Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: ZikxTTQSEymcNSr/yE/caaIKUqf6W01Ywu2S5suRa5Q=
Subject key identifier: 85:0B:13:1A:56:9A:89:AB:15:21:AE:9D:F7:A1:90:89:FF:CB:BE:0A
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 019A2778CB6918261BA464ACA16A166DEDC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 07CF
Signing time: Mon 27 Oct 2025 21:00:18 +0000
Manifest this update: Mon 27 Oct 2025 21:00:18 +0000
Manifest next update: Tue 28 Oct 2025 21:00:18 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: Bnx+1NaaODZv4i8O0N+fB1CscBPUZYp22K+P3rgukQs=)
2: z3h-H5HBZcjmh2dP-uTIZcL8mqs.roa (hash: UbD7o5RQ7Yy/qV+kWLLXW0biF8q9IDLYH8QBkrKYQu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:78:cb:69:18:26:1b:a4:64:ac:a1:6a:16:6d:ed:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Oct 27 21:00:18 2025 GMT
Not After : Oct 28 21:00:18 2025 GMT
Subject: CN=850b131a569a89ab1521ae9df7a19089ffcbbe0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:5a:c4:d9:d0:af:29:c4:a6:7f:aa:44:6d:
c4:c3:3f:4e:56:a4:5e:22:62:ed:58:b5:fe:9b:17:
f4:36:d3:43:2f:b9:85:de:c8:c8:68:43:4c:a9:b0:
74:5a:c4:27:60:a3:e2:00:7d:de:7e:83:2c:ba:f0:
ce:b5:6a:27:63:fa:0e:4c:c5:10:6a:a7:31:00:95:
9d:07:cc:4a:36:1c:a4:14:71:07:b9:01:b5:a6:6f:
19:24:4f:cf:bc:ab:0f:23:9c:76:7c:c3:c5:92:06:
bf:1b:51:5c:14:f0:a3:d2:d4:22:ca:46:81:8e:0c:
52:4f:75:9f:2a:be:a1:b2:a1:0a:ec:ba:f9:0f:bc:
93:81:a6:d0:db:6d:84:42:36:1b:c3:09:d5:9b:90:
d9:78:9c:74:97:f8:fe:45:cf:31:b3:e6:68:12:fd:
84:44:0b:87:f5:dc:de:7d:8c:81:59:96:e8:ef:de:
79:be:9e:10:24:a9:45:10:32:e7:39:b5:16:3a:0c:
a9:a4:f4:39:1d:c0:15:7e:c1:7f:86:d5:2e:29:8d:
ec:aa:68:ef:4e:1b:2f:28:0f:ee:e0:2b:0b:48:3a:
8d:7c:c2:6a:c0:ca:2f:b4:1f:4a:51:40:87:4d:4b:
9d:eb:3c:22:87:de:f1:e1:98:59:88:03:76:71:df:
dd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0B:13:1A:56:9A:89:AB:15:21:AE:9D:F7:A1:90:89:FF:CB:BE:0A
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:21:60:21:b1:3b:42:cd:2b:fa:35:2c:d8:4d:75:5a:fd:cf:
3b:7b:c8:d0:c4:d7:d8:19:82:92:3e:44:0c:4f:4f:01:a7:e2:
95:51:52:4e:b8:75:f9:9a:aa:97:29:3d:ef:d8:74:5a:9e:3e:
0c:5f:31:47:1e:52:d7:2f:b9:3e:06:c5:38:df:93:9e:d9:a6:
e7:eb:8f:2c:3e:5f:12:93:77:31:32:42:d7:cf:ff:e5:ba:ce:
c7:5c:6d:8e:43:c8:16:48:b3:9d:a1:c7:f4:1a:4b:06:ae:31:
ef:51:2c:b2:c0:b1:16:87:b9:d7:29:f8:93:71:f9:88:a4:7a:
cf:72:a8:67:41:5b:93:1a:65:b0:9c:b7:39:40:00:2e:a2:d9:
ef:9b:89:7d:86:e4:81:65:2a:41:ad:05:5f:34:b6:94:32:91:
ff:db:62:97:e6:9d:fa:45:e3:bd:15:93:21:39:3b:af:fd:b7:
8c:2c:38:47:83:68:a8:40:bc:66:20:42:6c:b2:9a:e3:6e:18:
4e:fb:9d:c5:b2:1c:98:59:53:40:3f:f7:d2:e8:81:7f:d9:3b:
b1:26:91:24:06:eb:51:d6:d1:93:37:6d:0b:4b:9f:42:d7:c6:
80:41:41:18:8a:db:a2:72:96:2e:50:c8:ed:01:9e:bd:c2:2b:
1a:91:1e:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoneMtpGCYbpGSsoWoWbe3BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYjkxZTNkZWQ4MjBjNzBiOGFjZTg5YWVhZmZmYWJlZTZi
ZmE1NTMwHhcNMjUxMDI3MjEwMDE4WhcNMjUxMDI4MjEwMDE4WjAzMTEwLwYDVQQD
Eyg4NTBiMTMxYTU2OWE4OWFiMTUyMWFlOWRmN2ExOTA4OWZmY2JiZTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv9axNnQrynEpn+qRG3Ewz9OVqRe
ImLtWLX+mxf0NtNDL7mF3sjIaENMqbB0WsQnYKPiAH3efoMsuvDOtWonY/oOTMUQ
aqcxAJWdB8xKNhykFHEHuQG1pm8ZJE/PvKsPI5x2fMPFkga/G1FcFPCj0tQiykaB
jgxST3WfKr6hsqEK7Lr5D7yTgabQ222EQjYbwwnVm5DZeJx0l/j+Rc8xs+ZoEv2E
RAuH9dzefYyBWZbo7955vp4QJKlFEDLnObUWOgyppPQ5HcAVfsF/htUuKY3sqmjv
ThsvKA/u4CsLSDqNfMJqwMovtB9KUUCHTUud6zwih97x4ZhZiAN2cd/dFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIULExpWmomrFSGunfehkIn/y74KMB8GA1UdIwQY
MBaAFCq5Hj3tggxwuKzomur/+r7mv6VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2Mt
NjFkZTIxZjUxNDM0LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2MtNjFkZTIxZjUxNDM0
LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCFgIbE7
Qs0r+jUs2E11Wv3PO3vI0MTX2BmCkj5EDE9PAafilVFSTrh1+Zqqlyk979h0Wp4+
DF8xRx5S1y+5PgbFON+Tntmm5+uPLD5fEpN3MTJC18//5brOx1xtjkPIFkiznaHH
9BpLBq4x71EsssCxFoe51yn4k3H5iKR6z3KoZ0FbkxplsJy3OUAALqLZ75uJfYbk
gWUqQa0FXzS2lDKR/9til+ad+kXjvRWTITk7r/23jCw4R4NoqEC8ZiBCbLKa424Y
TvudxbIcmFlTQD/30uiBf9k7sSaRJAbrUdbRkzdtC0ufQtfGgEFBGIrbonKWLlDI
7QGevcIrGpEeIQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 01:18:06 2025 by rpki-client