Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: 4rB7k6S8Dpo4nb8UYi17/+GDcvo6d9vyToYWCkLCmXM=
Subject key identifier: 85:F1:EE:2F:F4:1E:60:57:E5:19:C7:CE:48:6A:03:96:8E:4D:67:64
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 019A552D941F7F2197BA77C57FB4CF06B615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 05DE
Signing time: Wed 05 Nov 2025 18:00:41 +0000
Manifest this update: Wed 05 Nov 2025 18:00:41 +0000
Manifest next update: Thu 06 Nov 2025 18:00:41 +0000
Files and hashes: 1: 3IEfkjrujN1otjC8OV1_yIF0n7I.roa (hash: Wz9JDIVRLlsFUBi000ABJhgJex6MuDmGadz9gz6sp1w=)
2: ZStJjyYeeW80s3UrenWKL6Fviiw.roa (hash: QylBnhEyvnv79g3JL425L8t6RW7UscFPY8hGIf7mOwQ=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: XFlEZW+WBUh0K70URqhdnKVZkx88PNLlx1pRo7anzJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:94:1f:7f:21:97:ba:77:c5:7f:b4:cf:06:b6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Nov 5 18:00:41 2025 GMT
Not After : Nov 6 18:00:41 2025 GMT
Subject: CN=85f1ee2ff41e6057e519c7ce486a03968e4d6764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:41:53:2c:1b:6c:21:31:26:6c:14:9e:dd:
b8:32:71:a6:22:1e:e7:a1:38:25:a3:d0:25:01:42:
6a:f2:82:cd:64:f9:a3:6d:20:65:be:eb:2a:e2:3e:
e8:5c:86:be:6e:d3:2e:95:d5:21:43:bf:99:d4:75:
29:7b:47:ee:84:f8:4a:70:52:e6:d3:b0:6e:8d:89:
9e:66:07:57:e4:37:e6:93:2c:cd:57:fb:7a:be:da:
69:7e:94:18:f4:70:cd:31:d5:00:8f:54:7e:88:b1:
8f:97:14:5c:dd:e7:58:c8:23:c1:26:90:07:39:f6:
ce:e3:c5:a5:d6:90:4d:1c:07:5a:ce:2a:a3:d6:01:
2c:f3:77:61:62:91:68:99:57:45:c4:c3:bc:d8:54:
36:f3:3f:4a:5c:9f:eb:ba:53:f6:aa:d9:53:65:cd:
2c:09:11:df:f6:a1:f5:c8:4e:f6:ae:fe:d6:2e:fd:
2e:a2:f5:52:2d:fc:17:3e:f9:dd:09:35:bf:91:59:
11:99:e4:e2:67:7f:a7:94:40:35:d8:49:12:96:97:
99:75:b5:50:36:00:9e:3f:b3:92:fc:da:cd:09:dd:
44:bd:8c:59:ff:c9:cb:bd:84:3e:12:70:79:a6:ce:
c4:dd:7f:65:88:c7:56:16:16:11:5d:80:9d:25:01:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F1:EE:2F:F4:1E:60:57:E5:19:C7:CE:48:6A:03:96:8E:4D:67:64
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:49:05:53:29:a4:90:f7:af:76:6f:02:d9:b0:af:b6:b6:b9:
a2:66:09:56:f5:fc:65:78:64:4f:30:7a:eb:b0:56:b0:fb:ec:
fe:5e:27:b4:12:42:e7:cf:0f:d0:48:a7:5e:f5:8c:fe:2e:54:
76:bf:c6:80:15:04:fe:50:d5:1b:76:18:e5:b8:25:89:31:0a:
33:5b:c6:ca:92:ef:f2:b4:45:74:86:05:96:9d:80:67:67:fd:
d9:89:47:a5:eb:b6:a4:f9:25:ca:4d:be:ed:ef:29:18:d4:3e:
1f:98:e1:20:78:b4:3e:d8:a1:68:c8:69:d9:f6:7e:0c:fa:e6:
cc:5c:8b:f9:c7:00:60:30:81:30:f0:1a:22:16:da:25:2f:ea:
ac:7d:cc:e9:28:97:b1:ce:93:85:e5:c3:11:12:ee:f6:9b:4c:
8e:34:8e:e5:c4:9a:2d:4b:3a:57:14:42:03:f3:71:e4:8a:81:
75:7c:01:c2:a9:1f:b1:26:f7:39:d2:0a:9b:dd:8d:12:49:7b:
1d:ef:35:3b:17:7c:68:dc:e9:38:e6:23:5e:97:60:ba:cf:46:
91:6c:0d:34:66:31:58:b4:48:a1:00:ec:d3:2a:be:d7:f2:bd:
92:8b:94:e7:73:9b:53:6c:a5:84:c9:cc:57:2b:b2:4b:21:2a:
99:a8:b2:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpVLZQffyGXunfFf7TPBrYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwODc4YzM5NjI0YWVkZTM5MjllMTdjY2Q5NTg3OGMyOTJi
MmYzNTEwHhcNMjUxMTA1MTgwMDQxWhcNMjUxMTA2MTgwMDQxWjAzMTEwLwYDVQQD
Eyg4NWYxZWUyZmY0MWU2MDU3ZTUxOWM3Y2U0ODZhMDM5NjhlNGQ2NzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx1BUywbbCExJmwUnt24MnGmIh7n
oTglo9AlAUJq8oLNZPmjbSBlvusq4j7oXIa+btMuldUhQ7+Z1HUpe0fuhPhKcFLm
07BujYmeZgdX5DfmkyzNV/t6vtppfpQY9HDNMdUAj1R+iLGPlxRc3edYyCPBJpAH
OfbO48Wl1pBNHAdaziqj1gEs83dhYpFomVdFxMO82FQ28z9KXJ/rulP2qtlTZc0s
CRHf9qH1yE72rv7WLv0uovVSLfwXPvndCTW/kVkRmeTiZ3+nlEA12EkSlpeZdbVQ
NgCeP7OS/NrNCd1EvYxZ/8nLvYQ+EnB5ps7E3X9liMdWFhYRXYCdJQHIswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXx7i/0HmBX5RnHzkhqA5aOTWdkMB8GA1UdIwQY
MBaAFJCHjDliSu3jkp4XzNlYeMKSsvNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzkt
ZDVhZWZjY2M5NTIyLzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzktZDVhZWZjY2M5NTIy
LzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEkFUymk
kPevdm8C2bCvtra5omYJVvX8ZXhkTzB667BWsPvs/l4ntBJC588P0EinXvWM/i5U
dr/GgBUE/lDVG3YY5bgliTEKM1vGypLv8rRFdIYFlp2AZ2f92YlHpeu2pPklyk2+
7e8pGNQ+H5jhIHi0PtihaMhp2fZ+DPrmzFyL+ccAYDCBMPAaIhbaJS/qrH3M6SiX
sc6TheXDERLu9ptMjjSO5cSaLUs6VxRCA/Nx5IqBdXwBwqkfsSb3OdIKm92NEkl7
He81Oxd8aNzpOOYjXpdgus9GkWwNNGYxWLRIoQDs0yq+1/K9kouU53ObU2ylhMnM
VyuySyEqmaiyIA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:16:06 2025 by rpki-client