Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier: iu9fqe0XGbibwJf+VTpDsDvp0ITk9YMKnqNVZfuQrdc=
Subject key identifier: 84:8F:AA:92:79:1D:88:EF:88:99:47:BA:66:BC:A1:F0:92:57:DF:2F
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: 019A2108C254F17163A082C6B6A49E67F49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number: 1061
Signing time: Sun 26 Oct 2025 15:00:13 +0000
Manifest this update: Sun 26 Oct 2025 15:00:13 +0000
Manifest next update: Mon 27 Oct 2025 15:00:13 +0000
Files and hashes: 1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: 1SSwgf3rVvOZfWeOf4+VvmT7EpQE2pnT02jVKOVrM/c=)
2: kiF2H4Ucoq9Nw51li6ImqM3ctGg.roa (hash: gOoMaXdniQu2tAHNZ6SbwXijF8n71W3w0mmuL2WSkY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:c2:54:f1:71:63:a0:82:c6:b6:a4:9e:67:f4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: Oct 26 15:00:13 2025 GMT
Not After : Oct 27 15:00:13 2025 GMT
Subject: CN=848faa92791d88ef889947ba66bca1f09257df2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:dc:44:9a:8a:24:a1:05:57:82:71:f6:0e:
d6:a9:86:19:9a:b3:a9:5e:e4:48:da:8c:2f:1a:8c:
1f:84:47:d0:1c:7f:4e:cf:78:01:40:ae:bd:f2:ae:
03:20:73:81:51:0e:c0:a6:fa:08:bc:44:f9:90:53:
fc:25:56:8b:19:bf:66:fe:4e:62:5e:ce:82:80:dc:
8d:2c:44:9a:13:4e:f4:8c:9a:41:cc:a9:c0:6f:b1:
3c:43:3e:fb:c4:9b:7d:41:2b:ba:2e:d9:4a:53:1a:
57:ae:05:f3:05:92:7b:a4:b3:d9:80:41:f8:aa:14:
34:9e:b0:06:57:d3:13:eb:ef:cc:40:0f:9c:90:58:
11:ff:81:32:3f:49:c2:18:7f:21:9b:c6:c7:96:dc:
2e:bd:9e:59:43:f5:22:26:a4:51:ee:bf:ad:cf:f1:
b8:24:71:3e:ab:2c:38:52:76:5b:88:60:5d:80:b3:
38:a9:90:66:fa:34:b8:cd:1b:41:96:89:87:2c:ae:
c5:96:a8:6b:c3:39:8b:14:a5:01:ff:f4:e0:88:bf:
27:e8:83:50:cb:a3:d9:d7:fe:8e:6a:9a:34:ee:fe:
7a:ad:77:c7:70:3c:f6:2e:35:ab:89:11:e9:24:39:
0c:1d:c0:bc:a2:84:b7:90:ba:a7:30:ac:62:d8:c9:
77:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8F:AA:92:79:1D:88:EF:88:99:47:BA:66:BC:A1:F0:92:57:DF:2F
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:78:a0:81:4d:dc:3f:0e:99:c2:a4:2d:ac:df:d5:81:ec:09:
bc:c3:46:f4:f6:09:4c:c7:eb:c5:ba:70:9c:30:52:96:9b:75:
af:db:f8:16:32:ef:56:4c:74:91:89:8b:32:4c:5a:74:4c:6e:
93:36:7d:ed:40:c3:ad:c7:57:88:db:44:3b:a9:45:32:ed:3b:
a5:84:02:9d:96:e3:f7:b4:8d:cc:ae:70:5a:b6:99:ee:1c:a0:
e8:cf:b5:4c:08:68:db:cf:6b:f4:e8:e2:4a:48:28:ff:68:6d:
f1:56:73:e4:47:2a:e0:cc:2b:54:60:f6:9b:c2:2d:f4:1b:94:
19:38:fc:a9:a3:38:32:47:33:47:cd:cd:8c:52:1c:60:82:14:
06:72:ef:94:34:ef:2f:f5:0c:0b:f5:c3:34:af:a9:cb:2b:ed:
09:b1:41:de:3f:13:ae:c0:68:37:ec:f6:3e:6a:df:b6:29:0e:
6b:96:7d:e7:46:a7:4d:82:ab:b7:1c:96:fa:6b:01:45:28:98:
e8:2f:f3:5f:e4:bd:81:79:ac:86:5b:d1:4e:3d:9f:03:19:5a:
80:e5:93:b4:36:9f:8a:82:d6:ed:71:40:de:ce:76:80:03:12:
56:ce:f8:57:cb:d1:da:97:f8:bd:bb:b0:25:d8:13:4b:96:53:
b2:dc:65:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCMJU8XFjoILGtqSeZ/SeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDJjOTljYTczMmM2NGExOWM3ZDk3MzRhOThmYjI0ZTU0
NTU1NDkwHhcNMjUxMDI2MTUwMDEzWhcNMjUxMDI3MTUwMDEzWjAzMTEwLwYDVQQD
Eyg4NDhmYWE5Mjc5MWQ4OGVmODg5OTQ3YmE2NmJjYTFmMDkyNTdkZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTbcRJqKJKEFV4Jx9g7WqYYZmrOp
XuRI2owvGowfhEfQHH9Oz3gBQK698q4DIHOBUQ7ApvoIvET5kFP8JVaLGb9m/k5i
Xs6CgNyNLESaE070jJpBzKnAb7E8Qz77xJt9QSu6LtlKUxpXrgXzBZJ7pLPZgEH4
qhQ0nrAGV9MT6+/MQA+ckFgR/4EyP0nCGH8hm8bHltwuvZ5ZQ/UiJqRR7r+tz/G4
JHE+qyw4UnZbiGBdgLM4qZBm+jS4zRtBlomHLK7FlqhrwzmLFKUB//TgiL8n6INQ
y6PZ1/6Oapo07v56rXfHcDz2LjWriRHpJDkMHcC8ooS3kLqnMKxi2Ml3BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISPqpJ5HYjviJlHuma8ofCSV98vMB8GA1UdIwQY
MBaAFCkCyZynMsZKGcfZc0qY+yTlRVVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81NGNhMjQtNmU1Ni00N2QzLWE0Mjkt
YjY0OWE1NzhmODljLzEvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81NGNhMjQtNmU1Ni00N2QzLWE0MjktYjY0OWE1NzhmODlj
LzEvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUniggU3c
Pw6ZwqQtrN/VgewJvMNG9PYJTMfrxbpwnDBSlpt1r9v4FjLvVkx0kYmLMkxadExu
kzZ97UDDrcdXiNtEO6lFMu07pYQCnZbj97SNzK5wWraZ7hyg6M+1TAho289r9Oji
Skgo/2ht8VZz5Ecq4MwrVGD2m8It9BuUGTj8qaM4MkczR83NjFIcYIIUBnLvlDTv
L/UMC/XDNK+pyyvtCbFB3j8TrsBoN+z2PmrftikOa5Z950anTYKrtxyW+msBRSiY
6C/zX+S9gXmshlvRTj2fAxlagOWTtDafioLW7XFA3s52gAMSVs74V8vR2pf4vbuw
JdgTS5ZTstxlIQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:19:41 2025 by rpki-client