DB:62
Authority key identifier: 2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
Certificate issuer: /CN=2aab6db005f8ecd9a121c636858075ef13145db0
Certificate serial: 0199FBEA9F8DC113310D64693A8ABDFE7701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: KqttsAX47NmhIcY2hYB17xMUXbA.crl (hash: mArWpS69Prn61cy17CgLreTzo73bQo/MSeKQWIeX+Y4=)
2: NTwv9MrFUxU0rREuWqapE-DiajI.roa (hash: hq+d0ybPFOeu8D+rx2edFf/i0EP0Jbrx83E12M+26zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9f:8d:c1:13:31:0d:64:69:3a:8a:bd:fe:77:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aab6db005f8ecd9a121c636858075ef13145db0
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=22847af4724f4c922a150633958754f5a67adb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:67:f3:09:e0:c7:b2:4f:ec:54:d8:98:9b:
58:91:ff:d2:2c:a0:10:5c:eb:36:ca:83:47:1d:6b:
35:ca:c3:6d:1a:c2:5a:c4:17:0d:0b:3c:e0:6f:6e:
ea:36:e5:99:b9:ff:98:12:d6:98:5d:0d:7d:d2:86:
56:42:8a:3f:f0:0d:60:af:82:dd:6b:4c:e5:66:c1:
44:2e:18:df:c3:6c:53:e6:6a:ac:c2:a1:68:2b:51:
76:dc:98:8a:13:0d:19:ea:a7:70:e2:77:e8:3e:29:
83:e8:7a:15:95:63:ce:38:16:a4:18:4a:58:56:82:
58:4e:e7:ca:46:52:f6:a2:96:fb:7c:05:2c:0d:48:
d9:e8:2f:b4:3b:cd:5b:8f:92:c8:5a:00:13:17:71:
8b:48:55:68:da:47:89:eb:de:e7:11:f2:3f:e5:04:
fb:fa:8c:e6:44:6f:27:b9:fe:2d:46:cc:ce:33:cd:
ec:34:31:4c:01:24:7f:20:36:ee:ff:10:70:1f:8a:
7b:bf:75:2f:39:62:62:14:01:36:fa:ff:5a:9c:2d:
71:2e:50:5b:60:d7:03:52:c2:24:64:f4:8e:63:b9:
de:8e:b0:26:4f:37:73:7e:8a:ae:8c:b5:7a:7d:0a:
d6:8f:ac:1f:89:59:ee:40:25:06:c8:2a:8b:aa:bd:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:84:7A:F4:72:4F:4C:92:2A:15:06:33:95:87:54:F5:A6:7A:DB:62
X509v3 Authority Key Identifier:
keyid:2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:90:4c:b1:fc:7a:2a:23:4c:21:fe:2a:73:07:61:0d:b4:84:
35:45:5b:7f:99:69:18:fa:7b:35:e3:a1:26:55:e8:44:8b:83:
91:86:5b:36:a7:c4:e0:22:5a:3f:1d:83:22:34:18:61:a9:53:
80:75:b2:5e:5f:b1:cf:3f:8f:b1:40:91:aa:b9:b1:3f:6e:c8:
d7:57:05:b9:c2:44:55:e1:4e:a3:46:98:26:c5:31:e6:85:78:
12:76:c3:6b:c4:d7:c9:eb:61:61:a9:33:7d:93:2d:79:f5:ab:
21:24:d4:e0:c8:17:b2:7a:42:8f:ef:98:84:d4:46:3f:07:a3:
c2:bf:9b:d4:75:06:28:47:b9:3e:55:51:1b:d4:dd:96:cd:7f:
1e:a9:ee:39:51:e1:14:ce:a9:25:30:2c:6e:16:c5:f7:11:30:
1d:fd:ca:e0:31:a7:eb:56:2d:6d:d3:66:ec:46:57:eb:10:ba:
31:ce:ae:6c:9d:63:bc:49:d6:63:06:23:ef:98:b9:db:63:dc:
38:6d:20:04:56:88:b8:bd:f0:ef:97:6d:cb:ce:fd:1a:d5:38:
0d:76:83:20:ae:eb:9c:bc:8f:0c:86:53:12:44:56:91:8a:eb:
4b:4c:6c:ad:34:2f:5d:17:69:60:7f:3f:ab:29:3c:de:d1:55:
21:09:72:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:39 2025 by rpki-client