Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier: vdeRRemykXeuV4oGdy7NFXQmELseWofWcUiGgPQ4gkE=
Subject key identifier: ED:1D:D8:15:6C:A6:ED:7F:75:16:53:2F:0D:DC:98:70:57:2C:C2:5B
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 019A2BC342F5E9FCC4B97635D9223AE6EF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number: 139A
Signing time: Tue 28 Oct 2025 17:00:08 +0000
Manifest this update: Tue 28 Oct 2025 17:00:08 +0000
Manifest next update: Wed 29 Oct 2025 17:00:08 +0000
Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: zxbKGaByZ8ljwvVLIaf44XX47UYDLAg/6SFZQGMB+zY=)
2: uyTAYMzc27HPC3St2DUdxuZl0vQ.roa (hash: nhOGHiWnpfS9y1HiircEbA65FySC+R6VBPodKzedGIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:c3:42:f5:e9:fc:c4:b9:76:35:d9:22:3a:e6:ef:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Oct 28 17:00:08 2025 GMT
Not After : Oct 29 17:00:08 2025 GMT
Subject: CN=ed1dd8156ca6ed7f7516532f0ddc9870572cc25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:49:1b:76:8f:10:0b:bd:5b:43:fc:04:2e:
5c:83:09:9e:a3:0e:d5:b4:56:fa:17:22:53:71:0c:
01:86:94:00:7f:e0:b3:7f:6e:bb:13:a5:34:c5:64:
6c:6a:f1:e3:8c:12:c3:e4:da:7c:bf:c5:0d:dd:9d:
9f:71:c1:84:97:8b:f4:70:62:61:0d:a8:29:8b:a4:
67:d4:6e:13:84:6d:8c:a7:40:64:a5:3a:c1:47:b7:
8f:39:cd:22:c3:09:17:81:73:68:30:53:4f:2c:18:
e6:da:8d:39:44:03:90:52:9b:24:bd:58:7c:1c:cf:
98:c0:4d:0d:0e:22:34:02:17:f9:56:3e:7d:17:45:
8f:8d:94:d0:a4:ea:76:bc:1a:f5:f0:94:f1:1f:da:
c1:d5:e3:f1:65:d0:f8:c7:80:19:88:cb:b3:1f:67:
b9:b2:5b:d1:9d:3a:40:95:8b:d0:8a:ef:24:bd:e1:
c2:80:d4:8f:51:c2:ca:8c:9c:5a:f1:53:6c:ae:12:
61:3c:33:8f:64:f6:ff:b8:6d:56:e0:a2:0b:63:55:
87:fb:36:fb:cc:6a:fd:82:16:5b:9c:88:03:f6:e6:
0e:ab:ae:57:4c:99:1b:f6:00:41:09:bc:2d:25:b0:
75:be:79:ec:e2:8b:95:4e:48:ac:d0:e7:aa:ac:ce:
d9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1D:D8:15:6C:A6:ED:7F:75:16:53:2F:0D:DC:98:70:57:2C:C2:5B
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c7:2f:70:4d:98:7f:fc:a0:79:a5:33:4b:16:b0:5d:c6:0e:
92:d7:6f:24:ad:53:2d:20:9d:0f:69:ea:cc:ea:42:ba:09:e4:
65:78:0a:4d:4d:c9:71:d7:db:f0:ab:4d:a4:f6:d7:fe:dc:3c:
7a:4f:b0:cf:44:46:7c:f6:f6:6f:52:fd:74:61:d8:44:8e:68:
b5:e7:82:cc:0e:66:1e:38:4d:d8:c6:f5:f0:65:38:18:02:1e:
f0:94:c6:99:ad:ad:39:2f:17:09:f2:77:0a:57:b2:02:50:c6:
a3:eb:8c:05:32:53:77:82:20:c6:15:e6:5c:cc:6f:f1:e6:a0:
3d:db:70:70:75:e9:38:04:c5:68:f7:8c:6b:0d:d3:94:7f:09:
68:7e:f7:7a:24:57:6e:51:bb:14:e2:86:0e:d9:03:78:e8:c7:
6c:78:ff:f3:7d:0e:05:74:27:b1:29:62:c6:45:a5:24:40:75:
29:97:3f:a2:77:a9:e7:3f:ff:6e:f0:ce:9c:dd:82:63:93:68:
30:1f:96:a0:0a:75:f7:16:99:66:e9:41:24:e6:7c:f8:69:f5:
fa:ea:c0:d6:73:23:57:e8:ba:a9:11:0c:e9:be:e6:dd:c2:20:
a1:03:8f:57:c0:d9:15:b0:1b:02:6d:0f:3f:35:b2:aa:9f:6a:
c2:fe:18:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZorw0L16fzEuXY12SI65u8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZWNlZjk0M2QzNGM4MGUwYTBmZDgxNDI2ZTYxMzZiMzE1
MDhmZWUwHhcNMjUxMDI4MTcwMDA4WhcNMjUxMDI5MTcwMDA4WjAzMTEwLwYDVQQD
EyhlZDFkZDgxNTZjYTZlZDdmNzUxNjUzMmYwZGRjOTg3MDU3MmNjMjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+tJG3aPEAu9W0P8BC5cgwmeow7V
tFb6FyJTcQwBhpQAf+Czf267E6U0xWRsavHjjBLD5Np8v8UN3Z2fccGEl4v0cGJh
Dagpi6Rn1G4ThG2Mp0BkpTrBR7ePOc0iwwkXgXNoMFNPLBjm2o05RAOQUpskvVh8
HM+YwE0NDiI0Ahf5Vj59F0WPjZTQpOp2vBr18JTxH9rB1ePxZdD4x4AZiMuzH2e5
slvRnTpAlYvQiu8kveHCgNSPUcLKjJxa8VNsrhJhPDOPZPb/uG1W4KILY1WH+zb7
zGr9ghZbnIgD9uYOq65XTJkb9gBBCbwtJbB1vnns4ouVTkis0OeqrM7ZywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0d2BVspu1/dRZTLw3cmHBXLMJbMB8GA1UdIwQY
MBaAFCvs75Q9NMgOCg/YFCbmE2sxUI/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEt
NDQ5MTI0YWNlMDI2LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEtNDQ5MTI0YWNlMDI2
LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoscvcE2Y
f/ygeaUzSxawXcYOktdvJK1TLSCdD2nqzOpCugnkZXgKTU3Jcdfb8KtNpPbX/tw8
ek+wz0RGfPb2b1L9dGHYRI5oteeCzA5mHjhN2Mb18GU4GAIe8JTGma2tOS8XCfJ3
CleyAlDGo+uMBTJTd4IgxhXmXMxv8eagPdtwcHXpOATFaPeMaw3TlH8JaH73eiRX
blG7FOKGDtkDeOjHbHj/830OBXQnsSlixkWlJEB1KZc/onep5z//bvDOnN2CY5No
MB+WoAp19xaZZulBJOZ8+Gn1+urA1nMjV+i6qREM6b7m3cIgoQOPV8DZFbAbAm0P
PzWyqp9qwv4Y5A==
-----END CERTIFICATE-----
Generated at Tue Oct 28 20:19:06 2025 by rpki-client