Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json)
Hash identifier: OBR6O9Sqw1YYx/cVHzD1P9orH3Hkcbrgnl7k3dspMNk=
Subject key identifier: EA:7D:47:13:F1:51:AE:20:BB:AF:E1:6D:81:6F:47:1D:7C:F6:39:DE
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 019A4E18C3DBB5917AC95592AD4B6DFBBAB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
Manifest number: 1317
Signing time: Tue 04 Nov 2025 09:00:37 +0000
Manifest this update: Tue 04 Nov 2025 09:00:37 +0000
Manifest next update: Wed 05 Nov 2025 09:00:37 +0000
Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: jAiOp6hktP8DKLSnI8b5fG8HeauXxnmieuMHVrS0X34=)
2: kgzoK8BF6aDaCA7s2y2-oNomvaU.roa (hash: thv0x/fHxG1HTXAqa1M1DqYuduWmIxV8jm8IAHJKruM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c3:db:b5:91:7a:c9:55:92:ad:4b:6d:fb:ba:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: Nov 4 09:00:37 2025 GMT
Not After : Nov 5 09:00:37 2025 GMT
Subject: CN=ea7d4713f151ae20bbafe16d816f471d7cf639de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:c5:18:d6:64:eb:9b:a6:70:77:e0:21:04:
1a:e0:bf:da:57:5d:fd:e4:68:91:3c:d0:99:77:ff:
33:7c:55:08:75:7e:cc:19:15:5e:84:5d:3f:89:03:
b4:f2:49:50:2f:be:fe:15:56:60:44:5f:40:47:ae:
78:a1:0e:28:bd:f6:42:fd:84:5e:fd:ae:7b:81:e4:
d1:dd:20:69:e7:ed:6c:af:3b:af:30:e1:2a:dc:fe:
66:97:09:8a:8a:0c:cd:f3:11:e2:ef:5b:11:f9:b0:
2a:b6:45:d5:5c:84:61:f9:7c:75:1a:97:3c:40:4d:
7a:bf:d0:7f:66:83:ae:03:1a:d1:83:e5:49:f5:ce:
21:2d:8a:64:13:b8:56:87:8a:d1:42:1c:47:39:81:
91:cf:24:46:ef:63:57:ca:68:94:79:c0:3c:89:19:
30:40:eb:50:f3:56:56:7b:46:0b:33:0a:76:30:0f:
2e:38:cb:9f:02:d6:e8:17:cf:f3:5e:57:0b:19:c6:
fa:42:35:d4:56:8f:60:0b:e0:97:ad:c2:0c:00:4d:
65:03:90:58:78:fe:da:24:ac:a4:bf:21:95:37:ec:
3a:16:08:1d:e6:f8:0d:65:70:e4:b9:6e:29:ac:6e:
b3:12:2e:a5:ed:24:32:0c:98:1e:31:7b:51:30:88:
05:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7D:47:13:F1:51:AE:20:BB:AF:E1:6D:81:6F:47:1D:7C:F6:39:DE
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:59:ff:47:11:ff:e7:f6:e1:83:83:c9:ee:75:35:ae:f7:e0:
3f:4b:72:da:cb:d4:1b:81:95:d4:74:81:fa:56:a4:bc:fa:70:
af:e4:03:50:9f:3c:cd:57:c4:d1:1c:af:ec:5f:1e:82:a5:c0:
78:8d:38:cb:61:39:1c:9f:66:b0:3d:94:9d:ab:41:6e:59:36:
ff:53:80:4f:8f:7e:6a:cd:b5:18:18:79:f1:ab:e9:ae:a5:f7:
13:c6:ff:24:11:c0:4c:2b:94:1b:22:9b:cc:e9:9c:ad:de:94:
48:01:14:a0:a6:10:37:1a:e0:f6:89:9b:60:d6:a5:4d:ad:b4:
65:6d:79:77:92:0d:4e:c7:e9:a7:e6:03:e5:53:1c:8a:9f:27:
9e:af:14:b2:61:61:2b:2b:21:da:f3:ce:9c:71:9f:3c:b7:8a:
f0:d3:59:e0:ca:e6:a3:7a:aa:29:b7:e7:9a:6c:78:ce:fd:2d:
45:cc:18:2c:e4:27:4f:94:99:75:d2:21:d2:12:9e:48:eb:ad:
7e:40:cf:52:fc:ea:58:8f:01:f5:35:0c:43:04:2b:7e:1c:b3:
93:4c:15:7a:56:63:64:9e:bc:29:af:1a:69:a6:24:44:9e:b7:
9a:69:3b:e7:84:f6:f0:ce:3a:72:ab:2e:98:04:8e:a9:53:12:
f1:35:96:2b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpOGMPbtZF6yVWSrUtt+7qxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTQxNTk0YTkyYTlhZTA1YzY1YTA0ZjgwM2Q0MTFhNGY4
ODQyM2YwHhcNMjUxMTA0MDkwMDM3WhcNMjUxMTA1MDkwMDM3WjAzMTEwLwYDVQQD
EyhlYTdkNDcxM2YxNTFhZTIwYmJhZmUxNmQ4MTZmNDcxZDdjZjYzOWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+LFGNZk65umcHfgIQQa4L/aV139
5GiRPNCZd/8zfFUIdX7MGRVehF0/iQO08klQL77+FVZgRF9AR654oQ4ovfZC/YRe
/a57geTR3SBp5+1srzuvMOEq3P5mlwmKigzN8xHi71sR+bAqtkXVXIRh+Xx1Gpc8
QE16v9B/ZoOuAxrRg+VJ9c4hLYpkE7hWh4rRQhxHOYGRzyRG72NXymiUecA8iRkw
QOtQ81ZWe0YLMwp2MA8uOMufAtboF8/zXlcLGcb6QjXUVo9gC+CXrcIMAE1lA5BY
eP7aJKykvyGVN+w6Fggd5vgNZXDkuW4prG6zEi6l7SQyDJgeMXtRMIgFrwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOp9RxPxUa4gu6/hbYFvRx189jneMB8GA1UdIwQY
MBaAFPikFZSpKprgXGWgT4A9QRpPiEI/MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LUVZsS2txbXVCY1phQlBnRDFCR2stSVFqOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNjMwMzYyLTI5MGYtNDZiYy04NDQ2
LTZhN2MzYmEzMTQxMC8xLzEtS1FWbEtrcW11QmNaYUJQZ0QxQkdrLUlRajgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBhLzYzMDM2Mi0yOTBmLTQ2YmMtODQ0Ni02YTdjM2JhMzE0
MTAvMS8xLUtRVmxLa3FtdUJjWmFCUGdEMUJHay1JUWo4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARln/
RxH/5/bhg4PJ7nU1rvfgP0ty2svUG4GV1HSB+lakvPpwr+QDUJ88zVfE0Ryv7F8e
gqXAeI04y2E5HJ9msD2UnatBblk2/1OAT49+as21GBh58avprqX3E8b/JBHATCuU
GyKbzOmcrd6USAEUoKYQNxrg9ombYNalTa20ZW15d5INTsfpp+YD5VMcip8nnq8U
smFhKysh2vPOnHGfPLeK8NNZ4Mrmo3qqKbfnmmx4zv0tRcwYLOQnT5SZddIh0hKe
SOutfkDPUvzqWI8B9TUMQwQrfhyzk0wVelZjZJ68Ka8aaaYkRJ63mmk754T28M46
cqsumASOqVMS8TWWKw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:48 2025 by rpki-client