Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
File: kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft (raw, json)
Hash identifier: e3FmUTT39iMo3+ad1mWkZqJKpybChxWvFpdbKDfJhV8=
Subject key identifier: E4:E2:20:C9:DB:E0:B1:F6:FF:87:1B:BD:BF:0B:46:3B:D4:26:A1:05
Authority key identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
Certificate issuer: /CN=90afdcff7de3a65947631f92c67e272767194478
Certificate serial: 019A72936D5864046FE76F591759ED3C994E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 11:00:55 +0000
Manifest this update: Tue 11 Nov 2025 11:00:55 +0000
Manifest next update: Wed 12 Nov 2025 11:00:55 +0000
Files and hashes: 1: ejRJ31S7gTZphcMPp--rX-fthA4.roa (hash: K6orC9qH9AXgz/q6yHBYuSENvrxco32U8VdUBQRxDgA=)
2: kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl (hash: w4UotlgVxuIyDcBQGn55w7aHx+mRWLTPh4Ylif4Tn4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:6d:58:64:04:6f:e7:6f:59:17:59:ed:3c:99:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90afdcff7de3a65947631f92c67e272767194478
Validity
Not Before: Nov 11 11:00:55 2025 GMT
Not After : Nov 12 11:00:55 2025 GMT
Subject: CN=e4e220c9dbe0b1f6ff871bbdbf0b463bd426a105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:ff:a1:97:84:73:d6:d5:0f:0e:a0:4c:56:
a0:20:07:29:a6:bb:fc:d1:8a:47:54:f3:46:a7:55:
48:f7:8d:06:c1:5d:f4:5c:15:1b:34:90:04:76:cd:
39:72:b8:b7:3e:12:93:5e:a9:22:55:e5:53:62:20:
97:1a:6e:d0:d2:e1:f6:4a:89:8f:b4:ea:d7:fc:ee:
2b:2a:48:03:5a:68:b5:f0:dc:ab:96:8b:22:05:ea:
78:71:73:f3:9d:c0:2c:c5:c2:de:dd:36:0a:02:77:
08:e5:ec:ba:6f:98:32:58:13:0d:86:d6:ac:92:db:
81:08:69:4a:e2:b3:c2:07:b3:0b:81:48:89:a2:78:
41:8f:5a:0c:3e:63:ed:ac:ff:31:a2:69:03:cf:82:
7c:e4:f7:c7:7c:32:4f:e2:3b:24:0f:b6:0f:4b:f7:
62:e2:b8:5d:fb:0f:40:73:1b:a8:0f:94:cd:8c:e7:
a8:6b:76:e8:f3:fb:8f:dd:bf:98:05:70:43:da:23:
42:c0:39:a4:8c:ac:b2:59:6a:a4:09:26:4a:98:c1:
c2:ca:10:e2:0c:94:e1:63:fd:e7:87:f4:f9:fa:25:
be:36:56:81:4e:50:d5:d5:aa:e6:3c:bc:cb:37:5a:
27:0a:27:4e:c2:6f:4e:2d:6b:95:d0:4e:66:ea:86:
52:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E2:20:C9:DB:E0:B1:F6:FF:87:1B:BD:BF:0B:46:3B:D4:26:A1:05
X509v3 Authority Key Identifier:
keyid:90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:53:07:85:63:8b:59:11:5f:3b:ee:fc:bb:f5:f2:cc:64:c3:
c5:e9:9a:d3:e8:4d:2d:b4:46:cb:17:43:54:19:ce:7a:f0:08:
69:cd:80:25:93:47:d2:d5:d5:e7:c0:dd:d7:6a:1a:c0:86:64:
44:a4:1d:de:06:c7:21:87:03:6f:03:cb:11:b4:4b:2c:f4:c5:
e0:33:8c:4c:7e:6b:c0:05:85:62:d5:31:24:5b:da:53:84:69:
83:b7:03:c2:b2:33:bd:1d:71:60:fc:79:66:2e:e6:c5:6e:a6:
59:8e:74:24:3d:ea:07:30:f8:0d:d6:b5:cc:9a:d6:2a:21:88:
ab:4f:da:96:8a:22:60:c6:4f:54:f9:0a:4a:58:3b:bb:d3:66:
58:87:c6:ac:0a:8f:99:bc:40:a8:73:a9:c3:0f:cf:08:2a:c1:
58:3e:b0:80:8a:c8:9e:ef:9d:be:ef:08:bb:89:47:da:06:65:
a0:8a:6e:76:b4:1a:56:e6:bd:5e:82:21:86:6f:b2:cc:64:12:
a5:7e:f2:93:cb:95:4f:38:f7:90:d5:88:70:f4:1a:ad:b9:48:
22:b5:05:ed:db:76:1d:8f:4f:2c:f8:1a:dc:80:59:87:70:57:
2d:ba:f8:4a:bf:61:a9:c8:f7:45:9b:7d:89:a0:38:31:bb:f6:
da:b7:8a:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk21YZARv529ZF1ntPJlOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYWZkY2ZmN2RlM2E2NTk0NzYzMWY5MmM2N2UyNzI3Njcx
OTQ0NzgwHhcNMjUxMTExMTEwMDU1WhcNMjUxMTEyMTEwMDU1WjAzMTEwLwYDVQQD
EyhlNGUyMjBjOWRiZTBiMWY2ZmY4NzFiYmRiZjBiNDYzYmQ0MjZhMTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGj/oZeEc9bVDw6gTFagIAcpprv8
0YpHVPNGp1VI940GwV30XBUbNJAEds05cri3PhKTXqkiVeVTYiCXGm7Q0uH2SomP
tOrX/O4rKkgDWmi18NyrlosiBep4cXPzncAsxcLe3TYKAncI5ey6b5gyWBMNhtas
ktuBCGlK4rPCB7MLgUiJonhBj1oMPmPtrP8xomkDz4J85PfHfDJP4jskD7YPS/di
4rhd+w9AcxuoD5TNjOeoa3bo8/uP3b+YBXBD2iNCwDmkjKyyWWqkCSZKmMHCyhDi
DJThY/3nh/T5+iW+NlaBTlDV1armPLzLN1onCidOwm9OLWuV0E5m6oZSbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTiIMnb4LH2/4cbvb8LRjvUJqEFMB8GA1UdIwQY
MBaAFJCv3P9946ZZR2MfksZ+JydnGUR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lMDBkMWUtNGExOC00OTU2LTgyYTQt
MTkwYTVjOGQ5ZDk1LzEva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9lMDBkMWUtNGExOC00OTU2LTgyYTQtMTkwYTVjOGQ5ZDk1
LzEva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFMHhWOL
WRFfO+78u/XyzGTDxema0+hNLbRGyxdDVBnOevAIac2AJZNH0tXV58Dd12oawIZk
RKQd3gbHIYcDbwPLEbRLLPTF4DOMTH5rwAWFYtUxJFvaU4Rpg7cDwrIzvR1xYPx5
Zi7mxW6mWY50JD3qBzD4Dda1zJrWKiGIq0/alooiYMZPVPkKSlg7u9NmWIfGrAqP
mbxAqHOpww/PCCrBWD6wgIrInu+dvu8Iu4lH2gZloIpudrQaVua9XoIhhm+yzGQS
pX7yk8uVTzj3kNWIcPQarblIIrUF7dt2HY9PLPga3IBZh3BXLbr4Sr9hqcj3RZt9
iaA4Mbv22reKag==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:49 2025 by rpki-client