Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: yGozZcj7wzBWqXO2QkWBgeo0h1Lw9joS4PIv88WAkGY=
Subject key identifier: F5:2D:26:85:8E:56:E2:40:57:D4:3B:D6:B0:FA:29:D6:DA:E2:DD:5A
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 019A115EDDF4D897F4E6F680017393F1ACA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 12B0
Signing time: Thu 23 Oct 2025 14:00:21 +0000
Manifest this update: Thu 23 Oct 2025 14:00:21 +0000
Manifest next update: Fri 24 Oct 2025 14:00:21 +0000
Files and hashes: 1: CWePTkWPKqmq8XCrzmvHtdzJ66c.roa (hash: w47SbHpgg+8nHiedozoZtpn2WeqKZNjvBRbXbOYH5sQ=)
2: QxrO5EAVR8eFM8jH9BCfhqlcchk.roa (hash: YI48GxiCUKeQBfw8EzcAM9WtfO8HGqURFBVLVXq05fo=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: YS+0I3K6g6qBzCsdYNQOfbrfUwhipZiB1uhTQaQSjYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:5e:dd:f4:d8:97:f4:e6:f6:80:01:73:93:f1:ac:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Oct 23 14:00:21 2025 GMT
Not After : Oct 24 14:00:21 2025 GMT
Subject: CN=f52d26858e56e24057d43bd6b0fa29d6dae2dd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6c:a0:3b:0c:7b:ba:3e:aa:89:3d:fa:8a:3d:
cf:b3:2b:8e:10:75:9c:6b:bc:15:ce:f0:1d:64:ab:
09:3b:8e:6b:c7:0d:e9:aa:32:d3:9f:a2:c2:19:d1:
8f:cf:ab:00:fd:18:ff:77:76:8d:fd:de:56:da:0a:
d0:84:1e:fd:69:8e:23:53:e8:f2:b6:8d:31:46:bb:
d0:7e:19:df:52:e3:f2:c2:d3:8c:15:80:d9:82:22:
43:05:d7:7f:c6:c3:fd:bc:bf:d3:2b:c6:dd:55:fc:
a8:23:e6:02:21:aa:a7:8d:17:b8:25:35:b6:fb:50:
3d:6d:8d:5a:19:ee:4c:06:f2:ab:53:d1:e0:f1:9c:
3c:5c:f5:ec:12:65:09:3f:7c:90:53:4a:82:c0:8a:
54:7e:e6:ff:6e:6d:46:c0:54:c2:81:43:d4:89:43:
6f:64:a8:1a:56:d9:66:c2:16:0a:ee:79:30:70:b6:
56:53:c5:0c:91:37:22:a0:80:15:35:29:d7:13:60:
70:60:03:5b:09:f2:fc:09:2e:9c:7b:c1:d0:53:7f:
16:27:18:0f:e9:3b:35:b4:51:1b:e7:a4:84:d7:17:
a7:b8:28:3c:e0:78:18:52:47:fa:9d:5d:45:8b:9f:
7e:b9:b8:c9:28:ce:20:e2:7a:16:c7:ef:eb:5f:23:
b7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2D:26:85:8E:56:E2:40:57:D4:3B:D6:B0:FA:29:D6:DA:E2:DD:5A
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f0:4b:eb:b2:dd:53:29:86:02:64:b8:4e:4a:ae:8c:0e:20:
24:6d:01:ab:40:f5:5c:5a:21:0b:6a:40:80:7d:7f:9d:d5:dc:
52:d0:58:5a:94:28:9f:f6:57:3a:0e:04:f7:d3:6d:5e:93:16:
f6:41:e2:5a:d5:e4:f3:ec:12:de:e6:ff:2c:41:a9:81:98:09:
a6:8a:12:df:3d:87:84:ba:be:ff:c2:a8:b4:61:21:da:cf:24:
ae:63:19:71:45:48:29:42:c3:00:f2:07:3f:3e:26:18:96:1a:
10:46:46:7d:95:79:29:90:cb:a5:f7:24:c6:22:68:00:7b:52:
dc:3c:1d:3f:37:57:20:b7:dd:e8:b6:a8:38:42:7e:94:76:7e:
67:78:2b:3a:e9:01:87:ab:6f:ba:b2:a7:68:49:9c:44:a6:d6:
b5:37:8b:e4:55:79:4e:cf:85:89:68:d5:5e:8d:49:7c:70:93:
63:6b:e6:fb:96:f6:88:ac:72:59:dc:06:1a:34:4e:6e:ad:b1:
18:ce:d5:2d:ed:03:86:5a:57:0f:f6:89:19:a4:ca:2f:5e:da:
28:98:fc:88:a7:67:b3:a5:1e:df:43:64:d3:de:29:e4:9a:c7:
4e:7f:d7:8b:8d:0d:2b:3f:d5:ff:ec:fc:b7:b7:66:0a:09:d3:
16:f6:ee:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoRXt302Jf05vaAAXOT8ayjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjA1ZjVhNjRlYTFmYjA5MGFkMjZkY2ZkYjE4Y2VmYjlh
YWJkOGQwHhcNMjUxMDIzMTQwMDIxWhcNMjUxMDI0MTQwMDIxWjAzMTEwLwYDVQQD
EyhmNTJkMjY4NThlNTZlMjQwNTdkNDNiZDZiMGZhMjlkNmRhZTJkZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmygOwx7uj6qiT36ij3PsyuOEHWc
a7wVzvAdZKsJO45rxw3pqjLTn6LCGdGPz6sA/Rj/d3aN/d5W2grQhB79aY4jU+jy
to0xRrvQfhnfUuPywtOMFYDZgiJDBdd/xsP9vL/TK8bdVfyoI+YCIaqnjRe4JTW2
+1A9bY1aGe5MBvKrU9Hg8Zw8XPXsEmUJP3yQU0qCwIpUfub/bm1GwFTCgUPUiUNv
ZKgaVtlmwhYK7nkwcLZWU8UMkTcioIAVNSnXE2BwYANbCfL8CS6ce8HQU38WJxgP
6Ts1tFEb56SE1xenuCg84HgYUkf6nV1Fi59+ubjJKM4g4noWx+/rXyO38QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUtJoWOVuJAV9Q71rD6Kdba4t1aMB8GA1UdIwQY
MBaAFJIgX1pk6h+wkK0m3P2xjO+5qr2NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82NTIyNjctZWExMy00ODkyLTlmZmEt
MDljMWI3MzM2YTUxLzEva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82NTIyNjctZWExMy00ODkyLTlmZmEtMDljMWI3MzM2YTUx
LzEva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvBL67Ld
UymGAmS4TkqujA4gJG0Bq0D1XFohC2pAgH1/ndXcUtBYWpQon/ZXOg4E99NtXpMW
9kHiWtXk8+wS3ub/LEGpgZgJpooS3z2HhLq+/8KotGEh2s8krmMZcUVIKULDAPIH
Pz4mGJYaEEZGfZV5KZDLpfckxiJoAHtS3DwdPzdXILfd6LaoOEJ+lHZ+Z3grOukB
h6tvurKnaEmcRKbWtTeL5FV5Ts+FiWjVXo1JfHCTY2vm+5b2iKxyWdwGGjRObq2x
GM7VLe0DhlpXD/aJGaTKL17aKJj8iKdns6Ue30Nk094p5JrHTn/Xi40NKz/V/+z8
t7dmCgnTFvbutA==
-----END CERTIFICATE-----
Generated at Thu Oct 23 21:54:49 2025 by rpki-client