Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json)
Hash identifier: 5pL0SJwaiVlOdQ7IOjfyLIDaLqooT1PcBLgSVgpm6nY=
Subject key identifier: FF:FE:F5:5A:C2:CC:0B:BE:27:70:93:97:4D:23:98:81:E7:1A:6A:D8
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial: 019A7149CA5A8E3504745C1456CB8CAC9EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
Manifest number: 11C0
Signing time: Tue 11 Nov 2025 05:00:52 +0000
Manifest this update: Tue 11 Nov 2025 05:00:52 +0000
Manifest next update: Wed 12 Nov 2025 05:00:52 +0000
Files and hashes: 1: GzSJNC8rXvHPR5ECqFrqBc47EjY.roa (hash: DpRxP+N8EisPg5SdQn8IRQde36mD1fsRwPBj23IbYe0=)
2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: CkOSnVssirS6oMqAugaaVFSMzfa23ZHbKObUFRzv2J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ca:5a:8e:35:04:74:5c:14:56:cb:8c:ac:9e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
Validity
Not Before: Nov 11 05:00:52 2025 GMT
Not After : Nov 12 05:00:52 2025 GMT
Subject: CN=fffef55ac2cc0bbe277093974d239881e71a6ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3a:54:51:4e:97:35:ef:ed:38:c9:d3:a7:48:
74:6b:58:cc:22:5f:37:53:79:2e:6e:ff:fa:d5:dd:
b3:6d:83:86:dc:56:a7:db:91:bc:19:9e:29:48:0d:
4c:a3:99:ce:d7:08:03:bf:b1:42:b8:b2:6b:62:af:
bd:f8:6c:e8:8c:11:f7:b4:59:06:4b:67:8c:e2:92:
ff:da:3c:4b:87:ec:fc:91:af:4a:9e:09:11:5e:e2:
80:05:c3:e9:a1:6e:05:4e:c1:a8:cf:9c:8e:b5:5f:
74:eb:31:25:fb:bb:88:69:03:dd:8d:c0:4c:d4:b4:
60:54:68:6e:52:2a:0d:8f:99:d3:03:11:d1:35:06:
d3:18:8e:4e:2d:95:64:16:5e:35:c5:55:8a:56:f7:
d2:6f:8a:0c:ec:b6:3a:c7:e2:40:66:9a:e8:2b:3b:
b3:9c:d1:5b:02:43:a5:29:c4:30:29:73:b5:c0:f0:
83:a6:78:71:fd:3b:be:a7:6c:c7:af:a1:b2:5e:21:
2d:e9:bc:74:4e:8c:37:c0:be:48:aa:29:e9:45:f8:
0e:fe:6b:f3:f9:3e:c5:4e:89:ac:9e:5a:49:ae:80:
60:7c:dc:67:67:be:38:be:88:58:0e:cb:21:68:47:
6d:e2:f9:e6:91:cb:c9:ec:ee:db:fb:24:52:d7:bc:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FE:F5:5A:C2:CC:0B:BE:27:70:93:97:4D:23:98:81:E7:1A:6A:D8
X509v3 Authority Key Identifier:
keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fe:1a:2a:20:48:b0:cd:0f:91:e8:96:54:4b:c3:c7:d1:59:
45:50:b7:60:76:a9:6e:26:9d:83:30:da:2b:4d:31:f0:29:00:
cb:d0:d3:18:b4:22:08:97:6a:36:71:2c:5d:53:17:d3:a2:35:
3a:51:01:90:90:32:f8:ac:47:5b:57:b6:ac:6a:b9:57:07:d4:
58:c5:cf:64:da:18:bc:18:00:b2:ea:5f:2f:6a:b7:27:12:36:
4b:27:78:8d:e8:a9:5b:60:cf:77:92:7c:22:a2:16:fe:45:eb:
d5:0a:0d:e6:a8:3e:c8:a9:a8:b8:9e:5b:a7:75:11:14:f5:09:
5b:a4:4d:33:19:2d:3c:7c:8d:e0:2d:ad:6c:9c:4b:77:83:ac:
b3:48:d4:11:87:50:55:2d:2d:47:5b:f9:3d:6f:0b:9d:8f:6f:
ab:76:ff:3c:a1:2d:3c:d6:68:c9:e7:11:06:5c:a6:16:76:b8:
57:4b:35:5e:8b:c7:ca:67:66:04:6a:09:aa:60:52:d8:5f:33:
ef:40:42:cb:5e:04:93:49:94:9e:92:ec:b6:c2:fd:88:30:28:
50:9c:22:02:fb:b1:0e:20:97:d6:aa:ef:38:13:3e:c5:fb:88:
07:af:88:46:c9:06:a7:1d:1d:25:df:d7:e7:9e:ca:9a:bd:b0:
36:f7:d5:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxScpajjUEdFwUVsuMrJ7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzOGM4OGRlY2M4OGY3NmFmZjEzYmMwODU4ZGIzODc4MzRi
ZTE3MTEwHhcNMjUxMTExMDUwMDUyWhcNMjUxMTEyMDUwMDUyWjAzMTEwLwYDVQQD
EyhmZmZlZjU1YWMyY2MwYmJlMjc3MDkzOTc0ZDIzOTg4MWU3MWE2YWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jpUUU6XNe/tOMnTp0h0a1jMIl83
U3kubv/61d2zbYOG3Fan25G8GZ4pSA1Mo5nO1wgDv7FCuLJrYq+9+GzojBH3tFkG
S2eM4pL/2jxLh+z8ka9KngkRXuKABcPpoW4FTsGoz5yOtV906zEl+7uIaQPdjcBM
1LRgVGhuUioNj5nTAxHRNQbTGI5OLZVkFl41xVWKVvfSb4oM7LY6x+JAZproKzuz
nNFbAkOlKcQwKXO1wPCDpnhx/Tu+p2zHr6GyXiEt6bx0Tow3wL5IqinpRfgO/mvz
+T7FTomsnlpJroBgfNxnZ744vohYDsshaEdt4vnmkcvJ7O7b+yRS17wMZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/+9VrCzAu+J3CTl00jmIHnGmrYMB8GA1UdIwQY
MBaAFJOMiN7MiPdq/xO8CFjbOHg0vhcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2Et
ZmY5ZjUwM2UyZGQzLzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2EtZmY5ZjUwM2UyZGQz
LzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANf4aKiBI
sM0PkeiWVEvDx9FZRVC3YHapbiadgzDaK00x8CkAy9DTGLQiCJdqNnEsXVMX06I1
OlEBkJAy+KxHW1e2rGq5VwfUWMXPZNoYvBgAsupfL2q3JxI2Syd4jeipW2DPd5J8
IqIW/kXr1QoN5qg+yKmouJ5bp3URFPUJW6RNMxktPHyN4C2tbJxLd4Oss0jUEYdQ
VS0tR1v5PW8LnY9vq3b/PKEtPNZoyecRBlymFna4V0s1XovHymdmBGoJqmBS2F8z
70BCy14Ek0mUnpLstsL9iDAoUJwiAvuxDiCX1qrvOBM+xfuIB6+IRskGpx0dJd/X
557Kmr2wNvfVtQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:04 2025 by rpki-client