Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
File: K6OJMzWM9mz_O2zj97wlF_3UdCE.mft (raw, json)
Hash identifier: pw1KytSiddE7kZl52fJT4qtJXwJSshQkA9dBFBu6l/Q=
Subject key identifier: A6:06:AA:98:25:7B:35:15:87:56:F4:90:29:BA:69:EF:9D:33:1E:30
Authority key identifier: 2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21
Certificate issuer: /CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421
Certificate serial: 019A7112FD6A6A3A80B00242A75F8B3D938A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
Manifest number: 0894
Signing time: Tue 11 Nov 2025 04:01:01 +0000
Manifest this update: Tue 11 Nov 2025 04:01:01 +0000
Manifest next update: Wed 12 Nov 2025 04:01:01 +0000
Files and hashes: 1: K6OJMzWM9mz_O2zj97wlF_3UdCE.crl (hash: PhOpdyy5jUpa+UbfOB6IS+ByUtcbcB4Aek/mX7rGFtk=)
2: P79z5YTtoWEv9LCPfIAUkH_6t6o.roa (hash: bkjECat6qqt16K0V047quWng6+v1DMCdWPWmzkArqVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:fd:6a:6a:3a:80:b0:02:42:a7:5f:8b:3d:93:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421
Validity
Not Before: Nov 11 04:01:01 2025 GMT
Not After : Nov 12 04:01:01 2025 GMT
Subject: CN=a606aa98257b35158756f49029ba69ef9d331e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e8:d1:a4:ec:01:3a:10:d5:74:57:13:e6:0b:
9c:5a:a9:02:a7:fa:d0:d1:db:b1:d4:21:8f:29:e0:
fc:67:12:d4:36:d3:17:dd:b3:bc:4b:a6:50:7a:cf:
24:8c:d0:40:46:d4:20:f4:35:f4:5c:bb:ce:71:38:
09:49:3c:26:8f:e1:11:7f:c3:e0:d7:04:25:08:54:
9a:d1:6f:51:49:25:70:09:d5:36:2f:d6:82:d6:89:
3d:d4:60:3f:e7:5d:fe:2a:21:ad:f4:d2:2f:57:92:
0e:6e:b7:55:10:6d:09:e3:8f:3a:0f:fc:ce:9e:2f:
8b:96:e8:b4:7c:ff:0e:38:e9:26:e5:83:de:ad:9e:
b7:15:1f:e9:fa:fe:d5:60:3d:44:ef:28:89:81:99:
58:44:c0:8d:f7:5b:f0:41:b1:b0:a6:fd:92:96:fa:
9b:d0:7b:08:e8:e8:c6:aa:e6:dd:8d:ea:52:00:54:
6f:de:b7:ac:96:92:bc:79:ed:cf:3c:72:be:0f:25:
07:34:f8:13:75:c1:1e:02:fb:e7:33:86:75:90:b9:
5d:3c:59:c3:c3:ce:c5:10:5f:1f:b7:49:4e:ea:81:
ed:89:ef:75:c8:fc:6b:87:48:95:2b:e5:53:cd:a3:
b9:9b:67:ed:79:2a:80:dd:2d:1f:b5:7a:a1:39:56:
76:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:06:AA:98:25:7B:35:15:87:56:F4:90:29:BA:69:EF:9D:33:1E:30
X509v3 Authority Key Identifier:
keyid:2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:97:29:73:6f:10:92:9c:46:4f:ca:6b:e4:7b:6b:95:5e:67:
21:48:00:84:8f:80:af:02:69:ec:4b:83:b7:e6:0a:54:60:80:
df:4d:1c:37:5c:12:83:92:fb:f2:36:3a:8c:79:e8:81:a1:96:
3c:be:23:ed:80:93:11:88:66:c6:a0:50:cd:86:53:de:a0:02:
3c:c3:4d:e3:7e:0d:1f:97:e5:8b:5a:be:f2:a0:f1:ad:b1:3c:
9f:44:50:7a:6e:a7:37:b9:4a:b5:08:ef:81:99:20:ce:4e:37:
37:86:d1:44:de:12:4d:e6:2f:ee:c8:2a:59:8b:1c:d1:3a:dd:
61:b3:b4:f7:b2:6d:df:86:21:fe:ac:18:05:d3:1d:5f:2b:e4:
e7:ad:ae:65:06:eb:b0:25:67:57:66:7c:ca:1b:b9:5b:84:d4:
17:cc:2a:15:f9:8c:e0:9d:74:15:ad:61:62:6c:a0:dd:f3:e6:
3f:fd:d8:28:9b:de:16:f8:2e:d1:93:d4:08:7f:bb:13:5b:11:
78:33:58:d8:99:bf:55:0f:c3:e8:8f:08:e2:5c:85:f1:dc:be:
8f:5d:64:45:b3:bb:1d:0d:29:9f:b1:be:bf:72:87:0b:ba:36:
62:fe:b4:8c:d4:21:98:2f:70:92:99:a7:51:cb:ba:11:b0:8d:
5e:42:2d:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEv1qajqAsAJCp1+LPZOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYTM4OTMzMzU4Y2Y2NmNmZjNiNmNlM2Y3YmMyNTE3ZmRk
NDc0MjEwHhcNMjUxMTExMDQwMTAxWhcNMjUxMTEyMDQwMTAxWjAzMTEwLwYDVQQD
EyhhNjA2YWE5ODI1N2IzNTE1ODc1NmY0OTAyOWJhNjllZjlkMzMxZTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+jRpOwBOhDVdFcT5gucWqkCp/rQ
0dux1CGPKeD8ZxLUNtMX3bO8S6ZQes8kjNBARtQg9DX0XLvOcTgJSTwmj+ERf8Pg
1wQlCFSa0W9RSSVwCdU2L9aC1ok91GA/513+KiGt9NIvV5IObrdVEG0J4486D/zO
ni+Llui0fP8OOOkm5YPerZ63FR/p+v7VYD1E7yiJgZlYRMCN91vwQbGwpv2Slvqb
0HsI6OjGqubdjepSAFRv3reslpK8ee3PPHK+DyUHNPgTdcEeAvvnM4Z1kLldPFnD
w87FEF8ft0lO6oHtie91yPxrh0iVK+VTzaO5m2fteSqA3S0ftXqhOVZ2+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYGqpglezUVh1b0kCm6ae+dMx4wMB8GA1UdIwQY
MBaAFCujiTM1jPZs/zts4/e8JRf91HQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzZPSk16V005bXpfTzJ6ajk3d2xGXzNVZENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC85ODU2ZWUtNjk5Zi00ZmVkLWJiOTgt
ZTA2ZmQwY2QzYjc3LzEvSzZPSk16V005bXpfTzJ6ajk3d2xGXzNVZENFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC85ODU2ZWUtNjk5Zi00ZmVkLWJiOTgtZTA2ZmQwY2QzYjc3
LzEvSzZPSk16V005bXpfTzJ6ajk3d2xGXzNVZENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipcpc28Q
kpxGT8pr5HtrlV5nIUgAhI+ArwJp7EuDt+YKVGCA300cN1wSg5L78jY6jHnogaGW
PL4j7YCTEYhmxqBQzYZT3qACPMNN434NH5fli1q+8qDxrbE8n0RQem6nN7lKtQjv
gZkgzk43N4bRRN4STeYv7sgqWYsc0TrdYbO097Jt34Yh/qwYBdMdXyvk562uZQbr
sCVnV2Z8yhu5W4TUF8wqFfmM4J10Fa1hYmyg3fPmP/3YKJveFvgu0ZPUCH+7E1sR
eDNY2Jm/VQ/D6I8I4lyF8dy+j11kRbO7HQ0pn7G+v3KHC7o2Yv60jNQhmC9wkpmn
Ucu6EbCNXkItGg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:48:01 2025 by rpki-client