Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier: XxOIN0+Sur/59xGxD6VwOUH+3SRqN+l5NDapHcqSk5M=
Subject key identifier: A5:CC:61:DB:75:4F:6D:3E:E3:FB:5D:C5:D6:B3:20:06:EC:E5:88:00
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 019A213FA7F6569C39A47E8AF5A6DF3826C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number: 1711
Signing time: Sun 26 Oct 2025 16:00:11 +0000
Manifest this update: Sun 26 Oct 2025 16:00:11 +0000
Manifest next update: Mon 27 Oct 2025 16:00:11 +0000
Files and hashes: 1: J-F67EchYLFsSdnuT0ELKO3zkVM.roa (hash: X3ffb8upes93ybjj9N2ywu5hcNrq4bSW9hgoat91kHU=)
2: anqJ49NaASwaJ_s7wvdwnyeoi7A.roa (hash: tT4VObTQFTBANax7YZ+QGhxAr7cz6xVgJTjgQ2oVs4U=)
3: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: 9CXRbWQ04EImnWa0sanVMtOISNh7zK1JbTz+70QHE+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:3f:a7:f6:56:9c:39:a4:7e:8a:f5:a6:df:38:26:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Oct 26 16:00:11 2025 GMT
Not After : Oct 27 16:00:11 2025 GMT
Subject: CN=a5cc61db754f6d3ee3fb5dc5d6b32006ece58800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:86:62:bb:e4:d4:70:20:08:4f:bd:f8:96:3e:
09:ea:c9:37:0d:a4:fa:6b:51:0b:78:b7:78:76:3b:
55:ec:9e:9a:27:cb:af:3a:bb:e4:d1:5a:ac:bc:29:
da:f3:60:00:e3:ea:d7:fe:59:97:93:90:13:a6:d0:
dd:1e:13:0f:e3:5f:01:9a:88:90:af:31:3f:b7:0f:
63:c8:23:43:f9:8e:1b:19:7b:84:76:98:f1:96:ee:
00:fc:0e:61:e6:00:48:50:8a:b3:a0:95:e2:15:fb:
66:3a:28:53:3d:58:43:7b:e8:22:0a:6c:94:4b:18:
90:42:ea:0a:f2:d9:8d:9c:40:67:fe:ce:ce:58:e0:
73:ef:a3:94:6a:c2:68:fd:63:a5:51:5f:3d:b3:a5:
7d:6e:ea:aa:91:e6:a9:4d:1f:83:73:2a:87:6f:2c:
da:df:d8:83:60:88:09:73:ee:48:ed:51:e9:c3:79:
56:c0:59:d1:65:d9:0d:6e:f7:91:11:db:a9:21:a4:
85:c3:db:bd:5f:7c:5d:d8:8c:44:6f:2c:10:b0:55:
23:6e:43:63:fc:16:26:b3:83:50:05:7d:f5:be:68:
7f:e3:0a:08:15:d6:02:b0:96:6b:d1:44:5b:88:5b:
2c:cd:41:ce:4e:b4:5f:d5:6f:9d:c4:0e:e9:2c:66:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CC:61:DB:75:4F:6D:3E:E3:FB:5D:C5:D6:B3:20:06:EC:E5:88:00
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:76:e7:6f:bb:ba:97:0f:d1:27:6b:e7:29:d3:7b:c1:c6:38:
40:f4:b4:12:dc:80:fb:74:82:f1:4f:c6:bd:eb:75:09:5a:4a:
ab:37:1e:2b:b7:32:20:e5:52:e7:b2:1a:7e:18:5d:07:b2:6f:
c4:34:3d:8f:fc:70:4e:29:4a:fe:9d:bf:a0:13:b1:2a:8e:bf:
6c:13:94:90:40:17:ae:31:5d:80:3f:a3:f1:d5:02:b4:74:ab:
8d:9a:6b:24:ae:16:0d:c5:cd:8f:9c:a5:66:db:34:81:17:c3:
fb:b8:89:75:26:d8:9d:c6:21:7c:7e:d2:0b:4a:6d:f1:78:54:
06:66:91:b4:88:d6:18:7f:18:42:47:b1:c7:c5:9b:6f:59:b3:
95:14:cb:48:f0:97:8d:41:de:58:0e:5d:cb:16:92:36:4c:4b:
22:41:35:7d:b6:06:e4:df:07:fa:4a:ed:92:8e:80:93:6e:a7:
ff:f0:0b:e2:29:77:e6:ea:78:c2:63:ae:5a:e4:c2:ec:5c:a6:
54:b0:fb:66:53:cf:0b:4e:19:dc:c7:f6:1e:bc:3f:c6:79:88:
52:3a:37:fe:9c:06:c2:ef:d4:a8:00:71:fe:68:56:34:1b:af:
5c:90:29:d6:8f:ef:34:94:21:42:5d:62:aa:1a:94:c2:f3:0e:
52:93:19:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohP6f2Vpw5pH6K9abfOCbGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj
MmEwOTUwHhcNMjUxMDI2MTYwMDExWhcNMjUxMDI3MTYwMDExWjAzMTEwLwYDVQQD
EyhhNWNjNjFkYjc1NGY2ZDNlZTNmYjVkYzVkNmIzMjAwNmVjZTU4ODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4Ziu+TUcCAIT734lj4J6sk3DaT6
a1ELeLd4djtV7J6aJ8uvOrvk0VqsvCna82AA4+rX/lmXk5ATptDdHhMP418BmoiQ
rzE/tw9jyCND+Y4bGXuEdpjxlu4A/A5h5gBIUIqzoJXiFftmOihTPVhDe+giCmyU
SxiQQuoK8tmNnEBn/s7OWOBz76OUasJo/WOlUV89s6V9buqqkeapTR+DcyqHbyza
39iDYIgJc+5I7VHpw3lWwFnRZdkNbveREdupIaSFw9u9X3xd2IxEbywQsFUjbkNj
/BYms4NQBX31vmh/4woIFdYCsJZr0URbiFsszUHOTrRf1W+dxA7pLGbHmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXMYdt1T20+4/tdxdazIAbs5YgAMB8GA1UdIwQY
MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct
MDRkNzRmMzY4Njk4LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4
LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3bnb7u6
lw/RJ2vnKdN7wcY4QPS0EtyA+3SC8U/Gvet1CVpKqzceK7cyIOVS57IafhhdB7Jv
xDQ9j/xwTilK/p2/oBOxKo6/bBOUkEAXrjFdgD+j8dUCtHSrjZprJK4WDcXNj5yl
Zts0gRfD+7iJdSbYncYhfH7SC0pt8XhUBmaRtIjWGH8YQkexx8Wbb1mzlRTLSPCX
jUHeWA5dyxaSNkxLIkE1fbYG5N8H+krtko6Ak26n//AL4il35up4wmOuWuTC7Fym
VLD7ZlPPC04Z3Mf2Hrw/xnmIUjo3/pwGwu/UqABx/mhWNBuvXJAp1o/vNJQhQl1i
qhqUwvMOUpMZPg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:35:26 2025 by rpki-client