Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
File: KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft (raw, json)
Hash identifier: eskiecahXsZHFMQ000jw0QQyvILUDwrFo3eSM0X0BKs=
Subject key identifier: 81:67:84:0A:01:18:A1:91:6F:BD:18:1B:22:D9:5A:86:63:C2:49:CE
Authority key identifier: 29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
Certificate issuer: /CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Certificate serial: 019A2364F77B3D67041C73E94AB68845FBD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 02:00:10 +0000
Manifest this update: Mon 27 Oct 2025 02:00:10 +0000
Manifest next update: Tue 28 Oct 2025 02:00:10 +0000
Files and hashes: 1: KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl (hash: 2TzqDekorF54HOn9Z+Fyi7CgygvR1bZYuZSv65qtQtg=)
2: aI7Jkk0hKBc5FvPXNc087oh3O6I.roa (hash: NGQRZS/iBgx2LNEuUjWmKtWDne6hFeLh8g8pm9sOGIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:64:f7:7b:3d:67:04:1c:73:e9:4a:b6:88:45:fb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Validity
Not Before: Oct 27 02:00:10 2025 GMT
Not After : Oct 28 02:00:10 2025 GMT
Subject: CN=8167840a0118a1916fbd181b22d95a8663c249ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c4:70:c3:d0:5b:f6:5d:8c:fe:8b:48:e1:96:
7f:de:91:86:07:22:82:94:ab:08:fc:bb:2e:f6:12:
cc:a9:d5:95:da:7b:5a:16:01:dc:76:54:7c:95:f0:
29:67:54:f7:a3:5c:74:85:51:3d:cc:3c:f0:ef:8a:
ee:ae:1e:ce:ee:b4:38:35:e8:8e:b5:87:16:6b:7a:
b6:e3:f8:ee:dc:39:c5:05:f9:e3:6f:46:dd:73:4e:
d4:61:5f:8e:27:49:a5:0b:2f:50:06:5b:c5:84:05:
d2:c7:43:41:b6:83:7c:45:f3:fb:d3:cb:12:ea:42:
e2:93:23:89:7a:a6:36:5b:40:93:15:69:f2:a1:1c:
b1:b0:08:75:70:be:d7:ac:cf:14:9d:88:09:e8:07:
5d:91:01:89:9b:c5:19:c6:fe:51:ed:03:2d:45:7b:
e0:07:7d:54:8a:4f:94:2d:30:27:b4:32:41:44:7d:
9b:59:f7:f9:db:1a:7f:de:11:c7:25:47:65:cc:6c:
e0:15:16:90:af:58:e9:20:cf:c4:28:d9:9b:d5:f3:
b0:c4:ac:bd:e3:84:64:a9:37:32:24:d9:ba:82:00:
74:9c:c3:c9:d5:6d:19:eb:50:5a:da:4c:65:a2:5c:
8e:2f:47:f6:61:92:e6:1c:dc:41:9b:15:db:b7:ee:
79:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:67:84:0A:01:18:A1:91:6F:BD:18:1B:22:D9:5A:86:63:C2:49:CE
X509v3 Authority Key Identifier:
keyid:29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c4:03:cf:78:dd:25:7c:db:83:55:c0:2b:cb:51:9a:2b:13:
9f:73:bb:3a:22:0f:49:a2:3e:0e:52:08:c3:0c:27:7d:32:19:
9d:39:e4:57:b8:1c:14:41:1a:89:5d:10:f9:25:41:ff:fd:39:
a0:6f:35:35:78:47:15:78:3c:a9:a0:9f:00:2a:45:3e:57:89:
12:b4:4d:c9:a2:47:00:e5:91:1f:8d:ff:81:64:c7:25:2f:39:
d3:85:44:5b:3f:4b:7a:3a:58:99:29:ad:3b:77:e5:16:73:e3:
70:47:b7:62:2f:87:b2:b4:9c:f3:c4:54:77:9f:23:5d:00:7c:
f9:09:b3:6b:17:67:c3:f1:3d:af:bc:a5:2a:b9:12:a0:cd:db:
10:5d:6a:dc:3b:0d:6a:f4:97:4b:be:16:62:87:d2:88:b0:dd:
e8:94:f3:36:18:55:aa:ba:76:b6:6f:90:7c:5a:a6:9b:68:e3:
5f:13:ae:8e:ce:57:ff:95:9b:95:ed:53:7a:a9:c6:95:f8:7a:
b9:92:52:43:ef:66:eb:42:11:17:d7:d7:67:5a:b2:4b:45:34:
19:01:93:44:e1:0c:a6:c9:aa:2c:da:5a:72:13:ff:90:3c:83:
ee:be:8e:52:17:a7:58:92:76:e6:8e:b6:a1:d0:54:41:5d:69:
31:0b:92:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojZPd7PWcEHHPpSraIRfvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NWI2YTM0YTIxMDliYTdjNGQ5N2Y3NmM3NDQ2NmYxNGMz
MzMzZTAwHhcNMjUxMDI3MDIwMDEwWhcNMjUxMDI4MDIwMDEwWjAzMTEwLwYDVQQD
Eyg4MTY3ODQwYTAxMThhMTkxNmZiZDE4MWIyMmQ5NWE4NjYzYzI0OWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58Rww9Bb9l2M/otI4ZZ/3pGGByKC
lKsI/Lsu9hLMqdWV2ntaFgHcdlR8lfApZ1T3o1x0hVE9zDzw74rurh7O7rQ4NeiO
tYcWa3q24/ju3DnFBfnjb0bdc07UYV+OJ0mlCy9QBlvFhAXSx0NBtoN8RfP708sS
6kLikyOJeqY2W0CTFWnyoRyxsAh1cL7XrM8UnYgJ6AddkQGJm8UZxv5R7QMtRXvg
B31Uik+ULTAntDJBRH2bWff52xp/3hHHJUdlzGzgFRaQr1jpIM/EKNmb1fOwxKy9
44RkqTcyJNm6ggB0nMPJ1W0Z61Ba2kxlolyOL0f2YZLmHNxBmxXbt+55LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFnhAoBGKGRb70YGyLZWoZjwknOMB8GA1UdIwQY
MBaAFClbajSiEJunxNl/dsdEZvFMMzPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Z0cU5LSVFtNmZFMlg5MngwUm04VXd6TS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lOWIxNzMtOTJiNi00MjEwLWE4ZTAt
Yjc5N2E0NDA2ZjMwLzEvS1Z0cU5LSVFtNmZFMlg5MngwUm04VXd6TS1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lOWIxNzMtOTJiNi00MjEwLWE4ZTAtYjc5N2E0NDA2ZjMw
LzEvS1Z0cU5LSVFtNmZFMlg5MngwUm04VXd6TS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcQDz3jd
JXzbg1XAK8tRmisTn3O7OiIPSaI+DlIIwwwnfTIZnTnkV7gcFEEaiV0Q+SVB//05
oG81NXhHFXg8qaCfACpFPleJErRNyaJHAOWRH43/gWTHJS8504VEWz9LejpYmSmt
O3flFnPjcEe3Yi+HsrSc88RUd58jXQB8+Qmzaxdnw/E9r7ylKrkSoM3bEF1q3DsN
avSXS74WYofSiLDd6JTzNhhVqrp2tm+QfFqmm2jjXxOujs5X/5Wble1TeqnGlfh6
uZJSQ+9m60IRF9fXZ1qyS0U0GQGTROEMpsmqLNpachP/kDyD7r6OUhenWJJ25o62
odBUQV1pMQuSww==
-----END CERTIFICATE-----
Generated at Mon Oct 27 03:58:23 2025 by rpki-client