Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
File: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json)
Hash identifier: 1eu9jimqR29bd6bFf50fqdVW8frzZpQ7qPwAIuCwTvg=
Subject key identifier: 48:C4:76:1D:AC:F6:DC:A6:26:DC:28:A5:30:57:DA:94:41:3E:2B:62
Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
Certificate issuer: /CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Certificate serial: 019A4B85B506C7B00A254D3FF33A5B7B97D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
Manifest number: 16BA
Signing time: Mon 03 Nov 2025 21:00:45 +0000
Manifest this update: Mon 03 Nov 2025 21:00:45 +0000
Manifest next update: Tue 04 Nov 2025 21:00:45 +0000
Files and hashes: 1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: ThK9XztYU3gcfgeGX21QYIjACg9PIRoC0NkMu+MM3Ik=)
2: iKZxL2ITs2UEzwBih25U8l0JZY4.roa (hash: vWT6oURLAcf2YPbSqMzxuY7JjVV7uzKdKfyzAxVTuCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:85:b5:06:c7:b0:0a:25:4d:3f:f3:3a:5b:7b:97:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Validity
Not Before: Nov 3 21:00:45 2025 GMT
Not After : Nov 4 21:00:45 2025 GMT
Subject: CN=48c4761dacf6dca626dc28a53057da94413e2b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:6e:0a:ec:49:4a:f8:ef:2b:f4:77:ed:9a:
a8:21:21:bd:fa:a1:a9:3e:b8:c4:3e:e5:26:43:71:
6f:83:14:f6:7f:0e:08:91:43:4b:d3:65:51:22:e3:
31:62:f1:7d:3b:c0:58:79:59:18:3f:6e:ec:37:13:
39:b2:6e:d0:a3:37:a2:67:a7:ed:d5:ee:a8:50:af:
a4:8e:7b:81:a0:b7:47:8d:de:47:5a:f9:0d:c4:5b:
59:e6:d8:a0:e8:ce:11:d6:ca:6b:bf:e7:6f:ec:44:
cd:16:a0:6b:40:e0:22:bb:3b:8c:e4:b4:ca:c3:a3:
86:a7:0f:49:ab:d3:20:16:b4:da:8f:b1:8c:2a:ec:
c1:34:00:cd:bf:47:c1:65:09:a1:03:80:ed:96:ab:
37:3f:20:7a:1d:d4:d5:ff:04:c8:a7:4b:8e:48:e7:
ca:fe:4b:b9:9a:40:9e:15:d4:7d:e8:ac:ca:37:b6:
f2:80:cc:89:49:ea:02:fe:14:16:05:08:44:dc:a7:
98:95:7c:d2:73:be:d0:98:6c:dc:42:c3:97:8b:5c:
1d:b2:05:56:db:35:f0:3d:d3:63:29:6f:28:4c:70:
d8:31:4e:00:10:6d:a2:6e:07:a6:ac:96:35:c3:bd:
d6:d2:a5:80:09:a6:b4:ad:bc:df:6a:bd:69:85:59:
82:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C4:76:1D:AC:F6:DC:A6:26:DC:28:A5:30:57:DA:94:41:3E:2B:62
X509v3 Authority Key Identifier:
keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e9:c2:b1:31:3a:50:45:9f:6e:a7:fd:93:23:d0:81:42:37:
ec:6c:b0:c1:7b:0b:ca:fd:98:17:e6:b8:95:18:ba:3b:bc:9f:
95:7d:a6:e2:57:76:ab:4b:9c:9c:15:6e:da:bb:12:4e:3d:e8:
e7:cb:a7:07:34:fc:1a:11:d5:c0:71:5f:47:d8:ee:7d:f8:21:
d0:44:db:61:7b:8d:94:a4:3d:d7:12:62:66:b2:08:cd:09:50:
3f:8e:7b:ed:f5:19:d9:b1:a2:97:01:24:2f:c9:90:a9:5f:08:
3c:0b:d2:97:5a:c5:81:39:42:a8:ba:de:1a:a3:49:41:e1:db:
41:1e:32:0c:f7:49:7d:c8:42:e7:9e:a3:54:4e:9d:6f:3c:ce:
6d:12:fc:51:a6:d6:4d:b3:59:0c:b1:46:b1:dc:88:06:08:14:
1b:de:2f:ee:00:54:6e:7d:ae:2b:40:d7:11:59:29:e8:60:30:
2d:d5:e8:e0:91:4a:e2:a6:be:c8:65:0f:31:4b:5a:6e:55:8a:
04:12:14:46:7d:70:8a:81:f2:6b:bd:4a:15:11:29:00:95:23:
ab:df:22:e1:ee:7f:38:d3:bb:0e:4b:2b:29:55:e5:c5:bf:ca:
7c:db:e0:74:60:7e:26:6b:c9:89:19:f9:39:d2:e1:d1:8a:fd:
14:05:44:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpLhbUGx7AKJU0/8zpbe5fWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhY2Q4ZDE2ODJlNjYyMmMxYzA5MjM3YmM0MWFhNTE2NjY5
NjcyYjcwHhcNMjUxMTAzMjEwMDQ1WhcNMjUxMTA0MjEwMDQ1WjAzMTEwLwYDVQQD
Eyg0OGM0NzYxZGFjZjZkY2E2MjZkYzI4YTUzMDU3ZGE5NDQxM2UyYjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8BuCuxJSvjvK/R37ZqoISG9+qGp
PrjEPuUmQ3FvgxT2fw4IkUNL02VRIuMxYvF9O8BYeVkYP27sNxM5sm7QozeiZ6ft
1e6oUK+kjnuBoLdHjd5HWvkNxFtZ5tig6M4R1sprv+dv7ETNFqBrQOAiuzuM5LTK
w6OGpw9Jq9MgFrTaj7GMKuzBNADNv0fBZQmhA4Dtlqs3PyB6HdTV/wTIp0uOSOfK
/ku5mkCeFdR96KzKN7bygMyJSeoC/hQWBQhE3KeYlXzSc77QmGzcQsOXi1wdsgVW
2zXwPdNjKW8oTHDYMU4AEG2ibgemrJY1w73W0qWACaa0rbzfar1phVmCiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjEdh2s9tymJtwopTBX2pRBPitiMB8GA1UdIwQY
MBaAFCrNjRaC5mIsHAkje8QapRZmlnK3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMt
ZTg0Y2IxZGEyMWJkLzEvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMtZTg0Y2IxZGEyMWJk
LzEvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+nCsTE6
UEWfbqf9kyPQgUI37GywwXsLyv2YF+a4lRi6O7yflX2m4ld2q0ucnBVu2rsSTj3o
58unBzT8GhHVwHFfR9juffgh0ETbYXuNlKQ91xJiZrIIzQlQP4577fUZ2bGilwEk
L8mQqV8IPAvSl1rFgTlCqLreGqNJQeHbQR4yDPdJfchC556jVE6dbzzObRL8UabW
TbNZDLFGsdyIBggUG94v7gBUbn2uK0DXEVkp6GAwLdXo4JFK4qa+yGUPMUtablWK
BBIURn1wioHya71KFREpAJUjq98i4e5/ONO7DksrKVXlxb/KfNvgdGB+JmvJiRn5
OdLh0Yr9FAVE9A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 02:56:13 2025 by rpki-client