Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
File: KqFL_4NIDRDND767gLLLUJH8-C8.mft (raw, json)
Hash identifier: 0jxa7075tf1/HNnx3I8bpzYP3xrljWJmjk3gAbOjZv8=
Subject key identifier: 07:3F:99:9C:4A:E0:9B:BB:26:F6:E6:22:48:AB:20:9E:B1:9A:5D:DD
Authority key identifier: 2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
Certificate issuer: /CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Certificate serial: 01977FE93B7399B8EFC0CBDFBAC40A0D06B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
Manifest number: 1597
Signing time: Tue 17 Jun 2025 22:01:20 +0000
Manifest this update: Tue 17 Jun 2025 22:01:20 +0000
Manifest next update: Wed 18 Jun 2025 22:01:20 +0000
Files and hashes: 1: 0zY-sGp0Ft0AM9Sf-NYlNdybUWg.roa (hash: eX1zp0GC5bqV6hOy4nxEisONQ8sH8x4mX06jY0ZL3fw=)
2: KqFL_4NIDRDND767gLLLUJH8-C8.crl (hash: cNukk9a1fORp09gkScHxU+SDJZkdulntAJppZnkkTBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:e9:3b:73:99:b8:ef:c0:cb:df:ba:c4:0a:0d:06:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Validity
Not Before: Jun 17 22:01:20 2025 GMT
Not After : Jun 18 22:01:20 2025 GMT
Subject: CN=073f999c4ae09bbb26f6e62248ab209eb19a5ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a1:5e:ee:5a:6e:44:1f:1c:3d:a5:b7:54:57:
63:10:91:de:ad:0e:56:39:cf:f6:e0:18:9a:83:3c:
2c:54:68:eb:f3:b2:9b:e9:04:98:a4:a5:6c:39:9d:
66:b6:8a:09:fe:83:6b:93:b8:e8:b4:93:72:1f:6f:
d3:1b:33:d2:32:e3:9b:27:63:7a:e0:d0:80:e3:39:
a9:1e:d9:1a:38:64:ea:97:5f:02:55:7b:6d:7d:30:
45:9f:11:91:05:d5:9d:06:44:8a:f0:06:83:20:4d:
4d:a8:7b:82:dc:16:f6:8e:c2:a7:51:49:c7:cb:bb:
28:64:e4:25:fb:c3:fd:5f:ad:66:9b:10:06:27:32:
cf:30:e4:44:61:b1:ba:4b:db:e9:93:91:d2:b8:46:
05:67:d8:65:ac:ae:c1:2c:25:2e:89:42:d7:dd:ea:
2e:1d:57:0e:85:ee:18:8f:0a:34:87:97:b1:51:6b:
1a:33:3b:22:36:f0:5c:ba:a1:03:b1:53:44:77:1a:
b0:b4:b2:25:a0:38:28:76:c3:1d:78:4d:c2:e9:34:
7d:c2:ea:ee:4e:cb:84:9f:31:c2:4c:af:1e:2b:19:
a0:20:ec:0d:0a:38:29:00:14:95:d4:f5:99:1b:8e:
65:a4:77:52:16:25:10:30:59:ea:6f:f1:44:cf:5c:
d2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3F:99:9C:4A:E0:9B:BB:26:F6:E6:22:48:AB:20:9E:B1:9A:5D:DD
X509v3 Authority Key Identifier:
keyid:2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4d:15:f2:d9:38:fb:5e:ec:88:de:63:7e:b2:2c:e7:32:e8:
5d:52:bc:34:72:10:a0:85:e1:dd:07:1c:60:fe:60:60:8f:2b:
e0:13:3d:ab:03:77:ba:cf:6a:31:d0:4f:ca:33:aa:bc:bb:19:
36:bc:ef:6f:17:b9:63:93:44:a8:4d:4c:f6:fd:a5:29:83:96:
97:b2:63:47:08:50:00:f9:97:e8:c3:7e:65:bf:b2:91:5e:72:
d6:24:77:37:06:31:79:76:25:e0:27:e5:11:ab:d8:8a:16:1b:
90:1e:d7:4a:de:fb:0f:63:bd:8c:a4:fc:ae:84:e5:20:ec:61:
61:a9:a4:59:55:23:aa:f1:e7:19:2a:05:74:ae:7a:fc:00:2d:
6a:c4:41:45:dc:fb:92:9e:75:01:c9:e3:ce:27:73:95:a2:e0:
a0:4a:14:71:d1:6e:4c:b7:7b:93:8b:9c:55:a1:fc:e3:ea:6a:
e0:ae:86:4e:d6:48:5e:ee:d6:ba:be:c8:3f:3f:43:3b:14:35:
25:5a:81:b0:55:4f:f2:2b:d1:8f:80:74:af:0d:67:dc:7c:2d:
86:bf:8a:ae:60:42:02:1d:6b:43:a0:a1:92:60:75:d6:47:a8:
0e:dc:6e:3d:4f:58:48:38:5f:b0:9e:17:0b:40:bd:f7:5c:90:
aa:c1:65:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd/6TtzmbjvwMvfusQKDQa0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTE0YmZmODM0ODBkMTBjZDBmYmViYjgwYjJjYjUwOTFm
Y2Y4MmYwHhcNMjUwNjE3MjIwMTIwWhcNMjUwNjE4MjIwMTIwWjAzMTEwLwYDVQQD
EygwNzNmOTk5YzRhZTA5YmJiMjZmNmU2MjI0OGFiMjA5ZWIxOWE1ZGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qFe7lpuRB8cPaW3VFdjEJHerQ5W
Oc/24BiagzwsVGjr87Kb6QSYpKVsOZ1mtooJ/oNrk7jotJNyH2/TGzPSMuObJ2N6
4NCA4zmpHtkaOGTql18CVXttfTBFnxGRBdWdBkSK8AaDIE1NqHuC3Bb2jsKnUUnH
y7soZOQl+8P9X61mmxAGJzLPMOREYbG6S9vpk5HSuEYFZ9hlrK7BLCUuiULX3eou
HVcOhe4Yjwo0h5exUWsaMzsiNvBcuqEDsVNEdxqwtLIloDgodsMdeE3C6TR9wuru
TsuEnzHCTK8eKxmgIOwNCjgpABSV1PWZG45lpHdSFiUQMFnqb/FEz1zSIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAc/mZxK4Ju7JvbmIkirIJ6xml3dMB8GA1UdIwQY
MBaAFCqhS/+DSA0QzQ++u4Cyy1CR/PgvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMTk4MTEtZmEyMy00N2IwLWI1Nzct
MTc2OThmODhjM2JkLzEvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iMTk4MTEtZmEyMy00N2IwLWI1NzctMTc2OThmODhjM2Jk
LzEvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE00V8tk4
+17siN5jfrIs5zLoXVK8NHIQoIXh3QccYP5gYI8r4BM9qwN3us9qMdBPyjOqvLsZ
Nrzvbxe5Y5NEqE1M9v2lKYOWl7JjRwhQAPmX6MN+Zb+ykV5y1iR3NwYxeXYl4Cfl
EavYihYbkB7XSt77D2O9jKT8roTlIOxhYamkWVUjqvHnGSoFdK56/AAtasRBRdz7
kp51AcnjzidzlaLgoEoUcdFuTLd7k4ucVaH84+pq4K6GTtZIXu7Wur7IPz9DOxQ1
JVqBsFVP8ivRj4B0rw1n3Hwthr+KrmBCAh1rQ6ChkmB11keoDtxuPU9YSDhfsJ4X
C0C991yQqsFlnA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:55:47 2025 by rpki-client