Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
File: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft (raw, json)
Hash identifier: y2n33rbDHw0GDZLNIQ8vP6x5cPczyCgiTwkQELXyQ/o=
Subject key identifier: BC:0D:CF:CF:31:F4:62:5F:86:7A:8A:69:05:C1:97:55:5A:FE:25:0C
Authority key identifier: 90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
Certificate issuer: /CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Certificate serial: 019A71EE67CC19A66338CDB5D68452F1626F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
Manifest number: 1471
Signing time: Tue 11 Nov 2025 08:00:40 +0000
Manifest this update: Tue 11 Nov 2025 08:00:40 +0000
Manifest next update: Wed 12 Nov 2025 08:00:40 +0000
Files and hashes: 1: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl (hash: IjSwowOkGDNxvDhxhf630sWvZkkaefTaXyynTC89bgI=)
2: yawZ00_1T1Sp8kgBpRr9kJDLMKE.roa (hash: a+4sT7IhaHQCrsjdIym/2JOKSsvSh3sX6W3E1vUrWYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:67:cc:19:a6:63:38:cd:b5:d6:84:52:f1:62:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Validity
Not Before: Nov 11 08:00:40 2025 GMT
Not After : Nov 12 08:00:40 2025 GMT
Subject: CN=bc0dcfcf31f4625f867a8a6905c197555afe250c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:a4:6a:94:83:bf:4d:d1:ad:09:03:97:0c:
90:3f:43:9f:a1:81:72:cd:cd:df:db:7b:e9:85:d3:
cf:42:99:33:77:bd:fe:c9:16:07:72:0e:3d:47:93:
9d:d3:1b:e1:d7:c8:7d:b0:0f:b2:aa:74:26:5b:86:
ae:aa:6f:36:16:15:47:c8:b0:49:29:7f:de:97:f9:
72:ff:a2:3c:aa:f7:0f:23:c6:7f:62:15:4c:71:ad:
0b:41:d9:25:35:06:f8:3f:59:91:4f:e7:46:17:09:
b7:cd:8e:76:33:ca:a7:7b:2b:57:97:4f:8f:bb:8a:
df:a7:d5:91:16:e5:67:be:82:03:5f:32:47:5d:17:
2a:75:84:24:eb:26:54:39:10:ff:44:af:33:b8:4a:
13:53:1e:4c:46:45:49:70:ff:00:05:af:f4:59:f9:
ec:96:30:c3:a5:b0:c2:c3:60:3f:3b:0e:fe:fb:e7:
15:ab:03:b6:e6:5f:06:db:3b:77:2c:f3:a3:f6:bf:
38:cc:a5:d3:cb:3c:2b:69:0e:fb:47:cf:be:04:b7:
e5:28:aa:f9:5d:09:81:6e:4f:24:28:99:af:91:a3:
0d:67:8f:dc:51:38:ab:04:02:98:bb:da:dd:b8:bc:
e6:bc:8b:56:89:fc:a5:3c:63:bc:ee:d4:01:f5:a7:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0D:CF:CF:31:F4:62:5F:86:7A:8A:69:05:C1:97:55:5A:FE:25:0C
X509v3 Authority Key Identifier:
keyid:90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c6:e4:ea:08:ab:80:58:fb:91:c5:e0:22:ef:f8:d4:17:aa:
d6:4c:3b:5c:f0:33:0d:b4:c0:08:8c:45:f4:a0:3e:26:44:b1:
ed:3f:ab:d2:44:cb:b0:4f:57:5d:c6:d2:27:c2:9e:3f:95:84:
b0:ce:03:d2:bc:56:8b:98:14:3d:62:a1:14:00:e9:87:1b:23:
f4:a9:59:13:c8:90:96:20:e0:16:27:36:8b:07:fe:7d:b9:db:
0d:a6:2d:c7:14:16:3c:dc:2b:e3:ae:10:df:77:9b:59:e0:32:
5d:b2:e7:af:de:fc:e1:9d:cb:b8:c9:41:31:0a:13:ed:f7:43:
9b:6e:82:15:69:cc:05:88:46:18:07:f3:74:2d:a5:8f:57:0a:
e2:6b:8f:ad:f3:0c:6a:75:fd:08:9f:55:68:f0:3f:b1:17:e3:
20:d0:20:6b:bb:d5:af:fb:6a:70:f3:a1:f1:dc:c9:3f:80:a6:
24:54:e5:ee:d6:3a:49:0d:c1:f9:5d:ac:b1:27:af:25:df:34:
84:90:a6:65:86:09:6a:8c:bb:ce:80:12:4a:10:1f:9a:81:29:
2b:d8:bc:40:ea:2d:ac:98:5e:c8:c5:63:64:a3:84:34:a7:02:
33:bf:b7:5d:5f:4d:ab:40:1d:e7:97:c5:99:ca:23:49:8a:5a:
e5:32:b6:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7mfMGaZjOM211oRS8WJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYTAzYjY4Zjg3ZGE3MWMyNzFjOWNmNWM4MmU5NTVkYmM2
NWMxMDQwHhcNMjUxMTExMDgwMDQwWhcNMjUxMTEyMDgwMDQwWjAzMTEwLwYDVQQD
EyhiYzBkY2ZjZjMxZjQ2MjVmODY3YThhNjkwNWMxOTc1NTVhZmUyNTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJGkapSDv03RrQkDlwyQP0OfoYFy
zc3f23vphdPPQpkzd73+yRYHcg49R5Od0xvh18h9sA+yqnQmW4auqm82FhVHyLBJ
KX/el/ly/6I8qvcPI8Z/YhVMca0LQdklNQb4P1mRT+dGFwm3zY52M8qneytXl0+P
u4rfp9WRFuVnvoIDXzJHXRcqdYQk6yZUORD/RK8zuEoTUx5MRkVJcP8ABa/0Wfns
ljDDpbDCw2A/Ow7+++cVqwO25l8G2zt3LPOj9r84zKXTyzwraQ77R8++BLflKKr5
XQmBbk8kKJmvkaMNZ4/cUTirBAKYu9rduLzmvItWifylPGO87tQB9adlfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwNz88x9GJfhnqKaQXBl1Va/iUMMB8GA1UdIwQY
MBaAFJCgO2j4faccJxyc9cgulV28ZcEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tBN2FQaDlweHduSEp6MXlDNlZYYnhsd1FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YWZjMzctMDkwOS00ZDU0LWJjZWYt
YmQzNGUwYTk1YTFlLzEva0tBN2FQaDlweHduSEp6MXlDNlZYYnhsd1FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81YWZjMzctMDkwOS00ZDU0LWJjZWYtYmQzNGUwYTk1YTFl
LzEva0tBN2FQaDlweHduSEp6MXlDNlZYYnhsd1FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksbk6gir
gFj7kcXgIu/41Beq1kw7XPAzDbTACIxF9KA+JkSx7T+r0kTLsE9XXcbSJ8KeP5WE
sM4D0rxWi5gUPWKhFADphxsj9KlZE8iQliDgFic2iwf+fbnbDaYtxxQWPNwr464Q
33ebWeAyXbLnr9784Z3LuMlBMQoT7fdDm26CFWnMBYhGGAfzdC2lj1cK4muPrfMM
anX9CJ9VaPA/sRfjINAga7vVr/tqcPOh8dzJP4CmJFTl7tY6SQ3B+V2ssSevJd80
hJCmZYYJaoy7zoASShAfmoEpK9i8QOotrJheyMVjZKOENKcCM7+3XV9Nq0Ad55fF
mcojSYpa5TK2vA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:28 2025 by rpki-client