Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: vWnQXAOvu45D+J6esR+ABpzYIUVjTH7++tplzIBnXBY=
Subject key identifier: D6:2D:00:AE:94:F6:20:97:78:C3:0F:49:02:FB:B7:93:BA:91:EB:CF
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 019A7293FD60CB9CB18A148A3B1E76A8A329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 11:01:32 +0000
Manifest this update: Tue 11 Nov 2025 11:01:32 +0000
Manifest next update: Wed 12 Nov 2025 11:01:32 +0000
Files and hashes: 1: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: P3cz6IvEBP+mZTbfd+5qBcX3V+ijFeV5q2i/9qTZVkY=)
2: v64OG16FRTD93CnYY-754YZNyZ4.roa (hash: p7D4RC+KDdym5ItTd1PLmzFnbXnv40mOj51eqApvqXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:fd:60:cb:9c:b1:8a:14:8a:3b:1e:76:a8:a3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Nov 11 11:01:32 2025 GMT
Not After : Nov 12 11:01:32 2025 GMT
Subject: CN=d62d00ae94f6209778c30f4902fbb793ba91ebcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:91:fa:5a:d3:82:e9:2d:3d:c1:00:5b:3d:
72:47:97:f7:bd:2f:40:b1:cb:a6:91:e6:a4:b3:f0:
28:14:4d:67:4c:fc:25:f9:b3:39:b1:68:6f:ee:1f:
0c:a8:f2:69:06:37:11:c6:73:0b:05:b9:37:b3:6e:
db:b4:f3:06:24:55:c4:d6:3f:27:97:c3:66:0a:ba:
53:48:95:e0:c4:c8:f2:fd:a1:c9:59:48:f7:f3:a5:
71:93:a5:7f:36:21:68:f3:e2:14:24:ee:9f:05:5b:
f5:16:21:63:de:69:49:e7:75:40:ab:75:86:00:b8:
3b:cd:2a:f7:f3:98:a6:00:97:2a:f6:fd:34:d9:5c:
f6:fa:1a:a1:08:c4:4d:4c:77:86:ff:6f:66:91:48:
8c:a9:c6:e2:77:f2:b3:c3:4c:c0:a1:35:27:0f:67:
bb:ff:83:87:9d:bd:76:92:ef:64:dd:14:a4:b5:ba:
5a:c8:88:24:df:52:4c:b8:1c:94:c8:5d:df:f7:12:
2b:60:70:e0:f6:b7:20:db:ed:74:dc:b7:6d:5b:7a:
5f:66:cb:06:03:e1:12:f6:38:33:0d:a1:08:6d:16:
d3:45:ae:44:73:8f:61:11:13:b0:d1:91:86:fa:1d:
b4:4e:f3:d2:a1:c6:33:90:b2:50:3b:4a:0b:5b:8e:
b2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2D:00:AE:94:F6:20:97:78:C3:0F:49:02:FB:B7:93:BA:91:EB:CF
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:08:68:e8:06:23:5f:64:64:25:f4:2f:fc:03:f8:87:99:e4:
98:79:16:2d:1d:50:bd:ed:be:d7:4c:15:9d:c8:6f:67:13:a9:
4f:a3:24:c2:38:00:70:18:28:f7:0b:85:3a:98:74:a7:db:e6:
32:e3:5d:52:81:0c:b9:15:20:99:88:8d:e0:23:cf:7c:9b:5f:
5c:40:4d:6b:a4:85:c5:ab:14:e5:5d:f8:da:f8:13:b7:1a:58:
bb:6a:ac:4b:38:5f:82:72:39:11:c7:67:70:d5:24:4a:89:e8:
44:9f:b2:ba:64:ba:56:39:2f:ea:2c:a5:43:4b:07:0e:61:97:
b7:a7:08:6b:47:d7:9c:c2:fe:80:fb:96:b6:67:01:f1:ed:96:
87:d7:07:36:39:a3:e5:00:dc:55:05:43:75:7a:a4:48:68:e3:
40:3c:b5:e9:86:83:25:e0:dd:1f:8b:bc:59:8c:27:ae:70:83:
ad:89:1d:8e:e1:05:2a:fc:d6:c9:28:a8:89:5d:f1:17:53:9a:
28:b6:b4:a8:01:82:7d:bb:37:a6:3e:c2:90:30:f0:d4:39:09:
6b:e2:55:4c:97:bc:7e:61:7f:22:45:2a:65:7f:b5:c8:2a:80:
83:69:a3:1b:89:20:f6:d1:35:82:73:83:ff:1c:e6:34:75:6b:
fb:a7:13:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk/1gy5yxihSKOx52qKMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYTQ2MDFiZjdmNjI0MTZmYjAxZTE1ZTY1ZWY0NTEwMTdj
OTc2MDEwHhcNMjUxMTExMTEwMTMyWhcNMjUxMTEyMTEwMTMyWjAzMTEwLwYDVQQD
EyhkNjJkMDBhZTk0ZjYyMDk3NzhjMzBmNDkwMmZiYjc5M2JhOTFlYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXaR+lrTguktPcEAWz1yR5f3vS9A
scumkeaks/AoFE1nTPwl+bM5sWhv7h8MqPJpBjcRxnMLBbk3s27btPMGJFXE1j8n
l8NmCrpTSJXgxMjy/aHJWUj386Vxk6V/NiFo8+IUJO6fBVv1FiFj3mlJ53VAq3WG
ALg7zSr385imAJcq9v002Vz2+hqhCMRNTHeG/29mkUiMqcbid/Kzw0zAoTUnD2e7
/4OHnb12ku9k3RSktbpayIgk31JMuByUyF3f9xIrYHDg9rcg2+103LdtW3pfZssG
A+ES9jgzDaEIbRbTRa5Ec49hEROw0ZGG+h20TvPSocYzkLJQO0oLW46y6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYtAK6U9iCXeMMPSQL7t5O6kevPMB8GA1UdIwQY
MBaAFJCkYBv39iQW+wHhXmXvRRAXyXYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xOGE3YmEtNjczZC00ZjJmLWI3YmMt
MTYzMjczZDNkMTMxLzEva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xOGE3YmEtNjczZC00ZjJmLWI3YmMtMTYzMjczZDNkMTMx
LzEva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQho6AYj
X2RkJfQv/AP4h5nkmHkWLR1Qve2+10wVnchvZxOpT6MkwjgAcBgo9wuFOph0p9vm
MuNdUoEMuRUgmYiN4CPPfJtfXEBNa6SFxasU5V342vgTtxpYu2qsSzhfgnI5Ecdn
cNUkSonoRJ+yumS6Vjkv6iylQ0sHDmGXt6cIa0fXnML+gPuWtmcB8e2Wh9cHNjmj
5QDcVQVDdXqkSGjjQDy16YaDJeDdH4u8WYwnrnCDrYkdjuEFKvzWySioiV3xF1Oa
KLa0qAGCfbs3pj7CkDDw1DkJa+JVTJe8fmF/IkUqZX+1yCqAg2mjG4kg9tE1gnOD
/xzmNHVr+6cTVQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:02 2025 by rpki-client