Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json)
Hash identifier: vMtxRM5UWy2br7+/MXrh1DuQjWIgv/uzCcXbyHOrqwg=
Subject key identifier: 40:5B:E3:45:6C:EA:25:44:19:44:9E:A1:45:EE:4D:06:AF:A4:AC:C3
Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Certificate serial: 019A2A443995EC8C04F1BC173BD19AA8F3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
Manifest number: 0E15
Signing time: Tue 28 Oct 2025 10:01:45 +0000
Manifest this update: Tue 28 Oct 2025 10:01:45 +0000
Manifest next update: Wed 29 Oct 2025 10:01:45 +0000
Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: L/Z8peEwXi0lwzXIBlhfFlxhVF1KosMvCkNibcsh6ss=)
2: o0NNJAdQ09Zlx7io8L7w4JsxeRk.roa (hash: GHDYyjn7cWOGvu2PuaUkyCHLa21ud2IleT+Ydwgziyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:39:95:ec:8c:04:f1:bc:17:3b:d1:9a:a8:f3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Validity
Not Before: Oct 28 10:01:45 2025 GMT
Not After : Oct 29 10:01:45 2025 GMT
Subject: CN=405be3456cea254419449ea145ee4d06afa4acc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:59:40:f4:6b:34:78:4a:0f:a9:1d:d6:a6:
4b:09:32:c3:e6:47:65:5f:60:cb:83:61:0f:bc:ab:
80:16:bb:23:54:a3:00:7a:bf:08:6b:ca:10:ec:b5:
0a:ec:bc:c5:a5:d7:6a:4a:d5:43:b9:6e:a3:96:20:
08:7e:43:c0:6b:c4:c2:fe:8b:85:bb:1f:b2:5f:36:
c0:ac:42:b3:1b:c5:c4:9e:27:4a:29:4e:4b:ae:68:
e4:1e:c1:39:58:83:0b:ac:7c:d0:b1:ae:ab:67:8d:
5c:f8:21:ce:e0:62:74:a6:7b:d9:e1:b8:a5:66:ed:
d6:36:e6:26:cf:c2:d7:52:37:6c:2d:77:59:6e:17:
02:2f:a6:3b:4b:b1:27:05:ae:b9:8c:0d:46:c6:b5:
76:8d:48:7c:2b:25:ee:68:ce:7b:9a:d8:43:2d:26:
14:f0:9e:a4:43:36:38:69:ce:69:b9:61:c0:a9:42:
b3:79:32:dc:80:db:5d:b1:13:7a:3f:54:ba:6d:e6:
49:ef:b2:17:87:74:53:d6:dd:63:f1:0e:a6:69:f4:
72:27:6d:63:77:53:b3:f8:b7:7d:23:b2:f1:94:2f:
b0:79:2b:80:8f:fa:b1:bb:78:4f:bd:12:04:0c:15:
a5:1e:a0:4c:6e:7e:7e:34:fd:90:e0:4e:ac:1e:e2:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5B:E3:45:6C:EA:25:44:19:44:9E:A1:45:EE:4D:06:AF:A4:AC:C3
X509v3 Authority Key Identifier:
keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1a:d9:01:d8:1e:30:94:06:e3:a1:57:00:bf:a5:ef:c0:65:
a2:e3:68:f5:60:59:20:20:37:de:85:88:f5:4c:bd:19:4e:e9:
02:77:b1:ea:30:43:9a:f5:67:ce:95:b6:82:e8:c4:ee:5e:f8:
24:ad:39:44:12:7b:9b:cf:8d:f1:13:cc:c4:82:4a:fc:7e:cc:
f2:02:ca:74:99:5c:bc:ce:f2:63:7b:36:75:ea:72:5b:3c:90:
5c:dd:db:c9:ff:bb:58:81:d9:ef:a4:9c:b9:05:4e:34:48:d5:
02:9f:1f:ec:8f:30:5d:50:65:c9:dd:df:d1:01:55:85:fb:cb:
ef:1a:dd:f9:8a:25:a5:d5:a9:47:a6:cc:7f:08:ab:e3:42:cb:
bf:d9:6f:74:cd:8a:40:55:17:52:70:d4:01:25:4f:20:39:51:
18:b1:c3:90:5d:10:3a:ec:3a:d4:a6:fe:05:79:5a:c4:23:50:
c1:78:7f:58:45:d2:90:12:ad:6b:7a:c2:50:03:6a:a6:c7:4a:
d8:e8:db:21:9b:02:e0:63:94:c6:e6:33:6d:9f:de:2e:8f:42:
07:c7:e6:2e:94:fd:7d:f7:39:7a:e4:cf:89:8a:a5:73:2d:98:
95:bc:98:c9:66:36:61:43:f8:8c:22:eb:33:ca:27:ce:18:85:
f1:f7:8a:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqRDmV7IwE8bwXO9GaqPPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZjg1NjIyZTIyZmM5NmNlYWNmNzMxMTRkODkwZjRmM2Fh
N2Q0OTUwHhcNMjUxMDI4MTAwMTQ1WhcNMjUxMDI5MTAwMTQ1WjAzMTEwLwYDVQQD
Eyg0MDViZTM0NTZjZWEyNTQ0MTk0NDllYTE0NWVlNGQwNmFmYTRhY2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsNZQPRrNHhKD6kd1qZLCTLD5kdl
X2DLg2EPvKuAFrsjVKMAer8Ia8oQ7LUK7LzFpddqStVDuW6jliAIfkPAa8TC/ouF
ux+yXzbArEKzG8XEnidKKU5LrmjkHsE5WIMLrHzQsa6rZ41c+CHO4GJ0pnvZ4bil
Zu3WNuYmz8LXUjdsLXdZbhcCL6Y7S7EnBa65jA1GxrV2jUh8KyXuaM57mthDLSYU
8J6kQzY4ac5puWHAqUKzeTLcgNtdsRN6P1S6beZJ77IXh3RT1t1j8Q6mafRyJ21j
d1Oz+Ld9I7LxlC+weSuAj/qxu3hPvRIEDBWlHqBMbn5+NP2Q4E6sHuJvMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBb40Vs6iVEGUSeoUXuTQavpKzDMB8GA1UdIwQY
MBaAFJL4ViLiL8ls6s9zEU2JD086p9SVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ZoV0l1SXZ5V3pxejNNUlRZa1BUenFuMUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8xMDAwZWItZmZkMC00ZmUzLWI3YWYt
MDczOGMyMzM0ZTdmLzEva3ZoV0l1SXZ5V3pxejNNUlRZa1BUenFuMUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8xMDAwZWItZmZkMC00ZmUzLWI3YWYtMDczOGMyMzM0ZTdm
LzEva3ZoV0l1SXZ5V3pxejNNUlRZa1BUenFuMUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhrZAdge
MJQG46FXAL+l78BlouNo9WBZICA33oWI9Uy9GU7pAnex6jBDmvVnzpW2gujE7l74
JK05RBJ7m8+N8RPMxIJK/H7M8gLKdJlcvM7yY3s2depyWzyQXN3byf+7WIHZ76Sc
uQVONEjVAp8f7I8wXVBlyd3f0QFVhfvL7xrd+YolpdWpR6bMfwir40LLv9lvdM2K
QFUXUnDUASVPIDlRGLHDkF0QOuw61Kb+BXlaxCNQwXh/WEXSkBKta3rCUANqpsdK
2OjbIZsC4GOUxuYzbZ/eLo9CB8fmLpT9ffc5euTPiYqlcy2YlbyYyWY2YUP4jCLr
M8onzhiF8feK8Q==
-----END CERTIFICATE-----
Generated at Tue Oct 28 18:39:06 2025 by rpki-client