Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: uaNuKRWA1hXoECH4z6wnWzUn/raRilGMTDn0a1LLTtA=
Subject key identifier: 38:41:68:7E:EE:40:E8:47:43:EC:50:CF:E8:02:17:6D:37:DF:10:1A
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 019A71B7E0F781AC1DD268875649A59A7C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 16B1
Signing time: Tue 11 Nov 2025 07:01:07 +0000
Manifest this update: Tue 11 Nov 2025 07:01:07 +0000
Manifest next update: Wed 12 Nov 2025 07:01:07 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: s7tzZdNJ26ZuvKZP2/CXIi1PYQ/XvYTfj//98HyOtak=)
2: m11OWXhefXzJ44FLBlsWKfsOtOo.roa (hash: djUPPyQWxYPvFQMatObPciTtNbLwqpNgMtWLRjYVwc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e0:f7:81:ac:1d:d2:68:87:56:49:a5:9a:7c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: Nov 11 07:01:07 2025 GMT
Not After : Nov 12 07:01:07 2025 GMT
Subject: CN=3841687eee40e84743ec50cfe802176d37df101a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:db:81:06:ca:4d:d6:cc:b0:8c:5c:1c:89:
21:3b:0d:3d:94:19:25:d4:e9:62:b0:54:5e:86:66:
0f:db:a5:fd:26:22:5c:e0:4f:5b:07:5c:7d:96:f7:
8d:cb:5b:7e:8c:39:38:11:88:d3:99:5d:17:90:f8:
da:10:a1:5e:38:f4:84:ce:d6:3c:54:07:33:7c:7a:
40:44:0d:d4:f5:89:08:e6:45:fc:f8:15:7a:2e:12:
b9:35:84:9a:78:fe:65:41:63:0d:c0:9f:28:88:27:
25:44:3a:2a:37:15:cb:2b:ac:11:cc:1f:f4:74:b0:
1d:f1:e7:f2:68:bf:7a:a9:f7:ea:78:19:65:26:f7:
e2:a9:30:94:39:0f:13:c7:4d:f0:c0:b6:f3:2b:66:
35:df:4d:f8:4f:40:1e:3d:3a:57:f4:e2:f1:ec:0a:
c6:57:d5:63:43:41:a4:42:d7:7c:6c:4b:c5:88:9c:
e1:ea:f8:50:cd:64:9f:8c:db:71:23:19:41:af:68:
9f:e4:63:e1:8c:71:35:f2:36:8a:a1:79:c3:8b:76:
ff:77:fc:9b:a9:72:83:48:d2:b4:7f:d2:d0:10:66:
42:8f:5b:48:d1:31:22:76:32:20:84:6b:77:57:3b:
69:d8:f9:6a:b3:8f:bb:2d:7e:a9:b3:65:d1:04:81:
1a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:41:68:7E:EE:40:E8:47:43:EC:50:CF:E8:02:17:6D:37:DF:10:1A
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a5:12:43:34:bc:ba:e7:3a:38:e1:79:2a:37:da:29:06:85:
bf:c1:e5:60:38:41:89:d6:4f:a1:6e:3f:b0:66:2b:4e:c7:f4:
e5:76:70:37:ee:14:e3:f6:79:dc:2e:03:2e:b6:8b:3d:75:54:
0f:3c:d8:d4:dd:15:36:30:35:00:90:1f:64:0a:15:a1:10:c2:
c4:cc:71:cb:c2:e2:6f:bc:1e:49:7c:5b:f0:1f:84:63:e3:a1:
13:55:97:fd:89:5e:14:03:f6:ec:31:0c:35:19:60:bc:ae:1a:
f6:cb:74:ec:25:43:65:d8:9f:74:72:25:d3:e5:6e:9c:17:eb:
f7:f1:82:79:14:bc:8b:86:07:72:10:87:b2:d9:ce:7d:69:f7:
1d:a1:d3:7c:46:46:83:3e:68:26:91:19:59:51:9d:dd:95:02:
c3:ac:1e:1e:f4:e8:df:8b:d2:a2:83:62:d8:9f:82:e1:3c:4d:
5d:49:a9:c5:b2:8a:91:09:b4:b7:37:3f:7c:ac:8f:1b:3f:7a:
1d:c9:81:33:27:9b:92:c0:1d:0e:61:33:aa:e6:6d:1b:7b:dd:
e4:2d:a4:2c:18:c5:16:c1:8c:24:c5:26:79:0d:34:5a:31:08:
38:04:6c:53:47:0c:1b:e3:a6:4d:ed:37:f0:55:cc:2f:c1:6c:
52:2e:6e:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt+D3gawd0miHVkmlmnw3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZmUzZGZhNzdlYjAyMDFjODU2ZDFlMWViZjAzMmJjYzhi
MTI0ZDgwHhcNMjUxMTExMDcwMTA3WhcNMjUxMTEyMDcwMTA3WjAzMTEwLwYDVQQD
EygzODQxNjg3ZWVlNDBlODQ3NDNlYzUwY2ZlODAyMTc2ZDM3ZGYxMDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSTbgQbKTdbMsIxcHIkhOw09lBkl
1OlisFRehmYP26X9JiJc4E9bB1x9lveNy1t+jDk4EYjTmV0XkPjaEKFeOPSEztY8
VAczfHpARA3U9YkI5kX8+BV6LhK5NYSaeP5lQWMNwJ8oiCclRDoqNxXLK6wRzB/0
dLAd8efyaL96qffqeBllJvfiqTCUOQ8Tx03wwLbzK2Y13034T0AePTpX9OLx7ArG
V9VjQ0GkQtd8bEvFiJzh6vhQzWSfjNtxIxlBr2if5GPhjHE18jaKoXnDi3b/d/yb
qXKDSNK0f9LQEGZCj1tI0TEidjIghGt3Vztp2Plqs4+7LX6ps2XRBIEaewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhBaH7uQOhHQ+xQz+gCF2033xAaMB8GA1UdIwQY
MBaAFCn+Pfp36wIByFbR4evwMrzIsSTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iZjI0MzAtMzJiMC00OTNjLWFjYmUt
YmViZWMyMzM2ZDQ4LzEvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9iZjI0MzAtMzJiMC00OTNjLWFjYmUtYmViZWMyMzM2ZDQ4
LzEvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaUSQzS8
uuc6OOF5KjfaKQaFv8HlYDhBidZPoW4/sGYrTsf05XZwN+4U4/Z53C4DLraLPXVU
DzzY1N0VNjA1AJAfZAoVoRDCxMxxy8Lib7weSXxb8B+EY+OhE1WX/YleFAP27DEM
NRlgvK4a9st07CVDZdifdHIl0+VunBfr9/GCeRS8i4YHchCHstnOfWn3HaHTfEZG
gz5oJpEZWVGd3ZUCw6weHvTo34vSooNi2J+C4TxNXUmpxbKKkQm0tzc/fKyPGz96
HcmBMyebksAdDmEzquZtG3vd5C2kLBjFFsGMJMUmeQ00WjEIOARsU0cMG+OmTe03
8FXML8FsUi5uDQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:16 2025 by rpki-client