Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
File: kioaZ-LacRLUVZzY29gUH48yd-g.mft (raw, json)
Hash identifier: ng99PrxJlhH3zhiM2LwbRC3xX1cRzaQ4BMgWmXBhOGA=
Subject key identifier: 6D:5C:39:DA:8F:F9:08:17:8D:A4:5C:EA:1E:43:39:A3:E7:64:76:F2
Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Certificate serial: 019A718090C33A718B46EBD6C8BABD767AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 06:00:42 +0000
Manifest this update: Tue 11 Nov 2025 06:00:42 +0000
Manifest next update: Wed 12 Nov 2025 06:00:42 +0000
Files and hashes: 1: DnNAXyr4mJbh9D2dH8b-Eqlp6x0.roa (hash: cdWRTytNkhNuFkycWb/FtgfNdkALU3YMBn7zWtYw/bY=)
2: Se8nAg0-xrQhHXIbYS2eSChavY4.roa (hash: NDhJCH+ULsr3l5nHLuoOYh5KnKuXbhQ8t+mEi5JVlO4=)
3: kioaZ-LacRLUVZzY29gUH48yd-g.crl (hash: JVaB+iONS+y4AVJmg6LlaBrc376oTGkE6WU4sYtFGPc=)
4: t4twN0aSa0K9eQj9_U5RX1_3ON0.roa (hash: bDhB2OJvqSQD0pWiRQx+Ywx+t/naLGQ733yplp/x/5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:90:c3:3a:71:8b:46:eb:d6:c8:ba:bd:76:7a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Validity
Not Before: Nov 11 06:00:42 2025 GMT
Not After : Nov 12 06:00:42 2025 GMT
Subject: CN=6d5c39da8ff908178da45cea1e4339a3e76476f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:e5:21:86:75:cf:e5:28:7c:63:24:e2:99:
53:66:b2:d5:ee:7b:6c:32:c2:67:e8:8c:72:4d:5b:
c7:f3:c5:f5:33:01:12:7e:c4:e9:a2:25:97:20:f3:
e8:a9:1d:c4:fa:ca:9e:47:0e:87:16:6e:2b:c7:ce:
42:54:fd:9d:31:00:51:b9:82:c1:26:bc:4d:26:41:
6f:62:e5:eb:96:b5:51:10:2b:37:c5:2a:07:e1:a1:
b2:8b:7c:19:0e:1f:3e:95:6f:41:f9:46:1d:93:e3:
40:aa:8e:16:99:59:b1:97:73:00:ac:de:e9:0a:d8:
3d:b8:36:2c:7a:04:7b:ee:75:45:90:a6:2d:d9:a9:
f3:41:45:4c:cf:e8:ad:5f:fb:78:40:f1:d6:93:25:
3f:51:95:5c:c3:00:5f:7f:76:ed:7a:61:c5:c5:79:
c0:f1:13:30:bb:b4:8b:8a:30:e5:cd:8c:0c:13:bc:
b0:c2:3e:db:00:d8:1d:89:30:7c:93:97:c5:c8:1a:
b5:37:b3:91:b9:69:6d:55:d6:55:35:d8:f5:67:94:
ca:b3:21:e2:08:e0:6b:46:ef:c1:4f:74:cf:81:6f:
04:e3:78:b5:7e:6c:de:69:8f:d6:f2:67:8d:1e:d9:
bc:92:f6:cf:9d:a6:7e:14:ec:34:7c:1c:42:cf:43:
58:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5C:39:DA:8F:F9:08:17:8D:A4:5C:EA:1E:43:39:A3:E7:64:76:F2
X509v3 Authority Key Identifier:
keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e6:bf:65:00:d3:6d:46:db:9c:66:3c:74:3b:cd:de:9c:1f:
d6:e5:3e:68:d2:dc:d9:11:6f:48:fa:6e:a9:05:8e:2c:ec:d2:
41:7e:3a:5d:63:53:d7:15:ab:d0:48:69:57:d3:83:05:4b:68:
50:48:5a:02:15:0d:85:8a:61:86:14:b2:45:ea:1e:58:46:60:
a6:ed:53:30:1c:8f:00:d3:c8:c3:39:a7:e3:79:f3:c8:4a:8f:
9a:19:a1:fa:d4:65:ed:57:77:05:89:f1:cd:17:9b:2d:57:42:
e9:14:4e:eb:9b:b4:ae:7b:a5:43:c0:e1:c4:60:89:ef:c3:92:
c1:69:08:2e:33:90:3e:ba:7d:7e:0c:0e:16:28:54:8d:0d:cf:
17:f6:b6:92:d4:82:ca:95:b1:23:b5:07:bf:4c:a0:b9:10:67:
df:f4:8b:c0:f4:16:7d:64:37:d8:03:83:6f:14:71:47:1e:3d:
b1:62:0d:52:1c:42:de:f8:4e:47:38:77:81:aa:b0:30:6c:07:
d5:c9:99:8a:79:c7:9f:f8:f1:44:28:23:44:17:0a:f5:ab:fb:
dd:05:62:f5:ee:ee:d2:54:7c:4d:98:0e:41:a7:69:8a:4e:bf:
9f:83:3e:b9:92:2e:e5:fc:b3:dc:5e:c6:89:15:36:d5:44:c0:
ad:de:f3:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgJDDOnGLRuvWyLq9dnqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMmExYTY3ZTJkYTcxMTJkNDU1OWNkOGRiZDgxNDFmOGYz
Mjc3ZTgwHhcNMjUxMTExMDYwMDQyWhcNMjUxMTEyMDYwMDQyWjAzMTEwLwYDVQQD
Eyg2ZDVjMzlkYThmZjkwODE3OGRhNDVjZWExZTQzMzlhM2U3NjQ3NmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYzlIYZ1z+UofGMk4plTZrLV7nts
MsJn6IxyTVvH88X1MwESfsTpoiWXIPPoqR3E+sqeRw6HFm4rx85CVP2dMQBRuYLB
JrxNJkFvYuXrlrVRECs3xSoH4aGyi3wZDh8+lW9B+UYdk+NAqo4WmVmxl3MArN7p
Ctg9uDYsegR77nVFkKYt2anzQUVMz+itX/t4QPHWkyU/UZVcwwBff3btemHFxXnA
8RMwu7SLijDlzYwME7ywwj7bANgdiTB8k5fFyBq1N7ORuWltVdZVNdj1Z5TKsyHi
COBrRu/BT3TPgW8E43i1fmzeaY/W8meNHtm8kvbPnaZ+FOw0fBxCz0NY3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1cOdqP+QgXjaRc6h5DOaPnZHbyMB8GA1UdIwQY
MBaAFJIqGmfi2nES1FWc2NvYFB+PMnfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZGFjMzAtODU3MC00N2IyLWIyNmEt
N2YzYTQyODE3MWM3LzEva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZGFjMzAtODU3MC00N2IyLWIyNmEtN2YzYTQyODE3MWM3
LzEva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOa/ZQDT
bUbbnGY8dDvN3pwf1uU+aNLc2RFvSPpuqQWOLOzSQX46XWNT1xWr0EhpV9ODBUto
UEhaAhUNhYphhhSyReoeWEZgpu1TMByPANPIwzmn43nzyEqPmhmh+tRl7Vd3BYnx
zRebLVdC6RRO65u0rnulQ8DhxGCJ78OSwWkILjOQPrp9fgwOFihUjQ3PF/a2ktSC
ypWxI7UHv0yguRBn3/SLwPQWfWQ32AODbxRxRx49sWINUhxC3vhORzh3gaqwMGwH
1cmZinnHn/jxRCgjRBcK9av73QVi9e7u0lR8TZgOQadpik6/n4M+uZIu5fyz3F7G
iRU21UTArd7zLA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:40 2025 by rpki-client