Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier: I/M+IglGqfoMaE0IcQCvu87dtyIYxYBd5x2iUKVZDkY=
Subject key identifier: 6E:7A:12:E1:D4:D7:EA:37:76:D4:A2:32:44:A2:78:93:A2:BE:AD:C1
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: 019A4F629BC0F927DD3CE98B69A065AB48F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number: 1079
Signing time: Tue 04 Nov 2025 15:00:53 +0000
Manifest this update: Tue 04 Nov 2025 15:00:53 +0000
Manifest next update: Wed 05 Nov 2025 15:00:53 +0000
Files and hashes: 1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: sKT66Yq31UdPAH8IodX5pybtF1eh72Z7AjPqESTNF9U=)
2: kiF2H4Ucoq9Nw51li6ImqM3ctGg.roa (hash: gOoMaXdniQu2tAHNZ6SbwXijF8n71W3w0mmuL2WSkY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:9b:c0:f9:27:dd:3c:e9:8b:69:a0:65:ab:48:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: Nov 4 15:00:53 2025 GMT
Not After : Nov 5 15:00:53 2025 GMT
Subject: CN=6e7a12e1d4d7ea3776d4a23244a27893a2beadc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:91:6d:44:7c:70:bd:38:3c:dd:15:8d:f9:
86:b5:c9:77:de:6b:65:6f:5e:0a:e3:25:e7:8f:1f:
ba:36:5b:0b:ed:6c:f2:27:2b:ff:bf:8c:f3:72:bb:
12:f9:fa:3f:b0:76:4d:6d:d4:42:74:e3:b1:60:4b:
66:b3:56:bf:a5:a8:5c:a4:27:25:7f:71:6a:93:f7:
25:44:c0:df:1b:ee:4b:0d:d1:15:a1:aa:ea:ab:28:
5c:41:d1:10:15:38:aa:f1:bc:38:b0:28:bc:ac:8a:
d2:99:70:2b:fc:26:8c:05:c5:3b:77:f0:75:0d:ee:
a2:27:91:f4:6b:44:ad:59:e1:f6:5e:50:42:24:a2:
97:4b:65:97:01:c7:d4:2e:74:59:33:a0:ab:1d:68:
69:bb:82:f0:96:b5:ff:9b:44:f6:96:ab:87:8f:32:
51:6a:e9:10:21:b3:80:cc:2b:01:0c:49:7b:ba:e2:
a2:0e:1e:de:b1:e9:95:57:14:b0:27:9a:c5:ba:09:
72:9d:f4:93:07:37:41:9b:fc:58:b2:bf:a6:a4:ec:
2c:3b:7b:e0:8e:c8:8b:65:96:6d:b7:39:8e:39:53:
4a:84:fa:96:a9:ae:5d:ed:bc:62:b1:a3:53:22:11:
cb:6c:3d:f8:dc:28:05:6b:ad:91:aa:f4:75:28:10:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7A:12:E1:D4:D7:EA:37:76:D4:A2:32:44:A2:78:93:A2:BE:AD:C1
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4a:9f:83:bb:b8:00:35:31:e5:06:77:30:ec:ed:53:9f:28:
c0:91:e0:74:3c:89:9f:fb:01:1f:06:6d:e0:a8:67:2c:45:94:
07:12:d9:48:d4:fb:26:73:c7:35:15:45:48:6d:1b:65:9f:e6:
02:91:71:cf:00:a8:ed:7d:96:b9:8c:16:56:f3:39:28:7a:d3:
55:c2:00:31:15:47:ab:84:3d:e4:c3:a0:20:ba:ab:9d:54:14:
81:ad:7b:cf:aa:7d:47:99:1a:e9:d1:5b:f1:0c:f4:de:c1:ce:
9c:52:f4:20:8b:f0:52:5a:94:57:cf:a1:d6:b7:6c:e2:07:33:
65:48:0c:ca:fd:75:5f:14:d6:76:66:f5:78:db:48:11:0d:5e:
61:9c:5d:30:34:c8:0f:4e:00:4b:8d:ac:c9:ff:fd:74:55:6e:
07:54:1f:88:95:d2:d4:b6:e3:e9:bf:81:72:a8:f2:d5:50:fd:
83:d0:99:47:17:b2:ef:d1:61:85:71:64:12:0e:0b:fa:1c:65:
01:8d:1c:fe:33:05:1f:cb:06:ce:fb:4b:e9:12:a4:75:a8:45:
d0:0f:7a:3e:0c:7e:c4:a0:90:74:09:f5:99:1b:8f:99:2b:a4:
82:e7:f9:6a:37:62:13:f2:03:14:54:5f:65:ef:38:bf:a2:83:
4e:12:8c:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYpvA+SfdPOmLaaBlq0jyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDJjOTljYTczMmM2NGExOWM3ZDk3MzRhOThmYjI0ZTU0
NTU1NDkwHhcNMjUxMTA0MTUwMDUzWhcNMjUxMTA1MTUwMDUzWjAzMTEwLwYDVQQD
Eyg2ZTdhMTJlMWQ0ZDdlYTM3NzZkNGEyMzI0NGEyNzg5M2EyYmVhZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOaRbUR8cL04PN0VjfmGtcl33mtl
b14K4yXnjx+6NlsL7WzyJyv/v4zzcrsS+fo/sHZNbdRCdOOxYEtms1a/pahcpCcl
f3Fqk/clRMDfG+5LDdEVoarqqyhcQdEQFTiq8bw4sCi8rIrSmXAr/CaMBcU7d/B1
De6iJ5H0a0StWeH2XlBCJKKXS2WXAcfULnRZM6CrHWhpu4LwlrX/m0T2lquHjzJR
aukQIbOAzCsBDEl7uuKiDh7esemVVxSwJ5rFuglynfSTBzdBm/xYsr+mpOwsO3vg
jsiLZZZttzmOOVNKhPqWqa5d7bxisaNTIhHLbD343CgFa62RqvR1KBDUawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG56EuHU1+o3dtSiMkSieJOivq3BMB8GA1UdIwQY
MBaAFCkCyZynMsZKGcfZc0qY+yTlRVVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81NGNhMjQtNmU1Ni00N2QzLWE0Mjkt
YjY0OWE1NzhmODljLzEvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81NGNhMjQtNmU1Ni00N2QzLWE0MjktYjY0OWE1NzhmODlj
LzEvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0qfg7u4
ADUx5QZ3MOztU58owJHgdDyJn/sBHwZt4KhnLEWUBxLZSNT7JnPHNRVFSG0bZZ/m
ApFxzwCo7X2WuYwWVvM5KHrTVcIAMRVHq4Q95MOgILqrnVQUga17z6p9R5ka6dFb
8Qz03sHOnFL0IIvwUlqUV8+h1rds4gczZUgMyv11XxTWdmb1eNtIEQ1eYZxdMDTI
D04AS42syf/9dFVuB1QfiJXS1Lbj6b+Bcqjy1VD9g9CZRxey79FhhXFkEg4L+hxl
AY0c/jMFH8sGzvtL6RKkdahF0A96Pgx+xKCQdAn1mRuPmSukguf5ajdiE/IDFFRf
Ze84v6KDThKMFg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:55 2025 by rpki-client