Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier: dJcRIxyCb1TQNl0oHGihbl20tnjhsTSb3yYGo1tFydg=
Subject key identifier: 06:7C:3D:E7:E3:0A:35:56:00:5D:A9:41:0E:A5:C5:7F:AB:32:B7:7A
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 019A0C0208EBE39327B26F1A2002F5C82522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number: 0A22
Signing time: Wed 22 Oct 2025 13:00:51 +0000
Manifest this update: Wed 22 Oct 2025 13:00:51 +0000
Manifest next update: Thu 23 Oct 2025 13:00:51 +0000
Files and hashes: 1: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: 2XEET6Q/5oryo6ozQKR8p8Gk9aQCuMkB2glZXw6yPdw=)
2: TRmQsqo38AvFLgeV_m9TBYH8n00.roa (hash: qW2qJnlmGn6g7rOMXIGst8HJCwyD3TG1rYc3G+brA8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:02:08:eb:e3:93:27:b2:6f:1a:20:02:f5:c8:25:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Oct 22 13:00:51 2025 GMT
Not After : Oct 23 13:00:51 2025 GMT
Subject: CN=067c3de7e30a3556005da9410ea5c57fab32b77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:98:60:6b:7c:2f:10:af:9e:e3:55:88:8d:85:
c8:65:ed:86:d6:39:e7:2a:3a:d9:92:c8:3e:76:2a:
97:a2:2c:10:2a:2a:ea:a1:06:a4:c6:a4:a1:b0:74:
45:c5:23:22:40:26:ff:fd:fd:d5:a3:95:36:be:f8:
9b:5c:ca:14:6d:29:fc:0d:3c:dc:68:44:73:1e:71:
00:d6:93:e0:99:e1:e5:28:52:cf:32:56:3a:4c:31:
84:e1:a2:49:16:3d:ef:2a:b9:40:04:d0:04:f0:fb:
dc:57:9b:9c:ca:b6:70:09:35:89:16:5e:73:d5:8b:
6f:a4:c0:25:1d:41:5c:5f:45:e2:8c:06:08:a1:46:
14:42:94:16:78:b7:42:50:83:0c:be:03:f4:3e:a2:
27:98:be:94:6a:38:a0:67:db:f4:7f:46:87:49:53:
a6:72:63:4d:5e:34:94:f3:2b:f2:7a:d4:86:72:bb:
ac:28:a6:67:cd:f7:68:17:55:64:5b:2f:3e:20:d0:
62:17:71:c6:91:28:c3:53:7a:4a:69:93:e6:6d:1a:
5b:2e:fe:05:e5:df:d7:27:ae:19:22:86:94:e4:49:
75:4c:4d:20:61:5d:3b:2d:ae:92:8f:f9:c3:cd:f0:
b8:08:04:fd:9b:82:c6:ae:1f:5d:51:7a:ac:81:2a:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7C:3D:E7:E3:0A:35:56:00:5D:A9:41:0E:A5:C5:7F:AB:32:B7:7A
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:af:b2:6e:f3:a2:94:ea:a3:8a:c5:e4:9c:86:e5:b7:40:4b:
f8:13:83:3e:68:8b:54:cc:cd:eb:55:88:5a:6d:7e:0b:1c:61:
5a:85:26:57:bb:7d:8d:bd:08:34:61:ea:38:f2:db:9c:e2:13:
0f:c9:aa:02:0e:e1:73:13:a0:6b:24:e8:b7:d1:be:a8:ae:25:
03:82:83:a2:71:64:be:67:67:9c:d3:7f:f0:9c:c2:10:9f:48:
20:6b:21:4c:99:8c:5d:d4:a5:2b:35:de:41:fa:c2:81:db:cf:
39:ce:b8:d1:b6:f9:44:51:d1:19:8f:98:82:5e:45:5d:3f:c1:
53:15:07:db:2a:58:f5:a1:35:d4:d0:b9:2d:f5:9f:79:ec:2f:
09:92:d5:e9:8d:05:31:bc:1a:47:fd:c9:42:88:5c:f2:38:6b:
d8:a5:76:31:82:76:2d:09:ea:16:4c:56:a0:7a:5b:6f:e1:5f:
c3:30:0f:84:9c:5b:a2:e6:e5:bc:69:c8:b1:5d:39:42:19:72:
46:e7:57:a5:7c:2a:96:93:c0:15:a5:22:32:02:08:8b:5c:25:
f1:03:f5:f5:90:a4:e5:ea:95:25:d0:0e:91:4f:89:17:c1:58:
3c:6a:09:20:6c:4b:a9:bd:2e:02:70:26:f3:db:3e:71:f4:27:
e2:74:f9:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoMAgjr45Mnsm8aIAL1yCUiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YmFjMTg1YjgzZjZkZTM5YWJhZGNmZjNkZmU0ODczZDg4
M2M0ODgwHhcNMjUxMDIyMTMwMDUxWhcNMjUxMDIzMTMwMDUxWjAzMTEwLwYDVQQD
EygwNjdjM2RlN2UzMGEzNTU2MDA1ZGE5NDEwZWE1YzU3ZmFiMzJiNzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Jhga3wvEK+e41WIjYXIZe2G1jnn
KjrZksg+diqXoiwQKirqoQakxqShsHRFxSMiQCb//f3Vo5U2vvibXMoUbSn8DTzc
aERzHnEA1pPgmeHlKFLPMlY6TDGE4aJJFj3vKrlABNAE8PvcV5ucyrZwCTWJFl5z
1YtvpMAlHUFcX0XijAYIoUYUQpQWeLdCUIMMvgP0PqInmL6UajigZ9v0f0aHSVOm
cmNNXjSU8yvyetSGcrusKKZnzfdoF1VkWy8+INBiF3HGkSjDU3pKaZPmbRpbLv4F
5d/XJ64ZIoaU5El1TE0gYV07La6Sj/nDzfC4CAT9m4LGrh9dUXqsgSrEKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZ8PefjCjVWAF2pQQ6lxX+rMrd6MB8GA1UdIwQY
MBaAFCi6wYW4P23jmrrc/z3+SHPYg8SIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mYjk0NjEtMmRiNy00MDllLWFiZWIt
ZjNiMTZlZDZjMDYxLzEvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mYjk0NjEtMmRiNy00MDllLWFiZWItZjNiMTZlZDZjMDYx
LzEvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGa+ybvOi
lOqjisXknIblt0BL+BODPmiLVMzN61WIWm1+CxxhWoUmV7t9jb0INGHqOPLbnOIT
D8mqAg7hcxOgayTot9G+qK4lA4KDonFkvmdnnNN/8JzCEJ9IIGshTJmMXdSlKzXe
QfrCgdvPOc640bb5RFHRGY+Ygl5FXT/BUxUH2ypY9aE11NC5LfWfeewvCZLV6Y0F
MbwaR/3JQohc8jhr2KV2MYJ2LQnqFkxWoHpbb+FfwzAPhJxboublvGnIsV05Qhly
RudXpXwqlpPAFaUiMgIIi1wl8QP19ZCk5eqVJdAOkU+JF8FYPGoJIGxLqb0uAnAm
89s+cfQn4nT5+Q==
-----END CERTIFICATE-----
Generated at Wed Oct 22 23:18:39 2025 by rpki-client