Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
File: KcFw2YteNdfVFTdnHGBApRUYhLw.mft (raw, json)
Hash identifier: KYbovAyvcmX5eGc9s66O5fMoF//HwQ2T0WjyHx70wD4=
Subject key identifier: 98:F0:1F:4C:2F:51:78:0A:34:E8:FC:E5:4E:34:5A:67:38:4A:8A:5F
Authority key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
Certificate issuer: /CN=29c170d98b5e35d7d51537671c6040a5151884bc
Certificate serial: 019A21097F5C2E1843FB9F8BAF163B06A2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 15:01:01 +0000
Manifest this update: Sun 26 Oct 2025 15:01:01 +0000
Manifest next update: Mon 27 Oct 2025 15:01:01 +0000
Files and hashes: 1: 3ZJjipNvCnffHlBZEGLPYL1cd6o.roa (hash: 59Oe/VE87ztmqQyIvIAIji5wjLpRLRfwhyLcTm5yzDc=)
2: KcFw2YteNdfVFTdnHGBApRUYhLw.crl (hash: aqOOzcwxS7egq91mqB4DgU7Tkn+Ka+D5U7A0I5JY+U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:7f:5c:2e:18:43:fb:9f:8b:af:16:3b:06:a2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c170d98b5e35d7d51537671c6040a5151884bc
Validity
Not Before: Oct 26 15:01:01 2025 GMT
Not After : Oct 27 15:01:01 2025 GMT
Subject: CN=98f01f4c2f51780a34e8fce54e345a67384a8a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:5f:20:30:d5:1c:2d:26:f7:11:49:11:2e:
b7:16:25:1c:6a:98:87:cb:bc:3f:42:9b:dc:a1:ee:
b5:56:69:21:a4:2f:da:1f:01:cf:16:6d:5b:ee:43:
6c:67:41:da:f8:36:44:31:6f:28:15:25:f8:47:a9:
30:1a:87:02:ca:a9:ce:b7:40:80:2f:7a:50:e8:78:
ab:ba:06:2d:45:3e:8e:c0:b9:60:b7:82:c8:aa:2d:
f3:94:a5:b6:df:6d:0e:71:19:08:fa:0a:0d:8c:f5:
31:c0:51:19:ca:27:0e:3b:98:77:00:f1:1a:cf:d9:
83:f0:4f:1c:a7:ea:86:6b:26:8c:51:f0:fd:e4:93:
85:5a:7a:be:c8:b1:c2:7a:19:6e:a7:cd:57:a5:b9:
f7:b5:c6:08:32:68:99:b9:0d:5b:b7:b1:7d:9a:02:
1f:e2:95:2e:39:e0:52:9f:78:1c:3f:45:00:ae:32:
cb:2a:bf:cf:f9:5a:99:94:c1:0a:7f:e8:0c:90:65:
c0:c9:d2:f3:41:ad:9e:31:d5:55:76:39:95:f4:2a:
e9:b7:ea:a9:ca:93:04:be:78:76:02:d2:d2:54:01:
ca:dc:15:37:4c:7f:3c:a2:4f:cd:33:d9:c7:40:23:
1a:97:e5:91:62:2a:a4:6f:91:e5:b9:21:ff:53:ea:
5b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F0:1F:4C:2F:51:78:0A:34:E8:FC:E5:4E:34:5A:67:38:4A:8A:5F
X509v3 Authority Key Identifier:
keyid:29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:37:d4:56:28:ee:2a:dd:0e:ac:40:bf:ae:3c:fe:9d:ed:6f:
2a:bd:3b:ec:01:81:3c:e0:81:c9:b2:f1:7d:10:57:e8:f3:82:
7c:7a:3b:87:34:10:ae:c6:f3:aa:9b:fb:a4:64:18:9a:31:4d:
91:f0:bd:7c:7f:8a:40:5a:0d:cc:e2:1a:14:9f:5d:ee:1b:dd:
ea:02:f2:d3:78:e4:bf:e0:eb:f7:85:d6:58:52:e7:ac:f8:1f:
31:6d:38:22:9a:af:53:8a:4e:71:06:3c:c4:a8:d2:87:2e:ea:
86:82:cf:a7:e3:04:2c:5d:09:9b:09:f1:06:0b:74:45:5c:45:
7a:88:65:7c:93:62:c7:6a:18:dc:2f:62:3f:8d:a9:76:57:ad:
63:1e:d0:ec:a6:1f:50:86:eb:d6:0d:56:9d:1c:52:9e:c6:a1:
74:5a:ec:f1:34:cd:a3:ff:a0:81:53:2b:38:67:c2:5c:79:7a:
57:c9:58:02:df:86:86:cb:84:7a:6c:e3:33:9c:cf:a6:70:46:
af:61:76:51:41:c1:73:bb:2b:99:62:e5:ed:d3:f4:50:1f:3b:
c2:50:49:b4:e6:80:b2:07:02:b9:ac:d3:04:bf:c0:fb:a0:46:
b5:6c:ba:4d:5c:41:d7:ab:1f:d8:02:09:b6:c2:3b:35:21:95:
89:7d:9a:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCX9cLhhD+5+LrxY7BqKyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YzE3MGQ5OGI1ZTM1ZDdkNTE1Mzc2NzFjNjA0MGE1MTUx
ODg0YmMwHhcNMjUxMDI2MTUwMTAxWhcNMjUxMDI3MTUwMTAxWjAzMTEwLwYDVQQD
Eyg5OGYwMWY0YzJmNTE3ODBhMzRlOGZjZTU0ZTM0NWE2NzM4NGE4YTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXZfIDDVHC0m9xFJES63FiUcapiH
y7w/Qpvcoe61VmkhpC/aHwHPFm1b7kNsZ0Ha+DZEMW8oFSX4R6kwGocCyqnOt0CA
L3pQ6HirugYtRT6OwLlgt4LIqi3zlKW2320OcRkI+goNjPUxwFEZyicOO5h3APEa
z9mD8E8cp+qGayaMUfD95JOFWnq+yLHCehlup81Xpbn3tcYIMmiZuQ1bt7F9mgIf
4pUuOeBSn3gcP0UArjLLKr/P+VqZlMEKf+gMkGXAydLzQa2eMdVVdjmV9Crpt+qp
ypMEvnh2AtLSVAHK3BU3TH88ok/NM9nHQCMal+WRYiqkb5HluSH/U+pb3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjwH0wvUXgKNOj85U40Wmc4SopfMB8GA1UdIwQY
MBaAFCnBcNmLXjXX1RU3ZxxgQKUVGIS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9lMjVhM2MtZGVmNi00MjI4LWExMGIt
YzQ1ZTk0OWU5Y2Q2LzEvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9lMjVhM2MtZGVmNi00MjI4LWExMGItYzQ1ZTk0OWU5Y2Q2
LzEvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDfUViju
Kt0OrEC/rjz+ne1vKr077AGBPOCBybLxfRBX6POCfHo7hzQQrsbzqpv7pGQYmjFN
kfC9fH+KQFoNzOIaFJ9d7hvd6gLy03jkv+Dr94XWWFLnrPgfMW04IpqvU4pOcQY8
xKjShy7qhoLPp+MELF0JmwnxBgt0RVxFeohlfJNix2oY3C9iP42pdletYx7Q7KYf
UIbr1g1WnRxSnsahdFrs8TTNo/+ggVMrOGfCXHl6V8lYAt+GhsuEemzjM5zPpnBG
r2F2UUHBc7srmWLl7dP0UB87wlBJtOaAsgcCuazTBL/A+6BGtWy6TVxB16sf2AIJ
tsI7NSGViX2a+w==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:40:54 2025 by rpki-client