Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
File: KhQFaUht0XjbWDoKHklt8iMYXTU.mft (raw, json)
Hash identifier: EtgfZ2Jbsl/L5cbUEcdTbjfJbjr5/8E81ID7vXteEBE=
Subject key identifier: DC:EE:5F:F7:54:64:EF:30:7B:32:7D:62:07:13:FA:5B:BE:C4:3E:A7
Authority key identifier: 2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35
Certificate issuer: /CN=2a140569486dd178db583a0a1e496df223185d35
Certificate serial: 019A7225E43797C51357E0E20A27AFFE116A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
Manifest number: 0965
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: KhQFaUht0XjbWDoKHklt8iMYXTU.crl (hash: or5oLm65p9S4f0ATp6SkYqPBKRhgtQKGpag5EwB2YFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e4:37:97:c5:13:57:e0:e2:0a:27:af:fe:11:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a140569486dd178db583a0a1e496df223185d35
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=dcee5ff75464ef307b327d620713fa5bbec43ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:e7:0a:9c:22:7b:e1:8e:ea:56:73:46:22:
b8:80:2c:24:4c:de:97:ff:77:31:e6:8a:d8:b5:c9:
21:d6:32:5f:dc:0a:b9:1a:5d:25:fa:5c:1a:d2:02:
d2:27:a9:00:84:12:93:97:13:e1:12:b7:3a:e5:2c:
16:a3:1d:00:24:8c:19:aa:23:02:47:86:3c:7b:c2:
8b:b6:c0:3c:dd:74:2b:ad:e7:f5:f0:ff:8a:bd:bd:
a3:dd:2f:cc:61:07:8e:83:d3:7d:94:3d:b3:98:21:
ed:77:a8:7a:47:e3:71:66:ad:90:bb:13:9b:94:2f:
30:6c:95:58:5f:3f:45:a3:be:ee:07:76:15:c0:64:
e6:e2:b5:f3:6e:3c:8c:5c:80:05:37:fd:3c:25:ce:
7c:dc:c8:e1:88:d4:d5:59:4b:6b:fa:54:3d:25:53:
20:46:ab:68:b0:3e:0e:d0:64:08:d7:85:d8:a7:45:
4c:3e:2d:ce:97:e4:7e:0d:45:27:28:e8:a7:f4:ac:
46:44:85:8f:3f:86:16:08:8f:a7:5f:f4:a8:38:6b:
d7:91:8a:a3:2b:d8:6a:a2:9b:9b:bc:06:c0:2d:ee:
f5:9e:48:5d:61:42:d8:06:92:6b:1b:c2:06:d5:b3:
7a:09:d7:14:f5:81:cc:fc:c9:d2:af:60:06:01:68:
3e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EE:5F:F7:54:64:EF:30:7B:32:7D:62:07:13:FA:5B:BE:C4:3E:A7
X509v3 Authority Key Identifier:
keyid:2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:91:f4:ba:ba:f0:89:87:a5:45:54:a2:9d:b0:a5:8f:96:a1:
ff:f4:0b:a2:a3:83:d0:32:0d:c2:86:d0:60:a4:f4:0e:0b:e9:
03:cd:91:0f:cd:65:0d:b7:d2:f2:1b:a5:a4:35:6a:5c:24:2a:
02:07:44:ae:91:93:2f:95:8d:cf:1d:4c:04:96:d9:d9:1e:2e:
24:4c:6a:f3:c5:93:27:91:ce:e3:03:ba:cd:55:f1:59:2c:99:
4a:9a:aa:d7:1f:71:e5:1d:22:4f:98:9f:a1:d1:e4:e4:3f:28:
36:6b:fa:2f:16:8d:36:ed:58:81:58:ab:f2:93:de:85:ed:18:
56:dc:56:d5:b3:a5:f7:80:e4:50:06:61:74:ee:24:4e:44:e3:
9e:87:53:56:60:a8:89:c0:5c:99:e4:94:c0:27:98:6e:53:82:
5f:b7:77:b2:10:93:1b:e5:a1:db:04:2d:88:83:55:91:e6:9e:
09:29:7b:00:e8:e9:a5:76:2f:d2:cc:e3:a6:4d:50:ed:8a:8c:
1f:18:7f:83:7e:6d:83:2a:c5:2e:85:0e:12:fd:2d:50:f0:17:
ff:5e:93:15:5a:81:91:d4:67:7e:cd:47:41:21:15:8c:4b:12:
30:25:fd:9b:0e:87:a5:d1:bc:78:05:66:1e:26:84:05:5d:76:
24:a2:40:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJeQ3l8UTV+DiCiev/hFqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMTQwNTY5NDg2ZGQxNzhkYjU4M2EwYTFlNDk2ZGYyMjMx
ODVkMzUwHhcNMjUxMTExMDkwMTE3WhcNMjUxMTEyMDkwMTE3WjAzMTEwLwYDVQQD
EyhkY2VlNWZmNzU0NjRlZjMwN2IzMjdkNjIwNzEzZmE1YmJlYzQzZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNTnCpwie+GO6lZzRiK4gCwkTN6X
/3cx5orYtckh1jJf3Aq5Gl0l+lwa0gLSJ6kAhBKTlxPhErc65SwWox0AJIwZqiMC
R4Y8e8KLtsA83XQrref18P+Kvb2j3S/MYQeOg9N9lD2zmCHtd6h6R+NxZq2QuxOb
lC8wbJVYXz9Fo77uB3YVwGTm4rXzbjyMXIAFN/08Jc583MjhiNTVWUtr+lQ9JVMg
RqtosD4O0GQI14XYp0VMPi3Ol+R+DUUnKOin9KxGRIWPP4YWCI+nX/SoOGvXkYqj
K9hqopubvAbALe71nkhdYULYBpJrG8IG1bN6CdcU9YHM/MnSr2AGAWg+WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzuX/dUZO8wezJ9YgcT+lu+xD6nMB8GA1UdIwQY
MBaAFCoUBWlIbdF421g6Ch5JbfIjGF01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2hRRmFVaHQwWGpiV0RvS0hrbHQ4aU1ZWFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81Njk1NzQtNDQxZS00MTViLTgwM2Yt
NTRiZDY0OWI0ODUyLzEvS2hRRmFVaHQwWGpiV0RvS0hrbHQ4aU1ZWFRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81Njk1NzQtNDQxZS00MTViLTgwM2YtNTRiZDY0OWI0ODUy
LzEvS2hRRmFVaHQwWGpiV0RvS0hrbHQ4aU1ZWFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJH0urrw
iYelRVSinbClj5ah//QLoqOD0DINwobQYKT0DgvpA82RD81lDbfS8hulpDVqXCQq
AgdErpGTL5WNzx1MBJbZ2R4uJExq88WTJ5HO4wO6zVXxWSyZSpqq1x9x5R0iT5if
odHk5D8oNmv6LxaNNu1YgVir8pPehe0YVtxW1bOl94DkUAZhdO4kTkTjnodTVmCo
icBcmeSUwCeYblOCX7d3shCTG+Wh2wQtiINVkeaeCSl7AOjppXYv0szjpk1Q7YqM
Hxh/g35tgyrFLoUOEv0tUPAX/16TFVqBkdRnfs1HQSEVjEsSMCX9mw6HpdG8eAVm
HiaEBV12JKJA7Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:30 2025 by rpki-client