Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json)
Hash identifier: ljMTubAM5JQ7A20yR1lcnTE0tD4t1elOOaBgpyIR9+Y=
Subject key identifier: AF:8B:68:D3:B0:41:A1:6F:D8:C5:3D:D9:DE:9A:C0:E8:DB:C0:BC:0F
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 019922C33991B81F548417799C907B0C636A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
Manifest number: 127C
Signing time: Sun 07 Sep 2025 06:00:43 +0000
Manifest this update: Sun 07 Sep 2025 06:00:43 +0000
Manifest next update: Mon 08 Sep 2025 06:00:43 +0000
Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: deZuBJ9TB/WjpYL6oUGggYQZ6ei6QrdPaW6TSyRQxUU=)
2: kgzoK8BF6aDaCA7s2y2-oNomvaU.roa (hash: thv0x/fHxG1HTXAqa1M1DqYuduWmIxV8jm8IAHJKruM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:39:91:b8:1f:54:84:17:79:9c:90:7b:0c:63:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: Sep 7 06:00:43 2025 GMT
Not After : Sep 8 06:00:43 2025 GMT
Subject: CN=af8b68d3b041a16fd8c53dd9de9ac0e8dbc0bc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:eb:80:43:1b:76:e6:fb:68:20:44:84:c3:
66:dd:0f:b3:0d:b0:ff:51:6f:e3:2e:2d:86:c9:7f:
cc:e9:79:42:28:1a:56:8d:4f:b2:87:24:7d:b0:68:
df:a5:2c:9a:fd:7a:f9:28:f0:f5:fb:b3:e4:06:58:
81:cb:e5:c3:fd:78:57:b9:27:cc:2e:c4:fa:b9:6b:
ee:7e:9a:05:17:b4:08:e0:8f:e6:77:c8:7e:ca:80:
cd:40:f1:51:23:6d:39:8d:d6:a9:9a:aa:44:af:85:
d8:c3:ee:58:22:fb:68:0c:97:a4:9a:df:b6:6b:79:
77:b3:1f:9a:41:6b:ed:30:2a:95:70:39:dc:bd:69:
11:4b:b2:5e:20:51:74:79:8b:d1:47:e9:41:aa:23:
8e:dc:19:be:b4:8d:9e:3f:cb:c0:8f:6c:74:78:fa:
6a:5a:07:1a:77:e5:e6:2b:cc:a5:e2:a1:5f:c8:9b:
ed:24:b7:ec:89:28:44:3f:0e:45:b7:02:1f:30:74:
9a:6d:2f:89:ca:e0:95:1d:ab:f4:ef:8b:22:21:2c:
71:b4:ff:74:e9:80:d5:6c:b1:9a:39:c6:f3:68:5e:
9d:36:27:37:87:8c:8e:05:2f:9a:8a:d4:98:45:8f:
f8:a9:fd:9d:21:6d:50:92:50:43:4d:43:74:58:ce:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8B:68:D3:B0:41:A1:6F:D8:C5:3D:D9:DE:9A:C0:E8:DB:C0:BC:0F
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:88:bc:ae:72:74:a0:65:04:fa:2b:23:ae:96:0f:32:da:42:
18:20:cd:e3:fd:5d:e6:cd:88:6e:d5:5c:ff:91:54:75:93:e2:
c6:3c:a8:23:bd:ec:a3:f1:f6:8a:17:7e:f9:4f:56:e3:9c:3e:
b9:d3:0f:21:6d:80:7a:8c:92:89:5f:49:f2:c7:b8:fa:37:24:
5d:d4:e8:08:e0:fb:e7:ba:f1:de:0b:a3:b2:21:58:1b:b5:b9:
49:65:ec:70:63:2b:99:dd:dc:83:12:a7:07:fb:35:f2:71:dc:
9e:0f:97:5b:96:c0:b2:7e:3e:c8:07:ce:b6:e5:82:83:ae:82:
0b:f6:59:63:21:60:27:9b:b4:8b:2d:19:53:dc:96:36:3f:51:
17:31:b7:7d:2f:78:1f:6d:2b:83:40:ec:f1:49:0f:c0:78:63:
10:9e:23:44:05:e6:e6:3f:9d:9b:5b:10:37:4a:04:02:dd:ac:
5d:a8:91:a9:5a:53:b7:19:f5:99:e6:ca:e8:fe:9f:eb:1b:67:
2c:6c:65:39:ce:e3:30:13:06:07:c7:3a:c5:1f:9f:cc:ec:a4:
db:cf:18:c4:3d:2a:d4:5e:83:e6:5a:2c:ef:f4:f1:67:aa:98:
97:69:cd:9d:e1:f7:4e:99:e0:40:ea:19:df:2a:3a:4b:dd:b5:
30:38:7f:ea
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZkiwzmRuB9UhBd5nJB7DGNqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTQxNTk0YTkyYTlhZTA1YzY1YTA0ZjgwM2Q0MTFhNGY4
ODQyM2YwHhcNMjUwOTA3MDYwMDQzWhcNMjUwOTA4MDYwMDQzWjAzMTEwLwYDVQQD
EyhhZjhiNjhkM2IwNDFhMTZmZDhjNTNkZDlkZTlhYzBlOGRiYzBiYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1TrgEMbdub7aCBEhMNm3Q+zDbD/
UW/jLi2GyX/M6XlCKBpWjU+yhyR9sGjfpSya/Xr5KPD1+7PkBliBy+XD/XhXuSfM
LsT6uWvufpoFF7QI4I/md8h+yoDNQPFRI205jdapmqpEr4XYw+5YIvtoDJekmt+2
a3l3sx+aQWvtMCqVcDncvWkRS7JeIFF0eYvRR+lBqiOO3Bm+tI2eP8vAj2x0ePpq
Wgcad+XmK8yl4qFfyJvtJLfsiShEPw5FtwIfMHSabS+JyuCVHav074siISxxtP90
6YDVbLGaOcbzaF6dNic3h4yOBS+aitSYRY/4qf2dIW1QklBDTUN0WM7llQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFK+LaNOwQaFv2MU92d6awOjbwLwPMB8GA1UdIwQY
MBaAFPikFZSpKprgXGWgT4A9QRpPiEI/MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LUVZsS2txbXVCY1phQlBnRDFCR2stSVFqOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNjMwMzYyLTI5MGYtNDZiYy04NDQ2
LTZhN2MzYmEzMTQxMC8xLzEtS1FWbEtrcW11QmNaYUJQZ0QxQkdrLUlRajgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBhLzYzMDM2Mi0yOTBmLTQ2YmMtODQ0Ni02YTdjM2JhMzE0
MTAvMS8xLUtRVmxLa3FtdUJjWmFCUGdEMUJHay1JUWo4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYi8
rnJ0oGUE+isjrpYPMtpCGCDN4/1d5s2IbtVc/5FUdZPixjyoI73so/H2ihd++U9W
45w+udMPIW2AeoySiV9J8se4+jckXdToCOD757rx3gujsiFYG7W5SWXscGMrmd3c
gxKnB/s18nHcng+XW5bAsn4+yAfOtuWCg66CC/ZZYyFgJ5u0iy0ZU9yWNj9RFzG3
fS94H20rg0Ds8UkPwHhjEJ4jRAXm5j+dm1sQN0oEAt2sXaiRqVpTtxn1mebK6P6f
6xtnLGxlOc7jMBMGB8c6xR+fzOyk288YxD0q1F6D5los7/TxZ6qYl2nNneH3Tpng
QOoZ3yo6S921MDh/6g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:17 2025 by rpki-client