Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: XCohDqgjE6coQKkM3Rpp85tZ8fJpp6SRMDiABrd7DGc=
Subject key identifier: 0F:83:5A:ED:02:B2:2D:52:32:AE:4A:49:10:BD:AC:CE:97:25:6B:64
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 019A72CA667749D85B21C76AFD115ED6400C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 1106
Signing time: Tue 11 Nov 2025 12:00:58 +0000
Manifest this update: Tue 11 Nov 2025 12:00:58 +0000
Manifest next update: Wed 12 Nov 2025 12:00:58 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: 6C3Qq+46H5ezsP/hxwHTVrPPF1jmYEIKBKm2e8XL+j4=)
2: YHCQmZQSLzGov9OQrOkdfN0GjNg.roa (hash: LJHw2nmrIzxX+QIoapfr72Feky+nKytQhXLYrU9sSE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:66:77:49:d8:5b:21:c7:6a:fd:11:5e:d6:40:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Nov 11 12:00:58 2025 GMT
Not After : Nov 12 12:00:58 2025 GMT
Subject: CN=0f835aed02b22d5232ae4a4910bdacce97256b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:73:9c:31:05:6b:99:91:2f:a1:d0:0a:c2:
71:a8:cd:fe:20:6a:41:f3:62:2e:8c:1c:21:8f:b0:
73:02:17:cb:52:98:5c:fe:9c:6d:f9:2a:be:18:63:
8e:dc:6b:1f:1e:fb:e6:e3:8c:33:82:d4:1e:0d:d4:
c3:6e:bb:ce:eb:9c:fe:d5:fe:c6:89:c8:b5:b0:69:
3b:33:b1:54:df:e1:8e:04:35:52:b1:d7:b5:4f:35:
df:32:da:c9:39:05:73:e8:de:97:c9:2a:28:3c:4a:
e2:10:a1:c3:cb:20:6e:c8:2c:14:59:22:3f:11:fd:
f8:dd:45:55:5f:4d:ea:00:df:8b:54:c1:9f:e7:32:
a3:02:78:48:1d:43:ca:02:53:b9:b2:f3:92:56:11:
22:4c:a9:81:f4:f5:72:36:8f:2b:82:97:7e:65:cc:
07:b5:75:cd:92:a5:54:32:e8:fe:42:c4:ee:dd:ee:
d1:74:e4:af:bc:03:37:a8:01:d4:be:53:a9:90:9e:
d1:1c:16:a9:07:56:d2:47:7e:d5:6b:0d:9d:6b:f9:
3e:cb:ea:56:62:31:73:c2:a5:05:3f:ad:a1:fe:84:
3f:2b:39:e3:94:60:c3:64:e7:85:54:50:26:87:ba:
9c:f2:34:53:ab:aa:33:53:f5:ed:e6:19:ce:b2:55:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:83:5A:ED:02:B2:2D:52:32:AE:4A:49:10:BD:AC:CE:97:25:6B:64
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3e:64:cc:7a:cf:62:a3:ec:df:4f:93:1a:50:c2:35:c4:31:
27:82:b4:f9:40:58:18:75:15:d6:c1:40:cb:82:f9:ee:c9:4e:
33:d8:51:62:f4:38:67:f8:96:02:51:00:bb:a6:15:71:dc:0c:
e0:b7:ec:f8:33:9d:e3:f6:1c:d5:36:fb:a3:f3:ad:45:8a:49:
2b:ab:41:33:96:46:ce:75:d9:02:b5:53:ff:e7:8b:65:56:81:
be:64:57:dd:89:e1:5c:64:ae:f7:03:36:1b:a3:87:56:76:d4:
6d:61:4c:95:ee:6a:0d:b4:5c:66:39:af:55:ff:c4:71:eb:e4:
d6:0f:57:0c:49:f5:be:f4:5b:8d:56:2e:48:81:d7:02:3c:30:
ce:b9:a6:c5:41:07:fa:cb:5c:06:4b:36:ce:64:48:a8:d7:9f:
8a:06:2a:eb:d8:12:01:bb:c3:e9:90:4f:48:8d:e4:63:ec:91:
d0:fc:26:fa:34:44:69:48:33:0c:8e:f0:bb:b6:cb:8c:3b:ca:
d6:15:24:40:16:e4:11:99:0e:72:63:de:aa:51:13:16:26:88:
20:98:68:4e:78:14:e0:fb:ba:55:36:87:1d:fb:aa:23:81:e6:
63:6d:01:61:b9:1f:32:e3:c6:b7:ba:23:f6:a9:c1:c7:9f:9e:
4a:5d:b6:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyymZ3SdhbIcdq/RFe1kAMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYWFjZmM1ZDVlM2IyNjhmMmM2YmE0MzM2YmNjOTQxZjVj
OGQ3YWYwHhcNMjUxMTExMTIwMDU4WhcNMjUxMTEyMTIwMDU4WjAzMTEwLwYDVQQD
EygwZjgzNWFlZDAyYjIyZDUyMzJhZTRhNDkxMGJkYWNjZTk3MjU2YjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF1znDEFa5mRL6HQCsJxqM3+IGpB
82IujBwhj7BzAhfLUphc/pxt+Sq+GGOO3GsfHvvm44wzgtQeDdTDbrvO65z+1f7G
ici1sGk7M7FU3+GOBDVSsde1TzXfMtrJOQVz6N6XySooPEriEKHDyyBuyCwUWSI/
Ef343UVVX03qAN+LVMGf5zKjAnhIHUPKAlO5svOSVhEiTKmB9PVyNo8rgpd+ZcwH
tXXNkqVUMuj+QsTu3e7RdOSvvAM3qAHUvlOpkJ7RHBapB1bSR37Vaw2da/k+y+pW
YjFzwqUFP62h/oQ/KznjlGDDZOeFVFAmh7qc8jRTq6ozU/Xt5hnOslXCOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+DWu0Csi1SMq5KSRC9rM6XJWtkMB8GA1UdIwQY
MBaAFCqqz8XV47Jo8sa6Qza8yUH1yNevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEt
NDRjYjRlOTUzMDI3LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEtNDRjYjRlOTUzMDI3
LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATz5kzHrP
YqPs30+TGlDCNcQxJ4K0+UBYGHUV1sFAy4L57slOM9hRYvQ4Z/iWAlEAu6YVcdwM
4Lfs+DOd4/Yc1Tb7o/OtRYpJK6tBM5ZGznXZArVT/+eLZVaBvmRX3YnhXGSu9wM2
G6OHVnbUbWFMle5qDbRcZjmvVf/Ecevk1g9XDEn1vvRbjVYuSIHXAjwwzrmmxUEH
+stcBks2zmRIqNefigYq69gSAbvD6ZBPSI3kY+yR0Pwm+jREaUgzDI7wu7bLjDvK
1hUkQBbkEZkOcmPeqlETFiaIIJhoTngU4Pu6VTaHHfuqI4HmY20BYbkfMuPGt7oj
9qnBx5+eSl22OA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:56 2025 by rpki-client