Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: R6EjHtGpbjLnn8+2H3QmOB91I15BEoQK8x32/K4anQ0=
Subject key identifier: 08:41:9B:6C:1C:71:2E:E6:2B:31:90:BA:AE:7F:F9:CD:A0:75:DE:71
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019A2D442077AAF1B58432ECBBF1165C1EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 0F4C
Signing time: Wed 29 Oct 2025 00:00:30 +0000
Manifest this update: Wed 29 Oct 2025 00:00:30 +0000
Manifest next update: Thu 30 Oct 2025 00:00:30 +0000
Files and hashes: 1: 6lxIW7DOsuapgRe4TkqSuAXjoOs.roa (hash: AJ9PIBCPlG0gbaqeqnRofWtKoSg8Ai8VYC5DZAVADvU=)
2: V7lXlsc_KCrBF5PGRWvxEoDs1jE.roa (hash: 3HSkq2ZQ4Tv+kukR6Ld2lDKWo32adQgvx+S4uGpggoY=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: 5xNQ4uFLhsex71kSleo+iI/k22yc6yuf1jI5/gO0XWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:44:20:77:aa:f1:b5:84:32:ec:bb:f1:16:5c:1e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Oct 29 00:00:30 2025 GMT
Not After : Oct 30 00:00:30 2025 GMT
Subject: CN=08419b6c1c712ee62b3190baae7ff9cda075de71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:85:76:68:b5:f9:78:c6:70:03:10:a7:87:
47:11:98:68:f4:d8:4a:df:31:86:1f:1f:f2:bb:29:
77:b7:67:c8:96:23:ff:7a:20:08:dc:fb:bf:3b:10:
51:b4:4c:2e:e0:4e:6e:4e:c8:4a:44:2d:3a:15:54:
b8:52:0c:80:9e:81:2e:50:f1:de:b6:e5:eb:66:96:
07:21:13:75:92:b2:c8:e1:aa:b0:b7:6f:f5:7e:59:
9c:68:5e:ad:c5:dc:84:93:c2:59:f0:c3:ba:29:1d:
2f:dc:57:67:67:94:f7:0e:e5:bf:b6:1d:9b:ca:a2:
ce:e5:23:89:13:d7:02:69:a1:3f:07:64:0f:4f:4b:
08:32:6b:b5:79:08:39:36:15:8f:be:11:56:38:3c:
b9:e0:a5:73:c7:c2:cf:67:e4:6e:d4:c2:fd:91:84:
aa:05:0f:17:61:fe:19:ba:62:e6:e4:f8:de:0f:d9:
b6:98:5a:55:8c:0e:6d:cb:c0:74:09:2d:2c:66:f4:
28:8d:82:5c:a2:c5:44:29:a0:2d:8d:7f:61:5c:59:
a5:9d:de:42:c7:37:98:28:2a:d7:da:4d:1b:31:61:
c2:a8:2a:76:1a:69:8a:d3:f0:8b:bb:2a:9e:af:48:
f7:3e:90:25:6a:1a:16:6e:79:1b:df:ac:f8:e9:4a:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:41:9B:6C:1C:71:2E:E6:2B:31:90:BA:AE:7F:F9:CD:A0:75:DE:71
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:22:dc:0a:61:15:61:0f:f3:5f:5f:0f:a5:0c:7b:e8:32:78:
7f:25:38:52:fd:67:ec:37:a3:2e:50:3a:a5:00:33:8a:6a:a4:
50:76:15:43:ab:af:2d:cd:8a:b9:f9:9c:42:10:d5:92:e5:d2:
34:a2:e7:af:c9:cc:64:84:23:99:15:05:57:4a:9d:9a:27:35:
f0:af:76:a5:82:e9:aa:4f:a4:96:69:da:a5:3e:b0:33:c7:fb:
ec:4d:b0:5e:5f:0f:6b:6c:82:73:de:27:69:9c:95:72:c6:ed:
ee:49:2e:05:f8:12:88:6c:b0:37:ff:4d:62:e1:fb:b4:e5:d7:
05:54:73:e7:34:19:12:b2:b4:07:6b:f1:3c:ce:d4:47:5a:f4:
46:6d:db:1b:fd:c0:e1:f4:2a:6a:b7:98:95:89:50:17:fa:a2:
a3:5a:5b:8f:28:6c:8b:dc:9e:11:cf:f9:28:2f:d0:8a:bf:3a:
47:a6:c8:a4:cd:53:6c:b1:ee:8c:87:40:37:4a:36:7d:e5:7e:
93:57:61:2a:75:99:20:bd:c2:5e:2a:d1:44:7b:54:b8:be:9c:
fe:62:17:6f:54:47:79:b4:50:ac:06:5c:34:6e:53:0a:7a:05:
78:ea:34:2f:ca:98:df:ab:29:d3:97:0c:d2:07:17:77:12:3c:
13:01:0f:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZotRCB3qvG1hDLsu/EWXB6hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOTMzZTAxMzY0NGRiOWM5ZWU5YjkxZGY3MmUxMzM4ZGI4
ZTIwOTcwHhcNMjUxMDI5MDAwMDMwWhcNMjUxMDMwMDAwMDMwWjAzMTEwLwYDVQQD
EygwODQxOWI2YzFjNzEyZWU2MmIzMTkwYmFhZTdmZjljZGEwNzVkZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxWFdmi1+XjGcAMQp4dHEZho9NhK
3zGGHx/yuyl3t2fIliP/eiAI3Pu/OxBRtEwu4E5uTshKRC06FVS4UgyAnoEuUPHe
tuXrZpYHIRN1krLI4aqwt2/1flmcaF6txdyEk8JZ8MO6KR0v3FdnZ5T3DuW/th2b
yqLO5SOJE9cCaaE/B2QPT0sIMmu1eQg5NhWPvhFWODy54KVzx8LPZ+Ru1ML9kYSq
BQ8XYf4ZumLm5PjeD9m2mFpVjA5ty8B0CS0sZvQojYJcosVEKaAtjX9hXFmlnd5C
xzeYKCrX2k0bMWHCqCp2GmmK0/CLuyqer0j3PpAlahoWbnkb36z46UpjbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhBm2wccS7mKzGQuq5/+c2gdd5xMB8GA1UdIwQY
MBaAFJKTPgE2RNucnum5HfcuEzjbjiCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82YmVmMjItZjM0NS00NjAzLWExZTkt
NWNjMmVmMDk5YWVlLzEva3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82YmVmMjItZjM0NS00NjAzLWExZTktNWNjMmVmMDk5YWVl
LzEva3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCLcCmEV
YQ/zX18PpQx76DJ4fyU4Uv1n7DejLlA6pQAzimqkUHYVQ6uvLc2KufmcQhDVkuXS
NKLnr8nMZIQjmRUFV0qdmic18K92pYLpqk+klmnapT6wM8f77E2wXl8Pa2yCc94n
aZyVcsbt7kkuBfgSiGywN/9NYuH7tOXXBVRz5zQZErK0B2vxPM7UR1r0Rm3bG/3A
4fQqareYlYlQF/qio1pbjyhsi9yeEc/5KC/Qir86R6bIpM1TbLHujIdAN0o2feV+
k1dhKnWZIL3CXirRRHtUuL6c/mIXb1RHebRQrAZcNG5TCnoFeOo0L8qY36sp05cM
0gcXdxI8EwEPIw==
-----END CERTIFICATE-----
Generated at Wed Oct 29 05:51:04 2025 by rpki-client