
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier: uEeHyjyF/f9hW/SbioZH7G1z5lWnWkPRQhioTLGc86g=
Subject key identifier: 0D:CB:16:7D:B8:E2:0F:13:F0:6C:D4:53:D4:90:61:25:27:5B:E8:6C
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial: 019888B24CA3922E85F11DBE80A477923972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number: 0B95
Signing time: Fri 08 Aug 2025 08:00:42 +0000
Manifest this update: Fri 08 Aug 2025 08:00:42 +0000
Manifest next update: Sat 09 Aug 2025 08:00:42 +0000
Files and hashes: 1: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: HTF+G80ribfUPmYiuwA3YvnzDZaxIfQbBr1Ott1EErw=)
2: pYcNr9sVfFTE36N21zQEaYvpSC8.roa (hash: qgrqjfITSKMfgl03Ej2JSBSRB998DdmMRLl3Rj6JmrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:4c:a3:92:2e:85:f1:1d:be:80:a4:77:92:39:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Validity
Not Before: Aug 8 08:00:42 2025 GMT
Not After : Aug 9 08:00:42 2025 GMT
Subject: CN=0dcb167db8e20f13f06cd453d4906125275be86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:f2:22:33:22:86:c3:4b:17:41:e4:d9:88:
6f:71:60:e9:c3:6e:71:5a:d5:20:94:44:2d:0b:29:
e9:a3:7c:6d:ac:fc:35:f4:44:97:fa:01:56:58:94:
89:87:41:37:8f:3b:0d:eb:21:f5:e8:6d:fa:70:32:
5e:2b:03:66:5b:fd:35:0c:a1:7f:fe:05:9c:45:44:
a4:9f:0f:76:f2:bd:7c:95:b1:9c:47:02:fd:ae:35:
be:a3:c8:a9:e4:64:15:41:48:df:a4:21:b1:f2:26:
00:14:4e:2c:4e:d9:96:51:a3:c0:7b:37:be:2d:87:
9a:e0:b5:2b:59:02:93:6a:30:a1:c6:ac:28:90:66:
35:4f:48:1b:2e:06:f3:e4:08:3d:6c:9f:97:e8:6a:
27:b0:81:e0:bc:0a:e2:a8:16:b9:91:9b:67:19:56:
34:7a:88:d7:1b:a7:e5:87:7a:48:f5:de:b1:02:3f:
c8:e0:60:b1:e7:f3:e7:14:b5:35:5f:b9:f7:73:fe:
9b:83:fe:79:69:b5:42:c7:3b:ab:05:7f:ed:08:96:
5b:21:72:20:6f:4a:4e:7f:c6:0f:70:04:ca:5f:79:
5d:22:7c:f3:40:d8:e9:cb:e0:fe:7a:da:e0:46:66:
60:5f:d1:57:7e:11:7b:06:eb:59:63:30:9d:2d:c0:
d3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CB:16:7D:B8:E2:0F:13:F0:6C:D4:53:D4:90:61:25:27:5B:E8:6C
X509v3 Authority Key Identifier:
keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:79:22:d6:33:93:0a:12:0e:48:d4:39:db:f2:3c:dc:ae:a4:
31:14:45:e7:60:13:5a:23:08:84:a4:59:de:8c:3e:45:70:6c:
12:c0:eb:05:61:a2:38:c5:d6:42:8e:5f:57:3f:5c:a6:69:2d:
1e:ed:7c:09:a0:a7:f3:0c:32:77:b0:d5:e6:dd:ca:6c:9a:45:
c7:e8:39:c3:ad:97:58:f0:49:0a:11:30:01:55:af:23:ce:39:
c3:0f:31:40:43:4f:d5:15:67:d4:9c:a9:47:98:26:1d:c0:37:
c9:7c:18:c7:df:a3:fc:6e:1c:50:06:cb:07:7a:bc:8d:70:59:
68:b6:76:c0:ce:15:c7:3e:5c:02:4e:1d:f1:be:34:e6:56:a9:
bf:de:e1:1f:cf:9b:79:76:9e:65:4d:49:16:ce:47:fb:33:a5:
56:b9:b3:8f:fd:fc:e2:08:e5:87:5d:19:22:3e:76:e8:b3:3c:
6d:82:65:37:b8:f1:77:a8:0e:ed:c8:c5:71:db:17:62:f2:72:
5e:2e:02:91:f5:40:ca:4e:04:aa:db:c1:3d:4a:5d:80:6d:2a:
7a:5d:c3:47:c2:c1:6e:ca:a7:35:4a:be:0d:c6:96:d6:7e:71:
b9:fc:ad:e1:c9:9e:d7:b7:7e:16:9f:9c:da:38:ee:a9:35:e2:
cb:84:eb:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiIskyjki6F8R2+gKR3kjlyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTE4MWY4YjBhYzkxM2RkYzM3N2UxOWQ1NjY0YjExYjE5
NzUzNzMwHhcNMjUwODA4MDgwMDQyWhcNMjUwODA5MDgwMDQyWjAzMTEwLwYDVQQD
EygwZGNiMTY3ZGI4ZTIwZjEzZjA2Y2Q0NTNkNDkwNjEyNTI3NWJlODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLryIjMihsNLF0Hk2YhvcWDpw25x
WtUglEQtCynpo3xtrPw19ESX+gFWWJSJh0E3jzsN6yH16G36cDJeKwNmW/01DKF/
/gWcRUSknw928r18lbGcRwL9rjW+o8ip5GQVQUjfpCGx8iYAFE4sTtmWUaPAeze+
LYea4LUrWQKTajChxqwokGY1T0gbLgbz5Ag9bJ+X6GonsIHgvAriqBa5kZtnGVY0
eojXG6flh3pI9d6xAj/I4GCx5/PnFLU1X7n3c/6bg/55abVCxzurBX/tCJZbIXIg
b0pOf8YPcATKX3ldInzzQNjpy+D+etrgRmZgX9FXfhF7ButZYzCdLcDTWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3LFn244g8T8GzUU9SQYSUnW+hsMB8GA1UdIwQY
MBaAFCqhgfiwrJE93Dd+GdVmSxGxl1NzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iOTg3NTUtNjVjNC00ZDE5LWIwNjkt
YTFhNTVlOGJlZTNmLzEvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iOTg3NTUtNjVjNC00ZDE5LWIwNjktYTFhNTVlOGJlZTNm
LzEvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnki1jOT
ChIOSNQ52/I83K6kMRRF52ATWiMIhKRZ3ow+RXBsEsDrBWGiOMXWQo5fVz9cpmkt
Hu18CaCn8wwyd7DV5t3KbJpFx+g5w62XWPBJChEwAVWvI845ww8xQENP1RVn1Jyp
R5gmHcA3yXwYx9+j/G4cUAbLB3q8jXBZaLZ2wM4Vxz5cAk4d8b405lapv97hH8+b
eXaeZU1JFs5H+zOlVrmzj/384gjlh10ZIj526LM8bYJlN7jxd6gO7cjFcdsXYvJy
Xi4CkfVAyk4EqtvBPUpdgG0qel3DR8LBbsqnNUq+DcaW1n5xufyt4cme17d+Fp+c
2jjuqTXiy4TrjQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:25 2025 by rpki-client