Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
File: KboKHXhI0sGyMd0-aCRCDRh5mRM.mft (raw, json)
Hash identifier: ImTeDjsJKlUedJpJV3EZHVwiPobW7XeuxHnzZ1YXN2c=
Subject key identifier: 53:84:80:F8:98:B5:81:E2:C5:F6:1B:EA:7D:08:A3:D3:45:61:4D:3F
Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
Certificate issuer: /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Certificate serial: 019A7293B3608E8AC2C5C609CFFA513F274E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 11:01:13 +0000
Manifest this update: Tue 11 Nov 2025 11:01:13 +0000
Manifest next update: Wed 12 Nov 2025 11:01:13 +0000
Files and hashes: 1: KboKHXhI0sGyMd0-aCRCDRh5mRM.crl (hash: fQ11z8zbd3whuJGqTxBc8GJYtJOs2lcQ0cmvs4nvFl0=)
2: eZNf3C9feSNGJ4V8vhX9W1CodHo.roa (hash: jCzejzqRu1A4u7nv7yzoXy+ymx/Nx97x4lbTMxiUYlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b3:60:8e:8a:c2:c5:c6:09:cf:fa:51:3f:27:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Validity
Not Before: Nov 11 11:01:13 2025 GMT
Not After : Nov 12 11:01:13 2025 GMT
Subject: CN=538480f898b581e2c5f61bea7d08a3d345614d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:65:85:c8:bd:22:44:55:8f:85:ff:8d:35:
52:ef:59:23:06:e1:45:83:76:e6:1c:b1:19:89:f1:
33:e9:f8:a2:9c:30:86:66:90:cd:2c:7c:c8:cc:de:
d5:15:59:c6:6b:d8:4b:8a:15:32:0e:a8:98:7c:b4:
d8:8f:26:f7:65:cd:24:f6:4b:c6:4e:91:0d:7f:9a:
85:df:56:2a:66:67:44:cf:44:61:d4:a9:a1:de:20:
d4:02:76:48:53:8f:f7:07:63:c3:13:3a:e8:0c:ae:
4e:ef:92:5b:97:01:7c:c6:2a:c5:0f:21:70:d4:f7:
2d:28:b1:27:fe:fe:e8:3e:a1:03:24:c7:fe:28:d7:
dc:95:03:90:56:a8:7f:7d:37:34:8a:2e:40:a3:7a:
4b:84:a9:5e:63:4e:f3:46:fb:61:d7:d2:b3:a2:8c:
b8:ab:0c:6f:b7:5a:65:bb:dd:2c:ff:5f:d9:c3:83:
c4:84:5d:42:3c:5e:41:f6:e8:47:da:b4:99:81:a2:
c4:91:2d:9d:e3:dc:6b:b2:0c:c0:08:9f:08:27:5a:
d1:97:6c:61:e6:89:03:06:56:90:f5:9c:fa:f6:ae:
8b:6b:bf:3c:1b:87:20:98:ca:97:75:ab:6a:03:2f:
bb:b7:cf:29:88:fd:95:91:78:94:d8:23:bd:16:08:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:84:80:F8:98:B5:81:E2:C5:F6:1B:EA:7D:08:A3:D3:45:61:4D:3F
X509v3 Authority Key Identifier:
keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:fd:b1:ff:38:f3:4c:98:87:68:dd:60:54:0e:0d:e3:ea:87:
68:b3:39:0c:10:ba:fc:93:e6:b4:f5:f6:41:53:1a:3c:57:80:
0b:d9:17:30:63:df:5a:14:66:87:79:25:6c:7e:52:1e:74:6b:
93:ed:e3:f4:35:4b:ff:48:8c:79:b1:ce:eb:c3:0e:11:76:b9:
6d:29:14:31:f2:6d:0c:e4:36:3e:b0:2b:bf:99:ff:f7:80:e9:
15:c9:29:a3:51:b9:9a:e1:d6:b4:29:d3:15:20:90:f9:20:6e:
27:4e:cc:7e:5b:fd:8f:e7:50:cc:c3:b6:cb:c4:da:85:e7:09:
a4:4a:23:ae:0b:a6:8f:77:34:4c:9f:b6:74:f5:3b:d0:c0:c1:
77:88:70:c8:e0:fc:95:86:f6:49:9b:2f:a5:c0:f2:33:20:2a:
30:ca:1f:08:b3:46:f0:05:96:73:d2:61:5b:3a:ce:7a:8d:f6:
2d:87:74:ad:29:1f:9f:14:ae:17:77:31:8a:18:c9:55:e6:48:
de:cc:f6:47:9b:ce:0b:c4:ca:8e:94:4c:9e:55:b0:2a:5f:2e:
c6:97:87:7c:32:0b:d6:38:50:1b:9e:a8:69:66:2f:86:58:2c:
32:1f:60:69:06:71:77:19:84:b7:2f:20:f7:bf:32:fa:b8:34:
dc:e2:dd:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk7NgjorCxcYJz/pRPydOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YmEwYTFkNzg0OGQyYzFiMjMxZGQzZTY4MjQ0MjBkMTg3
OTk5MTMwHhcNMjUxMTExMTEwMTEzWhcNMjUxMTEyMTEwMTEzWjAzMTEwLwYDVQQD
Eyg1Mzg0ODBmODk4YjU4MWUyYzVmNjFiZWE3ZDA4YTNkMzQ1NjE0ZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksBlhci9IkRVj4X/jTVS71kjBuFF
g3bmHLEZifEz6fiinDCGZpDNLHzIzN7VFVnGa9hLihUyDqiYfLTYjyb3Zc0k9kvG
TpENf5qF31YqZmdEz0Rh1Kmh3iDUAnZIU4/3B2PDEzroDK5O75JblwF8xirFDyFw
1PctKLEn/v7oPqEDJMf+KNfclQOQVqh/fTc0ii5Ao3pLhKleY07zRvth19Kzooy4
qwxvt1plu90s/1/Zw4PEhF1CPF5B9uhH2rSZgaLEkS2d49xrsgzACJ8IJ1rRl2xh
5okDBlaQ9Zz69q6La788G4cgmMqXdatqAy+7t88piP2VkXiU2CO9Fgh6FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOEgPiYtYHixfYb6n0Io9NFYU0/MB8GA1UdIwQY
MBaAFCm6Ch14SNLBsjHdPmgkQg0YeZkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zMGMwYzAtOWVjYS00NjRmLThiOWYt
NmE1YjVmNWNhOWQzLzEvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zMGMwYzAtOWVjYS00NjRmLThiOWYtNmE1YjVmNWNhOWQz
LzEvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3/2x/zjz
TJiHaN1gVA4N4+qHaLM5DBC6/JPmtPX2QVMaPFeAC9kXMGPfWhRmh3klbH5SHnRr
k+3j9DVL/0iMebHO68MOEXa5bSkUMfJtDOQ2PrArv5n/94DpFckpo1G5muHWtCnT
FSCQ+SBuJ07Mflv9j+dQzMO2y8TahecJpEojrgumj3c0TJ+2dPU70MDBd4hwyOD8
lYb2SZsvpcDyMyAqMMofCLNG8AWWc9JhWzrOeo32LYd0rSkfnxSuF3cxihjJVeZI
3sz2R5vOC8TKjpRMnlWwKl8uxpeHfDIL1jhQG56oaWYvhlgsMh9gaQZxdxmEty8g
978y+rg03OLd1w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:22 2025 by rpki-client