
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
File: KvXkhmugmCASSm5REQT8QfpUGZU.mft (raw, json)
Hash identifier: Ej9JQRD/cI1BVuo54uTdrKRyqQWwGXKgMWs/GUh87Wg=
Subject key identifier: 29:44:7F:8B:31:6D:31:F1:A5:3C:15:62:E8:2E:5C:50:C9:ED:AC:37
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial: 019A1F88E6FA89385161F40C7D908A305889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
Manifest number: 1434
Signing time: Sun 26 Oct 2025 08:00:56 +0000
Manifest this update: Sun 26 Oct 2025 08:00:56 +0000
Manifest next update: Mon 27 Oct 2025 08:00:56 +0000
Files and hashes: 1: 5r4roNSh8TWW8XLP5gLpTUYEtC8.roa (hash: AktxI+V17na/V+Hz9k9ha+hVm279Tijdqa0CvwmI/7Q=)
2: Gxhnb8KOTrVvxDF8yuKOv2GjqtU.roa (hash: QO/QE2IRS/pPOvcN+3PpcsYmJwErYvPF742Zst4rEP8=)
3: KvXkhmugmCASSm5REQT8QfpUGZU.crl (hash: W1l+AFK5CWLMkM89qBcpl9Y14YiEQJDiQwVf3H1/Jus=)
4: TtvNTrhsW3wjOkk9eOHVRXZxsEg.roa (hash: gPmUeUcfbob5JNxYnTxCOkrudyCPlteleGt+PSj2/00=)
5: ekdDszvqGt_eJ_hGO_xIWYzbzAA.roa (hash: zqr+o3bWODGGGIrhIMHHh91Y/JEASXYkOBODwzmfRz8=)
6: iIQaeGWo37d4w_fiU_R29carNk8.roa (hash: FbNS7L7XPQULlvHXJ6Yq35UuABtJRjSmhRiCGjDk29Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:e6:fa:89:38:51:61:f4:0c:7d:90:8a:30:58:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
Validity
Not Before: Oct 26 08:00:56 2025 GMT
Not After : Oct 27 08:00:56 2025 GMT
Subject: CN=29447f8b316d31f1a53c1562e82e5c50c9edac37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:d7:b0:0a:83:54:57:74:14:d3:89:78:71:
c6:97:4b:8a:56:62:76:a4:a0:19:29:9b:1d:8b:dc:
ee:e0:db:c7:8b:2c:4c:b2:3c:38:eb:2d:95:d8:bc:
f7:ae:5e:0a:8a:8a:c0:02:04:a7:e4:57:dc:46:c3:
fd:f3:83:58:05:cd:35:6b:bd:0d:5d:67:c6:43:eb:
bd:4e:e7:ee:24:2e:f9:ae:dd:cf:11:9c:b9:7b:f2:
9d:a4:a0:99:bf:12:12:ca:ce:04:53:ae:98:ba:04:
0b:e3:cf:41:20:b3:e7:29:85:bc:af:a1:4f:5e:1d:
f0:17:0e:61:59:0c:e3:fb:e4:ff:bb:d8:71:83:d1:
c5:30:d4:8d:ed:4f:58:a2:4d:55:d2:32:e5:24:cc:
01:51:5b:27:96:2a:ea:b4:50:c2:b0:44:57:91:46:
e7:bc:a3:f7:a1:bc:15:b2:3b:8e:27:7e:37:0f:f8:
cf:59:d7:cb:21:09:23:5b:c2:a2:4d:ad:31:c3:8b:
78:de:4d:bb:6e:32:88:f9:3f:63:64:a3:29:83:db:
af:19:d8:10:7f:29:a5:8b:55:1b:63:ed:8f:3f:46:
51:7e:90:44:44:e8:82:d1:b6:6f:a9:b1:1d:b6:30:
eb:d0:cf:cb:79:af:85:85:82:27:07:6c:10:3a:c3:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:44:7F:8B:31:6D:31:F1:A5:3C:15:62:E8:2E:5C:50:C9:ED:AC:37
X509v3 Authority Key Identifier:
keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:55:e7:2e:2b:0c:88:96:ea:16:3a:fb:28:68:ae:68:94:39:
e8:96:b6:ad:2d:03:59:cb:88:52:a3:1c:a4:02:05:45:f0:dc:
29:70:9a:86:0a:93:89:ad:cf:c6:c9:8c:d7:fe:c8:92:d9:0c:
5a:f9:84:28:86:8a:5d:2d:4d:09:92:d0:3d:c3:bb:4e:6a:ef:
05:f2:8c:78:91:21:db:87:30:1e:d2:ec:af:c9:cb:de:70:c7:
b5:8f:b4:0d:3f:59:cc:60:53:c9:4f:25:62:32:56:41:3e:0a:
80:2b:25:c6:86:f0:b2:4c:83:ce:d4:ad:30:34:e8:20:39:bd:
ab:34:a7:cc:0c:87:0a:61:cc:18:31:22:60:24:4e:88:e2:04:
6a:bd:e6:d7:1d:2f:85:e5:26:61:0b:ad:94:81:f9:f4:1a:19:
8a:1e:16:b2:67:45:44:88:67:a2:d0:13:56:4f:8d:22:0c:e5:
5a:af:69:8b:5d:09:e5:03:a2:c6:fd:aa:fb:4d:4b:72:52:64:
ca:a1:3b:ff:83:63:eb:42:cd:03:0d:2b:66:b5:ec:64:43:67:
c4:03:85:e9:90:91:32:ba:5a:16:53:7a:b9:bf:fe:a7:73:a9:
54:3b:bb:54:52:f5:9e:05:8f:3e:96:7e:80:76:a8:a8:b0:fa:
36:9b:48:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofiOb6iThRYfQMfZCKMFiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZjVlNDg2NmJhMDk4MjAxMjRhNmU1MTExMDRmYzQxZmE1
NDE5OTUwHhcNMjUxMDI2MDgwMDU2WhcNMjUxMDI3MDgwMDU2WjAzMTEwLwYDVQQD
EygyOTQ0N2Y4YjMxNmQzMWYxYTUzYzE1NjJlODJlNWM1MGM5ZWRhYzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzLXsAqDVFd0FNOJeHHGl0uKVmJ2
pKAZKZsdi9zu4NvHiyxMsjw46y2V2Lz3rl4KiorAAgSn5FfcRsP984NYBc01a70N
XWfGQ+u9TufuJC75rt3PEZy5e/KdpKCZvxISys4EU66YugQL489BILPnKYW8r6FP
Xh3wFw5hWQzj++T/u9hxg9HFMNSN7U9Yok1V0jLlJMwBUVsnlirqtFDCsERXkUbn
vKP3obwVsjuOJ343D/jPWdfLIQkjW8KiTa0xw4t43k27bjKI+T9jZKMpg9uvGdgQ
fymli1UbY+2PP0ZRfpBEROiC0bZvqbEdtjDr0M/Lea+FhYInB2wQOsOnYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClEf4sxbTHxpTwVYuguXFDJ7aw3MB8GA1UdIwQY
MBaAFCr15IZroJggEkpuUREE/EH6VBmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNTI3NjEtMDE5YS00ZGU1LTk1N2Qt
YzMyMGU1MGEzYzc5LzEvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yNTI3NjEtMDE5YS00ZGU1LTk1N2QtYzMyMGU1MGEzYzc5
LzEvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlXnLisM
iJbqFjr7KGiuaJQ56Ja2rS0DWcuIUqMcpAIFRfDcKXCahgqTia3PxsmM1/7IktkM
WvmEKIaKXS1NCZLQPcO7TmrvBfKMeJEh24cwHtLsr8nL3nDHtY+0DT9ZzGBTyU8l
YjJWQT4KgCslxobwskyDztStMDToIDm9qzSnzAyHCmHMGDEiYCROiOIEar3m1x0v
heUmYQutlIH59BoZih4WsmdFRIhnotATVk+NIgzlWq9pi10J5QOixv2q+01LclJk
yqE7/4Nj60LNAw0rZrXsZENnxAOF6ZCRMrpaFlN6ub/+p3OpVDu7VFL1ngWPPpZ+
gHaoqLD6NptIZw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 17:39:54 2025 by rpki-client