Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
File: k--iv5CiNyiFJyfxJu3mUobDymc.mft (raw, json)
Hash identifier: eGwqTOCLlGDr5GXF+FB2dauZLo3oWlKZ+CQ38gzStVo=
Subject key identifier: 7A:96:06:C8:33:03:13:90:5D:9B:0F:FF:5E:3D:FA:E3:20:63:01:E2
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 0199D10028EAC44869488377E85FB6698999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
Manifest number: 0498
Signing time: Sat 11 Oct 2025 02:01:12 +0000
Manifest this update: Sat 11 Oct 2025 02:01:12 +0000
Manifest next update: Sun 12 Oct 2025 02:01:12 +0000
Files and hashes: 1: 4s48aLOiVD4PAJlQi3evZjtsYHM.roa (hash: +jROjw0Y1Zl0VbxjrP2tZzucpLOm1pI3G+f+iJEafys=)
2: NfNAqOER9wuwQxKBNjji8NI0Rzg.roa (hash: 2u3dViZZEapET44foaIhQWMMbpM15mq1lfjKgtwOpEg=)
3: ZBxfDXEpCG0ayZxuToVasoI1ik8.roa (hash: B1VklKE9rrrVpqvXpbmoyfKWWVu36iKetX1MZELROAo=)
4: k--iv5CiNyiFJyfxJu3mUobDymc.crl (hash: Xp55a/VLJXLMv8BbmC5Ndb20m3mOV2q4VC2N5hDxgMM=)
5: qxvHfNjR31d0glTSIY-mgfrIS_A.roa (hash: xq+U0zDak1nk6R/C5yECXTx597LdOEIOL8DRV04FkGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d1:00:28:ea:c4:48:69:48:83:77:e8:5f:b6:69:89:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Oct 11 02:01:12 2025 GMT
Not After : Oct 12 02:01:12 2025 GMT
Subject: CN=7a9606c8330313905d9b0fff5e3dfae3206301e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:c5:72:96:53:5e:ba:8b:51:f0:3c:8f:e7:
00:ca:c0:58:b8:78:8b:e9:1a:f8:69:92:8f:4a:08:
b3:db:17:11:85:8f:0f:3c:cf:26:c1:94:ef:a9:e6:
d1:e7:00:aa:b0:53:6d:df:4c:6a:4e:72:19:66:fb:
7d:40:29:6e:7d:9d:9e:84:c7:bc:4d:66:90:df:d6:
0d:c0:73:19:50:98:4e:5e:63:10:0e:cc:22:5b:b8:
0d:9c:57:97:19:75:e2:ae:54:49:f7:8a:0c:8e:d0:
11:b3:80:0c:21:2d:af:36:a9:69:bd:12:34:80:0e:
86:94:5c:85:f0:ca:d1:2c:dc:36:75:0f:cb:d4:1f:
e1:f5:0c:09:29:de:df:db:c1:e1:5c:37:54:14:49:
27:2b:c9:32:cb:33:42:0b:1e:0c:9e:01:85:07:46:
84:74:25:7a:7c:aa:2e:28:f8:04:0b:38:d5:6a:1d:
3c:de:5f:d3:7b:9c:a0:f9:a3:2c:14:44:5a:0b:a5:
8a:c6:43:2e:da:e7:43:3d:e8:ab:57:d8:72:7a:a2:
60:d7:79:28:04:26:e6:ed:af:b7:0f:78:6a:8b:ce:
5f:6e:ae:76:6a:8a:b7:14:9f:fe:2e:be:c6:f6:49:
f0:9f:cf:cd:5f:bd:19:40:ea:3e:32:8c:cc:c9:34:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:96:06:C8:33:03:13:90:5D:9B:0F:FF:5E:3D:FA:E3:20:63:01:E2
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1a:83:bf:7b:f0:1a:49:b4:f7:eb:d1:82:46:2e:4e:9f:61:
9c:c6:44:03:c0:e8:9e:29:d6:e1:fe:ff:23:33:33:1b:31:b7:
7a:7b:fa:59:d8:1c:eb:21:e6:7c:59:69:66:b9:3b:eb:66:8e:
1b:62:fc:b8:3f:d5:83:f4:02:6f:37:22:c5:eb:87:e3:fe:cd:
c5:14:32:d9:fb:e0:0f:3c:00:6f:44:7c:1c:46:ff:f5:77:a2:
0b:87:5f:31:00:76:20:95:84:dd:44:df:73:69:c7:4f:fe:07:
eb:22:2a:91:d0:a8:a1:1b:d9:81:0d:6b:c9:09:f1:23:ad:42:
4c:a3:18:b2:87:45:f3:0e:37:c4:f6:85:da:06:fc:d6:09:ca:
f4:9a:14:e0:42:4b:bb:44:94:e4:c4:42:e5:21:c5:dc:ac:36:
77:26:b8:67:54:92:03:bf:21:0e:d8:cd:c5:cf:c3:c0:00:4d:
78:0e:a3:4c:5a:20:8f:05:1f:fc:b2:39:97:76:85:4e:cb:64:
f7:e5:1e:59:1f:89:b2:61:3d:ff:96:52:a6:09:d7:a4:a2:7b:
e5:55:bd:57:7f:6d:93:77:a0:6b:c5:b0:97:43:2e:10:aa:a3:
08:ae:ea:b3:c0:41:06:aa:1a:17:ed:bc:24:0c:f8:fa:51:38:
4b:ad:91:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnRACjqxEhpSIN36F+2aYmZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZWZhMmJmOTBhMjM3Mjg4NTI3MjdmMTI2ZWRlNjUyODZj
M2NhNjcwHhcNMjUxMDExMDIwMTEyWhcNMjUxMDEyMDIwMTEyWjAzMTEwLwYDVQQD
Eyg3YTk2MDZjODMzMDMxMzkwNWQ5YjBmZmY1ZTNkZmFlMzIwNjMwMWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIfFcpZTXrqLUfA8j+cAysBYuHiL
6Rr4aZKPSgiz2xcRhY8PPM8mwZTvqebR5wCqsFNt30xqTnIZZvt9QClufZ2ehMe8
TWaQ39YNwHMZUJhOXmMQDswiW7gNnFeXGXXirlRJ94oMjtARs4AMIS2vNqlpvRI0
gA6GlFyF8MrRLNw2dQ/L1B/h9QwJKd7f28HhXDdUFEknK8kyyzNCCx4MngGFB0aE
dCV6fKouKPgECzjVah083l/Te5yg+aMsFERaC6WKxkMu2udDPeirV9hyeqJg13ko
BCbm7a+3D3hqi85fbq52aoq3FJ/+Lr7G9knwn8/NX70ZQOo+MozMyTRK2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqWBsgzAxOQXZsP/149+uMgYwHiMB8GA1UdIwQY
MBaAFJPvor+QojcohScn8Sbt5lKGw8pnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDkt
NmFiYjFjY2I2MTUzLzEvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDktNmFiYjFjY2I2MTUz
LzEvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRqDv3vw
Gkm09+vRgkYuTp9hnMZEA8DoninW4f7/IzMzGzG3env6Wdgc6yHmfFlpZrk762aO
G2L8uD/Vg/QCbzcixeuH4/7NxRQy2fvgDzwAb0R8HEb/9XeiC4dfMQB2IJWE3UTf
c2nHT/4H6yIqkdCooRvZgQ1ryQnxI61CTKMYsodF8w43xPaF2gb81gnK9JoU4EJL
u0SU5MRC5SHF3Kw2dya4Z1SSA78hDtjNxc/DwABNeA6jTFogjwUf/LI5l3aFTstk
9+UeWR+JsmE9/5ZSpgnXpKJ75VW9V39tk3ega8Wwl0MuEKqjCK7qs8BBBqoaF+28
JAz4+lE4S62RGw==
-----END CERTIFICATE-----
Generated at Sat Oct 11 09:16:54 2025 by rpki-client