Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
File: kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json)
Hash identifier: TwRjdzpMc220fgOyfXLg/56yYCL5RQtK/pdo/2Dx1YY=
Subject key identifier: 07:B0:DD:1A:B3:5B:4D:CA:EA:CF:1E:B6:F9:F5:84:1D:4F:AE:B2:97
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 019A0824950EB0E7DE966E61FF8ACE79B884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
Manifest number: 05DF
Signing time: Tue 21 Oct 2025 19:00:05 +0000
Manifest this update: Tue 21 Oct 2025 19:00:05 +0000
Manifest next update: Wed 22 Oct 2025 19:00:05 +0000
Files and hashes: 1: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: fmmm0wrUkj50cKJzfWviY+ADkb3b9hkuMfvk0hOi1no=)
2: uEevp2GUNz1b7rUD1ir2ld6ATDU.roa (hash: QtO8bxI6kXGPk5HpdZyF30S3dseJ+gcUwY5+nGoFUJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:08:24:95:0e:b0:e7:de:96:6e:61:ff:8a:ce:79:b8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Oct 21 19:00:05 2025 GMT
Not After : Oct 22 19:00:05 2025 GMT
Subject: CN=07b0dd1ab35b4dcaeacf1eb6f9f5841d4faeb297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:e3:03:e1:76:fd:3c:5f:e5:22:07:9f:b3:
fa:3e:e8:54:cc:3c:70:42:8f:a6:61:5a:a2:ae:f6:
94:39:27:0d:5a:f6:3a:16:7a:92:6e:a9:d3:f2:2e:
96:e9:b1:12:ce:89:0d:31:d3:ee:c9:83:b4:08:c5:
2d:36:a4:57:33:2d:f0:2a:af:90:07:5a:8a:3d:22:
d1:cf:1f:d6:ed:12:f5:67:39:0a:4e:33:2c:d4:52:
83:32:24:a8:f4:d6:e6:59:b9:eb:e7:06:28:a4:63:
fc:78:3a:72:6a:b9:89:de:da:8e:2c:29:5b:f2:da:
9f:19:0a:b1:c6:63:3a:89:f6:32:e2:93:fd:04:7b:
aa:b7:99:7e:9d:70:60:a8:31:2e:3b:5d:0f:98:93:
28:2b:c1:4a:ac:18:a9:38:a7:1a:37:1a:67:67:a5:
1b:7a:ce:fd:1c:b7:f2:89:ed:d8:20:82:36:0e:96:
e1:08:e0:23:01:47:4f:04:1e:f8:3d:0e:1d:0f:80:
07:d2:5a:67:f6:85:11:49:45:96:39:2e:18:cf:22:
a8:62:32:fc:26:68:54:7d:50:02:86:27:c5:d4:3d:
61:17:8c:c7:f7:65:3c:d4:4f:98:8e:a8:a3:e5:dd:
48:2d:8b:8f:0a:b4:0c:14:d1:7f:9d:d5:6d:63:a6:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B0:DD:1A:B3:5B:4D:CA:EA:CF:1E:B6:F9:F5:84:1D:4F:AE:B2:97
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c7:07:b9:2a:9f:39:b4:0a:ac:77:c0:ff:b5:1a:2d:af:c3:
fa:20:22:e9:ef:d9:8c:52:f3:f9:11:f2:db:c3:0e:31:51:21:
a9:2e:7f:5e:b5:fb:52:c4:9a:a6:0e:f0:f4:e8:c0:7c:07:d7:
5f:23:ef:a8:ba:e8:23:77:49:68:18:ce:8a:59:63:e7:20:53:
a4:84:f5:55:a6:a3:3f:a4:26:43:98:04:07:ad:e4:12:6e:df:
ce:5b:c8:68:f0:f4:17:84:33:67:25:30:3a:6e:35:61:ad:24:
70:c7:46:9f:d4:2d:92:b1:a7:4a:cc:5f:c7:1b:85:85:73:10:
c7:26:18:ab:74:d1:7c:64:3e:b3:22:69:c2:0f:fb:33:c5:55:
76:18:cb:4c:f1:a7:62:1b:63:d0:65:ba:ae:cc:42:32:7a:ce:
2d:57:75:23:1d:3e:10:db:13:fb:7a:68:b4:0a:0d:5f:ae:7b:
38:32:14:ec:d9:31:06:95:90:b3:e5:22:e0:88:01:aa:06:ed:
52:84:07:8f:33:ae:e4:b4:85:c3:e7:d3:f6:6a:bf:86:cd:b1:
13:44:a0:db:ab:57:8c:53:df:72:0d:71:0a:ff:6d:75:80:e4:
59:5a:f8:c3:40:4b:4a:1d:4e:24:d8:49:b9:dc:cd:e1:3a:54:
46:4d:46:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoIJJUOsOfelm5h/4rOebiEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjU4N2E3YzQyYzI2MWZhMjU0YjBiODJlN2JjMDcxOWNj
NjQ4MTIwHhcNMjUxMDIxMTkwMDA1WhcNMjUxMDIyMTkwMDA1WjAzMTEwLwYDVQQD
EygwN2IwZGQxYWIzNWI0ZGNhZWFjZjFlYjZmOWY1ODQxZDRmYWViMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsLjA+F2/Txf5SIHn7P6PuhUzDxw
Qo+mYVqirvaUOScNWvY6FnqSbqnT8i6W6bESzokNMdPuyYO0CMUtNqRXMy3wKq+Q
B1qKPSLRzx/W7RL1ZzkKTjMs1FKDMiSo9NbmWbnr5wYopGP8eDpyarmJ3tqOLClb
8tqfGQqxxmM6ifYy4pP9BHuqt5l+nXBgqDEuO10PmJMoK8FKrBipOKcaNxpnZ6Ub
es79HLfyie3YIII2DpbhCOAjAUdPBB74PQ4dD4AH0lpn9oURSUWWOS4YzyKoYjL8
JmhUfVAChifF1D1hF4zH92U81E+Yjqij5d1ILYuPCrQMFNF/ndVtY6ZT7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAew3RqzW03K6s8etvn1hB1PrrKXMB8GA1UdIwQY
MBaAFJJlh6fELCYfolSwuC57wHGcxkgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjIt
ODhmYTNiNmViMDA2LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjItODhmYTNiNmViMDA2
LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMcHuSqf
ObQKrHfA/7UaLa/D+iAi6e/ZjFLz+RHy28MOMVEhqS5/XrX7UsSapg7w9OjAfAfX
XyPvqLroI3dJaBjOillj5yBTpIT1VaajP6QmQ5gEB63kEm7fzlvIaPD0F4QzZyUw
Om41Ya0kcMdGn9QtkrGnSsxfxxuFhXMQxyYYq3TRfGQ+syJpwg/7M8VVdhjLTPGn
Yhtj0GW6rsxCMnrOLVd1Ix0+ENsT+3potAoNX657ODIU7NkxBpWQs+Ui4IgBqgbt
UoQHjzOu5LSFw+fT9mq/hs2xE0Sg26tXjFPfcg1xCv9tdYDkWVr4w0BLSh1OJNhJ
udzN4TpURk1GhQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 22:52:03 2025 by rpki-client