Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
File: KqFL_4NIDRDND767gLLLUJH8-C8.mft (raw, json)
Hash identifier: rDGPGNzXRj13DcsRGEaKlR13gvBCsYMZP7RiTCjxuEw=
Subject key identifier: 5A:D8:CA:B2:0D:4C:41:30:39:F1:46:8E:FA:D6:9A:04:6B:A2:75:57
Authority key identifier: 2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
Certificate issuer: /CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Certificate serial: 019A4E4FF14DAA712EDAF5BC6491975D49B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 10:00:53 +0000
Manifest this update: Tue 04 Nov 2025 10:00:53 +0000
Manifest next update: Wed 05 Nov 2025 10:00:53 +0000
Files and hashes: 1: 0zY-sGp0Ft0AM9Sf-NYlNdybUWg.roa (hash: eX1zp0GC5bqV6hOy4nxEisONQ8sH8x4mX06jY0ZL3fw=)
2: KqFL_4NIDRDND767gLLLUJH8-C8.crl (hash: 4TyRFF3/z5Mxg/ZGRkw/hVK5KK02Mp+1eudWqJdzMIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:f1:4d:aa:71:2e:da:f5:bc:64:91:97:5d:49:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Validity
Not Before: Nov 4 10:00:53 2025 GMT
Not After : Nov 5 10:00:53 2025 GMT
Subject: CN=5ad8cab20d4c413039f1468efad69a046ba27557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:93:b4:e9:6d:21:35:22:6d:8c:b4:77:c7:
16:d6:49:c1:62:dd:a1:d9:80:74:3b:17:9b:5d:de:
d8:06:2e:05:c1:94:43:5c:99:f3:b6:53:84:59:0c:
64:06:4e:d9:8b:34:60:dc:e5:65:f5:14:00:95:ba:
a4:dc:41:2f:41:18:c1:a3:71:94:ec:c5:3c:a6:51:
36:52:ef:91:a0:07:ed:23:b9:e0:e0:62:23:5d:f4:
fa:64:c1:59:e9:66:44:c2:66:46:d8:92:16:32:e9:
2f:f5:4a:7d:e2:6a:e1:83:71:e5:04:30:32:5f:0c:
39:6b:0f:99:32:b0:fa:13:e0:02:40:50:da:41:ac:
0d:c4:43:62:cd:86:ab:a8:02:37:88:42:e2:5b:b3:
e0:ff:be:16:01:77:91:c1:66:54:aa:d6:97:75:41:
40:6d:2d:0b:55:42:33:b0:8d:d2:8f:84:b5:b3:34:
dc:82:9b:72:6e:41:f6:7d:a8:21:1a:8a:09:7d:68:
fc:6a:57:dd:54:66:19:0c:7d:4e:80:06:b1:cf:54:
ee:b7:c9:57:18:3e:f4:bf:aa:25:14:4b:c3:c7:5c:
01:66:bc:f1:5c:2f:ef:03:59:53:21:8e:95:ac:8d:
37:43:ef:cd:69:4c:ef:f0:a2:40:b5:d8:69:e6:36:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D8:CA:B2:0D:4C:41:30:39:F1:46:8E:FA:D6:9A:04:6B:A2:75:57
X509v3 Authority Key Identifier:
keyid:2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ad:7a:47:41:fc:7c:fb:aa:03:aa:9c:e2:fa:da:3b:ff:f1:
39:43:95:ca:f0:9c:6c:bd:1c:75:39:a7:e0:35:61:9a:78:c3:
70:5b:7a:67:33:2a:8d:55:0f:c3:99:21:65:d6:26:bb:4e:36:
15:5e:bb:0d:67:fa:16:db:66:47:8b:eb:43:ea:ae:96:ca:e0:
67:57:f7:77:7d:74:5f:78:59:7b:c2:ec:fb:14:2a:e7:0a:07:
59:37:a9:30:33:ac:de:20:08:6f:2e:fe:2d:31:f8:e6:14:50:
24:b7:97:fc:17:e3:e8:6c:8b:62:15:be:fd:ed:16:1e:26:b2:
be:44:83:de:92:30:9c:03:dc:b4:46:e4:d5:bc:68:f6:f7:0a:
c2:5a:4d:82:7e:90:55:c4:59:60:2f:e8:e7:eb:0b:49:e4:11:
b5:05:d4:ee:b0:95:1e:30:bd:e0:2a:26:5d:c2:6b:a1:80:34:
91:a0:67:98:2c:00:3f:b9:23:bb:58:3a:94:dc:a6:73:f6:4c:
48:85:66:5b:4b:13:bc:b3:a5:38:98:fe:99:0d:2e:82:25:58:
b3:74:de:1c:25:7e:fd:e9:9b:0d:36:e4:22:10:8b:c9:84:ed:
7b:2b:e4:3e:07:11:f8:d1:2e:89:75:94:74:67:d5:91:36:1f:
3c:18:6a:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT/FNqnEu2vW8ZJGXXUm3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTE0YmZmODM0ODBkMTBjZDBmYmViYjgwYjJjYjUwOTFm
Y2Y4MmYwHhcNMjUxMTA0MTAwMDUzWhcNMjUxMTA1MTAwMDUzWjAzMTEwLwYDVQQD
Eyg1YWQ4Y2FiMjBkNGM0MTMwMzlmMTQ2OGVmYWQ2OWEwNDZiYTI3NTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWOTtOltITUibYy0d8cW1knBYt2h
2YB0OxebXd7YBi4FwZRDXJnztlOEWQxkBk7ZizRg3OVl9RQAlbqk3EEvQRjBo3GU
7MU8plE2Uu+RoAftI7ng4GIjXfT6ZMFZ6WZEwmZG2JIWMukv9Up94mrhg3HlBDAy
Xww5aw+ZMrD6E+ACQFDaQawNxENizYarqAI3iELiW7Pg/74WAXeRwWZUqtaXdUFA
bS0LVUIzsI3Sj4S1szTcgptybkH2faghGooJfWj8alfdVGYZDH1OgAaxz1Tut8lX
GD70v6olFEvDx1wBZrzxXC/vA1lTIY6VrI03Q+/NaUzv8KJAtdhp5japFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrYyrINTEEwOfFGjvrWmgRronVXMB8GA1UdIwQY
MBaAFCqhS/+DSA0QzQ++u4Cyy1CR/PgvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMTk4MTEtZmEyMy00N2IwLWI1Nzct
MTc2OThmODhjM2JkLzEvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iMTk4MTEtZmEyMy00N2IwLWI1NzctMTc2OThmODhjM2Jk
LzEvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh616R0H8
fPuqA6qc4vraO//xOUOVyvCcbL0cdTmn4DVhmnjDcFt6ZzMqjVUPw5khZdYmu042
FV67DWf6FttmR4vrQ+qulsrgZ1f3d310X3hZe8Ls+xQq5woHWTepMDOs3iAIby7+
LTH45hRQJLeX/Bfj6GyLYhW+/e0WHiayvkSD3pIwnAPctEbk1bxo9vcKwlpNgn6Q
VcRZYC/o5+sLSeQRtQXU7rCVHjC94ComXcJroYA0kaBnmCwAP7kju1g6lNymc/ZM
SIVmW0sTvLOlOJj+mQ0ugiVYs3TeHCV+/embDTbkIhCLyYTteyvkPgcR+NEuiXWU
dGfVkTYfPBhqVw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:22 2025 by rpki-client