Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
File: kr0ltrnzz-B4X_1OXlQCgztKT40.mft (raw, json)
Hash identifier: ShCOnejjiRdzVWTD+it1ZR1oeiwZ40njBt00BY5VCM4=
Subject key identifier: 52:10:9B:A1:9B:EE:7B:02:77:EF:D4:29:A5:81:2F:D4:AA:FA:59:BB
Authority key identifier: 92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
Certificate issuer: /CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Certificate serial: 019A299E4B5EB15E29EBD243E2A21E878083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 07:00:31 +0000
Manifest this update: Tue 28 Oct 2025 07:00:31 +0000
Manifest next update: Wed 29 Oct 2025 07:00:31 +0000
Files and hashes: 1: bOAoo9Xlbcl-PK-rbfwF58rAKlc.roa (hash: Vn8yXcKwSTNwIZccCZWqjun9GvkjZC8dYUcNBhWRmco=)
2: kr0ltrnzz-B4X_1OXlQCgztKT40.crl (hash: OMQiXgMHBIZAsTJ3n+EnzHsrzj98ryTCYGz41xniHq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:4b:5e:b1:5e:29:eb:d2:43:e2:a2:1e:87:80:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Validity
Not Before: Oct 28 07:00:31 2025 GMT
Not After : Oct 29 07:00:31 2025 GMT
Subject: CN=52109ba19bee7b0277efd429a5812fd4aafa59bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:f1:46:b5:ac:49:ae:87:de:a1:32:df:8c:
e8:ed:19:0b:8c:01:2e:7d:b2:f0:06:75:56:c4:31:
3b:c2:e0:6d:4f:3c:0e:97:24:91:06:23:3a:f8:19:
b3:d8:10:94:28:72:50:0a:51:48:60:b2:2a:57:5d:
21:3e:79:37:92:ae:48:28:ad:37:59:d6:1c:71:68:
54:11:a1:b1:cb:6c:fb:0a:35:7b:1c:1e:28:d1:13:
bd:e3:ec:ed:6b:1e:27:d9:f3:7b:66:d3:22:4c:0c:
5c:4d:76:f3:40:8f:b9:21:66:fa:eb:bb:22:4e:a3:
2c:dc:df:f7:e0:68:03:8a:0b:fa:ca:c9:0e:dd:b9:
30:b6:21:d3:10:7c:1f:42:9a:6b:3c:1e:8f:19:09:
ac:0b:bb:30:31:13:c7:1b:9d:d1:8d:b3:80:0f:51:
20:63:21:b2:e1:1d:5d:80:67:75:02:47:ab:f3:15:
4f:b9:c9:ff:d9:5f:c6:e2:9f:49:8a:3d:97:72:f0:
57:a0:37:e7:1c:cf:79:c3:95:7e:53:bd:53:68:9c:
bc:47:62:80:bd:b2:42:05:3d:92:d9:52:71:5d:88:
17:00:b4:09:95:0f:c8:a2:19:96:d4:60:d6:b8:d6:
db:d7:e7:8a:d0:9e:47:72:61:7c:51:f4:b8:c0:65:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:10:9B:A1:9B:EE:7B:02:77:EF:D4:29:A5:81:2F:D4:AA:FA:59:BB
X509v3 Authority Key Identifier:
keyid:92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7d:32:bc:a9:99:b8:ee:10:f0:62:26:10:cd:86:93:aa:14:
56:ef:6b:9e:85:10:41:b8:61:98:12:39:f9:83:65:1d:f9:26:
c2:7c:15:82:7f:84:1d:34:81:1a:ba:8c:38:73:99:2b:f9:41:
9a:70:8a:ca:65:a6:d9:bc:94:39:47:17:37:df:4a:d3:24:00:
fe:58:c1:75:61:72:8b:60:ea:0f:cf:7c:1a:d8:07:69:0c:aa:
83:a7:9c:e7:3c:95:cd:ae:66:d2:ec:67:37:76:2a:16:f8:40:
9e:44:8d:5f:6b:e9:e2:87:54:a4:84:9b:c4:be:f0:b1:22:a5:
6c:b3:95:2b:37:9a:f4:94:9b:c5:d4:ed:8e:60:79:82:cc:03:
7c:62:c0:2c:9b:e2:2f:56:6c:e0:e3:24:8e:43:23:a4:fb:24:
8a:11:67:8c:fe:14:b3:11:1b:84:09:77:53:cc:d9:93:a6:dc:
35:91:74:ac:af:20:7e:4b:a9:72:ea:bb:6a:0d:b6:62:1c:a3:
06:36:df:77:9a:e1:0a:13:d9:0b:e7:40:9b:62:b5:cc:6d:6d:
a4:41:d6:9b:75:d1:c7:74:8b:b3:82:c4:f6:ec:11:51:8b:e5:
78:1e:ca:8f:c4:9c:35:b2:6a:22:75:1b:29:42:81:25:8e:12:
77:27:57:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopnktesV4p69JD4qIeh4CDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYmQyNWI2YjlmM2NmZTA3ODVmZmQ0ZTVlNTQwMjgzM2I0
YTRmOGQwHhcNMjUxMDI4MDcwMDMxWhcNMjUxMDI5MDcwMDMxWjAzMTEwLwYDVQQD
Eyg1MjEwOWJhMTliZWU3YjAyNzdlZmQ0MjlhNTgxMmZkNGFhZmE1OWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomjxRrWsSa6H3qEy34zo7RkLjAEu
fbLwBnVWxDE7wuBtTzwOlySRBiM6+Bmz2BCUKHJQClFIYLIqV10hPnk3kq5IKK03
WdYccWhUEaGxy2z7CjV7HB4o0RO94+ztax4n2fN7ZtMiTAxcTXbzQI+5IWb667si
TqMs3N/34GgDigv6yskO3bkwtiHTEHwfQpprPB6PGQmsC7swMRPHG53RjbOAD1Eg
YyGy4R1dgGd1Aker8xVPucn/2V/G4p9Jij2XcvBXoDfnHM95w5V+U71TaJy8R2KA
vbJCBT2S2VJxXYgXALQJlQ/IohmW1GDWuNbb1+eK0J5HcmF8UfS4wGV2hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIQm6Gb7nsCd+/UKaWBL9Sq+lm7MB8GA1UdIwQY
MBaAFJK9Jba588/geF/9Tl5UAoM7Sk+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3IwbHRybnp6LUI0WF8xT1hsUUNnenRLVDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wMmM2OGItY2VkZi00MzE3LTgyYjgt
MmNkOGM5MTM5MDMwLzEva3IwbHRybnp6LUI0WF8xT1hsUUNnenRLVDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wMmM2OGItY2VkZi00MzE3LTgyYjgtMmNkOGM5MTM5MDMw
LzEva3IwbHRybnp6LUI0WF8xT1hsUUNnenRLVDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgX0yvKmZ
uO4Q8GImEM2Gk6oUVu9rnoUQQbhhmBI5+YNlHfkmwnwVgn+EHTSBGrqMOHOZK/lB
mnCKymWm2byUOUcXN99K0yQA/ljBdWFyi2DqD898GtgHaQyqg6ec5zyVza5m0uxn
N3YqFvhAnkSNX2vp4odUpISbxL7wsSKlbLOVKzea9JSbxdTtjmB5gswDfGLALJvi
L1Zs4OMkjkMjpPskihFnjP4UsxEbhAl3U8zZk6bcNZF0rK8gfkupcuq7ag22Yhyj
Bjbfd5rhChPZC+dAm2K1zG1tpEHWm3XRx3SLs4LE9uwRUYvleB7Kj8ScNbJqInUb
KUKBJY4SdydX6Q==
-----END CERTIFICATE-----
Generated at Tue Oct 28 14:18:34 2025 by rpki-client