Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2fa75a-11b8-49ae-924a-eb9dcd17b476/1/KL8TZ9YSDGyHl6BEhtduR7EwrVE.mft
File: KL8TZ9YSDGyHl6BEhtduR7EwrVE.mft (raw, json)
Hash identifier: G92/IIyh6drQNM9VKD4TdGVj+zKKMWIWyUXt3i+oQsY=
Subject key identifier: 1C:6B:26:3A:61:91:91:37:F1:47:E9:73:D1:60:25:3D:23:F0:46:4A
Authority key identifier: 28:BF:13:67:D6:12:0C:6C:87:97:A0:44:86:D7:6E:47:B1:30:AD:51
Certificate issuer: /CN=28bf1367d6120c6c8797a04486d76e47b130ad51
Certificate serial: 019A714A20FBCE41427C75018030F8958757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL8TZ9YSDGyHl6BEhtduR7EwrVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2fa75a-11b8-49ae-924a-eb9dcd17b476/1/KL8TZ9YSDGyHl6BEhtduR7EwrVE.mft
Manifest number: 95
Signing time: Tue 11 Nov 2025 05:01:14 +0000
Manifest this update: Tue 11 Nov 2025 05:01:14 +0000
Manifest next update: Wed 12 Nov 2025 05:01:14 +0000
Files and hashes: 1: KL8TZ9YSDGyHl6BEhtduR7EwrVE.crl (hash: X94j03uGAuMcItxucQlZ4rCN/A5hMvzgfCuQ/ZQ16YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2fa75a-11b8-49ae-924a-eb9dcd17b476/1/KL8TZ9YSDGyHl6BEhtduR7EwrVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2fa75a-11b8-49ae-924a-eb9dcd17b476/1/KL8TZ9YSDGyHl6BEhtduR7EwrVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL8TZ9YSDGyHl6BEhtduR7EwrVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:20:fb:ce:41:42:7c:75:01:80:30:f8:95:87:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bf1367d6120c6c8797a04486d76e47b130ad51
Validity
Not Before: Nov 11 05:01:14 2025 GMT
Not After : Nov 12 05:01:14 2025 GMT
Subject: CN=1c6b263a61919137f147e973d160253d23f0464a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:6f:87:9b:9d:32:5c:ba:0c:95:32:e0:31:
ea:14:e7:75:ca:8f:42:f4:b2:fb:3c:45:8f:c0:46:
f2:a7:83:2f:2c:01:25:e0:a8:58:e8:58:69:15:4a:
e1:90:4e:5b:d1:95:16:29:41:f7:ca:5d:c6:98:90:
14:0e:10:cb:b1:0e:27:37:11:c3:94:f5:37:da:99:
1e:b0:ab:90:9f:e0:3f:3f:3a:4d:61:50:20:9b:e2:
a9:7b:d0:21:c4:18:64:3f:64:b8:65:63:05:72:a9:
cd:b9:29:47:ef:be:49:d5:a1:f8:af:b3:de:7c:a4:
d1:11:bd:e9:01:b7:75:3a:61:4e:0c:eb:11:6a:1a:
9d:a8:f5:8e:ab:83:de:f3:e6:51:53:0c:40:3f:10:
95:e9:2b:29:6c:b1:1f:54:1b:c5:8f:8a:89:70:42:
75:8c:69:14:e8:32:07:7d:d1:e8:ac:18:83:25:7e:
6a:a9:e9:34:c5:35:9d:3e:54:21:58:59:14:9c:36:
dd:7d:c4:d1:f4:ce:86:0c:ec:38:ce:aa:69:d8:b7:
12:80:b1:f1:1d:a6:80:1e:16:4c:fa:7d:37:79:a1:
58:f4:a3:35:00:c9:86:84:0c:83:c6:6c:08:5f:21:
fe:9c:10:4f:0e:51:45:75:89:5d:39:f9:13:b2:3d:
a7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6B:26:3A:61:91:91:37:F1:47:E9:73:D1:60:25:3D:23:F0:46:4A
X509v3 Authority Key Identifier:
keyid:28:BF:13:67:D6:12:0C:6C:87:97:A0:44:86:D7:6E:47:B1:30:AD:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL8TZ9YSDGyHl6BEhtduR7EwrVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2fa75a-11b8-49ae-924a-eb9dcd17b476/1/KL8TZ9YSDGyHl6BEhtduR7EwrVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2fa75a-11b8-49ae-924a-eb9dcd17b476/1/KL8TZ9YSDGyHl6BEhtduR7EwrVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a4:1f:07:64:79:36:d4:45:ca:01:6c:d2:c8:37:4c:54:da:
96:eb:46:6d:f4:c3:f8:a5:b4:be:6e:97:5a:1f:48:4f:51:28:
86:a5:6b:ad:c4:ee:8d:e7:b1:4b:60:d2:98:25:ff:df:df:64:
9b:18:63:5e:29:43:67:aa:b2:07:83:e9:5f:db:d1:b9:ca:1f:
8f:b8:d7:e5:47:93:9d:a4:62:28:e4:25:95:22:25:fd:8b:35:
4b:4b:9b:ad:57:e5:6c:a1:e2:14:43:af:de:bc:2e:33:20:a3:
57:cc:ab:2d:9b:33:e9:b7:40:d7:d0:ef:15:4b:1b:26:c3:82:
fa:6f:79:f8:26:bb:8c:84:14:ec:55:e9:f4:e7:53:f1:8b:7b:
6e:b1:2d:7a:bc:5d:44:8b:25:ff:d0:ab:b6:af:93:96:d8:d4:
28:9e:eb:78:cb:7c:48:d5:09:73:9d:4b:cc:7b:4d:6c:5e:6e:
ef:5a:4c:17:a9:e9:82:f1:c0:7b:e6:0f:56:24:23:2f:7a:59:
80:1b:30:72:4e:cd:3c:95:8c:6e:a5:55:a2:fa:f1:43:c5:00:
85:9c:3f:14:11:02:9f:ca:01:8a:f4:9a:6d:e7:2b:eb:f5:51:
6f:7b:90:c1:c4:3f:4c:77:3e:1c:b0:83:cb:7a:b4:5b:d6:22:
61:77:52:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSiD7zkFCfHUBgDD4lYdXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YmYxMzY3ZDYxMjBjNmM4Nzk3YTA0NDg2ZDc2ZTQ3YjEz
MGFkNTEwHhcNMjUxMTExMDUwMTE0WhcNMjUxMTEyMDUwMTE0WjAzMTEwLwYDVQQD
EygxYzZiMjYzYTYxOTE5MTM3ZjE0N2U5NzNkMTYwMjUzZDIzZjA0NjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKZvh5udMly6DJUy4DHqFOd1yo9C
9LL7PEWPwEbyp4MvLAEl4KhY6FhpFUrhkE5b0ZUWKUH3yl3GmJAUDhDLsQ4nNxHD
lPU32pkesKuQn+A/PzpNYVAgm+Kpe9AhxBhkP2S4ZWMFcqnNuSlH775J1aH4r7Pe
fKTREb3pAbd1OmFODOsRahqdqPWOq4Pe8+ZRUwxAPxCV6SspbLEfVBvFj4qJcEJ1
jGkU6DIHfdHorBiDJX5qqek0xTWdPlQhWFkUnDbdfcTR9M6GDOw4zqpp2LcSgLHx
HaaAHhZM+n03eaFY9KM1AMmGhAyDxmwIXyH+nBBPDlFFdYldOfkTsj2n3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxrJjphkZE38Ufpc9FgJT0j8EZKMB8GA1UdIwQY
MBaAFCi/E2fWEgxsh5egRIbXbkexMK1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0w4VFo5WVNER3lIbDZCRWh0ZHVSN0V3clZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yZmE3NWEtMTFiOC00OWFlLTkyNGEt
ZWI5ZGNkMTdiNDc2LzEvS0w4VFo5WVNER3lIbDZCRWh0ZHVSN0V3clZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8yZmE3NWEtMTFiOC00OWFlLTkyNGEtZWI5ZGNkMTdiNDc2
LzEvS0w4VFo5WVNER3lIbDZCRWh0ZHVSN0V3clZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKQfB2R5
NtRFygFs0sg3TFTalutGbfTD+KW0vm6XWh9IT1EohqVrrcTujeexS2DSmCX/399k
mxhjXilDZ6qyB4PpX9vRucofj7jX5UeTnaRiKOQllSIl/Ys1S0ubrVflbKHiFEOv
3rwuMyCjV8yrLZsz6bdA19DvFUsbJsOC+m95+Ca7jIQU7FXp9OdT8Yt7brEterxd
RIsl/9Crtq+TltjUKJ7reMt8SNUJc51LzHtNbF5u71pMF6npgvHAe+YPViQjL3pZ
gBswck7NPJWMbqVVovrxQ8UAhZw/FBECn8oBivSabecr6/VRb3uQwcQ/THc+HLCD
y3q0W9YiYXdSIg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:17 2025 by rpki-client