Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
File: kKBl7vQNwBahvn8o1uZsp6h-f-U.mft (raw, json)
Hash identifier: guwJyfPWF9z78EJBvkkzK2zLme1NFZyopuqAfxYIJuQ=
Subject key identifier: 39:24:90:3D:69:51:24:06:EF:4F:5A:EF:79:C4:65:B7:F3:0F:80:CC
Authority key identifier: 90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
Certificate issuer: /CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Certificate serial: 019A70DBECDBE4AB24C175FD77D3318BE7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 03:00:52 +0000
Manifest this update: Tue 11 Nov 2025 03:00:52 +0000
Manifest next update: Wed 12 Nov 2025 03:00:52 +0000
Files and hashes: 1: FXtyRxy310ujzM3-FcQZ1xIE8BM.roa (hash: sjb/b0eSiH//cLJ9qvCys98Peom21sTpufoCnNtl4os=)
2: kKBl7vQNwBahvn8o1uZsp6h-f-U.crl (hash: ikwHiKbVR5iVT4oAgcojyi6hY8X1uZg6Y+RNRwjbkYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:ec:db:e4:ab:24:c1:75:fd:77:d3:31:8b:e7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Validity
Not Before: Nov 11 03:00:52 2025 GMT
Not After : Nov 12 03:00:52 2025 GMT
Subject: CN=3924903d69512406ef4f5aef79c465b7f30f80cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:4b:d8:d6:34:fa:b7:f4:48:72:4b:96:8b:
91:84:0f:54:35:14:ac:b6:aa:7e:cf:a7:09:f2:b2:
1f:45:c3:0e:32:1e:0c:3d:5b:93:3a:4e:71:66:3b:
fe:dc:1d:6b:fa:85:8d:48:b7:fb:84:23:eb:3e:c7:
a7:6d:35:7e:f6:be:fa:f3:71:73:dd:c6:12:5c:c4:
aa:67:68:15:aa:6e:95:6c:58:5a:6b:17:6c:36:f6:
e1:64:9e:64:33:29:32:05:08:d4:88:ca:07:09:ef:
ba:fa:23:35:4e:0c:42:15:e2:ba:ba:97:a4:e9:f3:
af:00:88:9a:c5:70:7c:7f:ad:24:9b:2b:8c:ea:63:
3c:5e:8e:9f:02:6b:b3:95:89:ce:8e:18:39:37:6d:
55:2a:ce:20:71:fd:eb:02:75:a4:52:b1:19:0e:67:
1c:8c:30:16:bd:3d:a8:50:75:05:11:80:b1:5f:21:
da:48:e8:1a:12:a1:10:c1:b1:e8:1a:c7:77:34:d8:
27:9b:d5:91:1e:a8:b6:06:99:9d:9f:f6:78:85:c9:
63:27:a9:70:9d:fa:85:d3:08:bc:f3:fe:47:a5:0f:
ba:16:92:ec:72:cf:71:5d:57:2c:33:89:ca:82:15:
81:bd:a9:63:bf:e2:be:c2:fd:d8:00:79:3f:e0:ae:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:24:90:3D:69:51:24:06:EF:4F:5A:EF:79:C4:65:B7:F3:0F:80:CC
X509v3 Authority Key Identifier:
keyid:90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:51:f7:0e:76:2e:6c:15:59:9a:c1:6e:c9:c1:e5:13:1b:6e:
bb:43:5c:21:41:8d:4b:94:0e:82:bd:82:cd:4b:02:ef:fd:33:
33:1a:42:ef:c0:03:9c:e8:8c:bb:06:f6:98:94:e4:22:ac:b6:
e1:e2:b7:f9:3d:43:3e:c8:64:91:f5:8a:58:a1:e5:57:27:61:
53:6d:3e:0f:73:89:f9:62:7e:dd:fd:b0:76:89:8d:24:5b:15:
3b:42:ff:d1:9e:d3:c2:26:7f:38:0d:9b:b5:75:68:3a:8d:dd:
85:15:19:ee:73:dd:b7:57:56:6c:4a:02:da:08:82:ca:62:31:
2c:16:a8:6d:96:2f:be:a5:0e:11:1c:a8:e6:f3:09:3b:89:e8:
e0:57:34:e4:0c:01:53:fc:6d:4c:a1:29:b1:3a:ba:cf:35:f9:
bf:ec:d2:cb:80:95:06:23:99:40:35:fb:56:76:b3:68:59:33:
8e:1c:aa:50:88:b7:de:98:c6:64:da:cb:42:2f:ad:a6:72:56:
3f:85:67:e6:8e:90:f9:b7:d9:a3:90:22:92:85:5a:35:76:a6:
62:39:48:68:72:a1:6f:9a:44:83:67:f7:1e:5a:6d:cd:29:36:
a5:83:a1:c4:d3:be:30:1b:bf:5b:a1:16:0e:bb:f0:7d:df:f3:
e9:07:23:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw2+zb5KskwXX9d9Mxi+fZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYTA2NWVlZjQwZGMwMTZhMWJlN2YyOGQ2ZTY2Y2E3YTg3
ZTdmZTUwHhcNMjUxMTExMDMwMDUyWhcNMjUxMTEyMDMwMDUyWjAzMTEwLwYDVQQD
EygzOTI0OTAzZDY5NTEyNDA2ZWY0ZjVhZWY3OWM0NjViN2YzMGY4MGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof1L2NY0+rf0SHJLlouRhA9UNRSs
tqp+z6cJ8rIfRcMOMh4MPVuTOk5xZjv+3B1r+oWNSLf7hCPrPsenbTV+9r7683Fz
3cYSXMSqZ2gVqm6VbFhaaxdsNvbhZJ5kMykyBQjUiMoHCe+6+iM1TgxCFeK6upek
6fOvAIiaxXB8f60kmyuM6mM8Xo6fAmuzlYnOjhg5N21VKs4gcf3rAnWkUrEZDmcc
jDAWvT2oUHUFEYCxXyHaSOgaEqEQwbHoGsd3NNgnm9WRHqi2Bpmdn/Z4hcljJ6lw
nfqF0wi88/5HpQ+6FpLscs9xXVcsM4nKghWBvaljv+K+wv3YAHk/4K5v+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkkkD1pUSQG709a73nEZbfzD4DMMB8GA1UdIwQY
MBaAFJCgZe70DcAWob5/KNbmbKeofn/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tCbDd2UU53QmFodm44bzF1WnNwNmgtZi1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS83NjhhYTItMGI0NC00Y2Y0LWI5ODQt
OTI0Y2RmMjc2ZDhkLzEva0tCbDd2UU53QmFodm44bzF1WnNwNmgtZi1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS83NjhhYTItMGI0NC00Y2Y0LWI5ODQtOTI0Y2RmMjc2ZDhk
LzEva0tCbDd2UU53QmFodm44bzF1WnNwNmgtZi1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlH3DnYu
bBVZmsFuycHlExtuu0NcIUGNS5QOgr2CzUsC7/0zMxpC78ADnOiMuwb2mJTkIqy2
4eK3+T1DPshkkfWKWKHlVydhU20+D3OJ+WJ+3f2wdomNJFsVO0L/0Z7TwiZ/OA2b
tXVoOo3dhRUZ7nPdt1dWbEoC2giCymIxLBaobZYvvqUOERyo5vMJO4no4Fc05AwB
U/xtTKEpsTq6zzX5v+zSy4CVBiOZQDX7VnazaFkzjhyqUIi33pjGZNrLQi+tpnJW
P4Vn5o6Q+bfZo5AikoVaNXamYjlIaHKhb5pEg2f3HlptzSk2pYOhxNO+MBu/W6EW
Drvwfd/z6QcjIw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:47 2025 by rpki-client