Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
File: K67n6kgtYqZxBj6sg3ia8585C3Q.mft (raw, json)
Hash identifier: UAdSl3PFaiRY6QMujn2dPzoocqYx4eg0fI12hRIfRsk=
Subject key identifier: 16:C2:92:E5:95:9D:20:5F:9B:9E:6C:0A:9A:6D:EE:4D:00:59:BB:8D
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Certificate issuer: /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial: 019A7112DCA041EF000D6DC88E70F8A2E0A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
Manifest number: 08DB
Signing time: Tue 11 Nov 2025 04:00:52 +0000
Manifest this update: Tue 11 Nov 2025 04:00:52 +0000
Manifest next update: Wed 12 Nov 2025 04:00:52 +0000
Files and hashes: 1: Jm_xi_s9C4HueOQpadAteqzC5iI.roa (hash: nbZ24fnK71pZ0lURFKjMf67hub71ZiuhlPq0UEHzTVw=)
2: K67n6kgtYqZxBj6sg3ia8585C3Q.crl (hash: b501A25xsRPBk8XlgHZCPMKroBM3hHMNrTu5yASK0rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:dc:a0:41:ef:00:0d:6d:c8:8e:70:f8:a2:e0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
Validity
Not Before: Nov 11 04:00:52 2025 GMT
Not After : Nov 12 04:00:52 2025 GMT
Subject: CN=16c292e5959d205f9b9e6c0a9a6dee4d0059bb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:32:3a:a4:c2:e0:f5:7c:5f:ae:44:10:05:
7b:af:d8:e7:56:dd:07:c4:37:75:70:f1:8b:6f:52:
bc:db:8b:98:2e:15:84:1e:c5:a8:24:4d:97:91:27:
23:f4:af:45:72:18:09:e3:a5:07:3a:67:2b:e3:4a:
89:3c:aa:d7:8f:4d:ca:54:d2:26:01:b7:9a:49:57:
63:b2:b7:5b:1e:2c:fa:49:94:d0:fb:ae:0c:4d:d5:
8f:8c:a4:08:22:b1:6b:4f:65:06:5f:be:b3:b5:ca:
1d:97:33:27:2a:89:3a:6e:c7:4d:3f:c2:0e:bf:4e:
e2:63:17:12:2e:f5:3e:9c:ff:32:ad:04:da:5a:e0:
06:d2:fe:bd:bf:42:e1:28:f9:b6:3e:12:44:24:58:
11:0a:fc:0a:25:bb:05:c3:7b:20:7a:8b:28:13:43:
cb:f3:4d:8a:9f:ee:f3:18:aa:e2:10:ef:9e:3e:26:
b1:47:b1:33:14:b9:93:60:26:f1:b8:30:71:94:ff:
84:6d:a8:de:d0:45:a7:e5:af:b4:f8:a7:95:02:27:
ff:a3:c1:f5:ef:46:8c:33:6b:99:91:fa:10:3b:81:
8d:12:36:f9:df:1b:75:11:6f:2f:98:e2:2d:b7:a1:
6e:f8:67:87:d1:85:d5:f5:91:40:96:a7:2e:7a:c8:
7f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C2:92:E5:95:9D:20:5F:9B:9E:6C:0A:9A:6D:EE:4D:00:59:BB:8D
X509v3 Authority Key Identifier:
keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c0:e6:b6:9b:c9:d0:cc:71:67:61:0b:09:23:29:5c:fe:a2:
fc:16:8d:c1:b1:db:cf:79:38:10:1c:55:81:1f:92:f6:39:2e:
da:38:b6:cd:0a:f8:c1:1a:fb:f1:4a:a7:a5:d1:16:7f:29:89:
8a:e3:06:ea:c5:eb:0e:4e:e1:e0:c7:2c:f9:e3:09:3d:da:8a:
87:7a:a5:8e:32:1e:8e:78:ab:d4:97:ce:0f:59:d5:8e:7d:45:
e8:04:b4:d8:c7:4c:0b:a3:16:17:5a:67:96:b5:b2:e9:f4:cd:
2b:7f:df:b6:3d:bc:a3:70:92:76:fd:0e:7b:ec:9f:df:bb:0c:
22:99:ee:f6:31:35:10:de:22:22:72:26:43:70:83:e2:99:ab:
9c:98:f0:c2:7b:85:44:18:e1:c6:53:ce:05:04:a1:46:ff:11:
99:26:05:e2:29:a8:9e:df:d2:4a:8b:92:53:c6:5f:23:8e:0f:
05:3e:81:df:2d:84:41:c9:a4:56:4e:2e:32:29:7d:d2:74:ca:
e3:62:80:4b:eb:8d:8f:d9:54:2d:df:19:7a:5b:1b:51:5b:bd:
7e:30:a8:18:de:fa:2d:89:86:f7:ab:90:76:9b:74:2f:01:a1:
13:a2:c5:c7:26:29:c5:ee:1e:64:18:a2:f2:c0:a3:9b:75:a3:
09:4b:56:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEtygQe8ADW3IjnD4ouCnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYWVlN2VhNDgyZDYyYTY3MTA2M2VhYzgzNzg5YWYzOWYz
OTBiNzQwHhcNMjUxMTExMDQwMDUyWhcNMjUxMTEyMDQwMDUyWjAzMTEwLwYDVQQD
EygxNmMyOTJlNTk1OWQyMDVmOWI5ZTZjMGE5YTZkZWU0ZDAwNTliYjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixAyOqTC4PV8X65EEAV7r9jnVt0H
xDd1cPGLb1K824uYLhWEHsWoJE2XkScj9K9FchgJ46UHOmcr40qJPKrXj03KVNIm
AbeaSVdjsrdbHiz6SZTQ+64MTdWPjKQIIrFrT2UGX76ztcodlzMnKok6bsdNP8IO
v07iYxcSLvU+nP8yrQTaWuAG0v69v0LhKPm2PhJEJFgRCvwKJbsFw3sgeosoE0PL
802Kn+7zGKriEO+ePiaxR7EzFLmTYCbxuDBxlP+Ebaje0EWn5a+0+KeVAif/o8H1
70aMM2uZkfoQO4GNEjb53xt1EW8vmOItt6Fu+GeH0YXV9ZFAlqcuesh/MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbCkuWVnSBfm55sCppt7k0AWbuNMB8GA1UdIwQY
MBaAFCuu5+pILWKmcQY+rIN4mvOfOQt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTU3ODQtMzcwNS00MThhLWI5OTQt
NzUyMWFmMWNlMjU5LzEvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMTU3ODQtMzcwNS00MThhLWI5OTQtNzUyMWFmMWNlMjU5
LzEvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMDmtpvJ
0MxxZ2ELCSMpXP6i/BaNwbHbz3k4EBxVgR+S9jku2ji2zQr4wRr78UqnpdEWfymJ
iuMG6sXrDk7h4Mcs+eMJPdqKh3qljjIejnir1JfOD1nVjn1F6AS02MdMC6MWF1pn
lrWy6fTNK3/ftj28o3CSdv0Oe+yf37sMIpnu9jE1EN4iInImQ3CD4pmrnJjwwnuF
RBjhxlPOBQShRv8RmSYF4imont/SSouSU8ZfI44PBT6B3y2EQcmkVk4uMil90nTK
42KAS+uNj9lULd8ZelsbUVu9fjCoGN76LYmG96uQdpt0LwGhE6LFxyYpxe4eZBii
8sCjm3WjCUtWow==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:04 2025 by rpki-client