Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: ZVkC6QsX+6ABNCZNqWAd2TXuWGeRWEhljvrctMbF3zs=
Subject key identifier: B8:B7:8A:3B:CA:12:64:14:18:D0:CE:26:01:01:80:D4:FC:7E:70:A3
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 019A09DC453FF6B32C551FAEBDC39A5A1CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0C0B
Signing time: Wed 22 Oct 2025 03:00:21 +0000
Manifest this update: Wed 22 Oct 2025 03:00:21 +0000
Manifest next update: Thu 23 Oct 2025 03:00:21 +0000
Files and hashes: 1: Ms3efVN_XUHd4QxKef3_YdRpvGM.roa (hash: JqLniVKizln7qKYMvWy43G4dVpEgMo9SnC/GlXkBUPw=)
2: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: VWXWv9kb1DyOStoDDt1CcsouG4mK9DrQuKQ6FVcV2p4=)
3: uDDSIBamhzWkhMClbzH_9oqf3KA.roa (hash: m1HA6uhPnc0quVohM65OVF8eaR3/NxsjEYFcU7UUjUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:dc:45:3f:f6:b3:2c:55:1f:ae:bd:c3:9a:5a:1c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Oct 22 03:00:21 2025 GMT
Not After : Oct 23 03:00:21 2025 GMT
Subject: CN=b8b78a3bca12641418d0ce26010180d4fc7e70a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:12:85:0f:7b:ed:ba:30:f4:8d:f9:d6:26:
a3:30:9c:84:35:d2:c9:7d:10:10:1e:e8:d3:ef:ab:
71:c2:98:67:98:28:0d:72:9f:4f:0d:12:fd:eb:9a:
cc:69:ff:e2:00:b4:16:4b:54:dd:90:23:9f:95:e1:
4c:06:57:89:02:09:5c:78:58:df:a4:e7:a7:79:e2:
67:db:44:d8:ce:c6:93:81:89:e8:4b:9b:8c:70:d4:
4b:df:f9:86:00:34:da:b1:98:85:78:31:66:de:e7:
e4:d7:1a:33:cd:74:8c:21:6a:c9:74:93:12:f6:62:
9f:46:21:ca:61:bb:fa:60:73:bd:82:ff:f0:16:0e:
5d:cc:7b:8f:bf:da:3e:78:d1:bd:af:1e:11:0c:f3:
53:91:2a:f7:e2:3f:6a:5f:d4:a1:01:98:fa:0e:7c:
cb:85:50:5d:ed:62:93:85:c5:1a:ed:e6:53:8b:15:
08:9c:16:e9:be:ca:67:f2:6f:14:05:e1:28:15:e9:
27:bd:55:d6:42:59:90:73:f8:66:42:d2:b7:af:9c:
13:f3:17:86:42:38:d7:a7:b5:82:16:5c:a6:95:a0:
f8:e9:9d:8a:ba:c5:3b:e0:99:46:0d:55:e4:ff:a5:
23:59:06:f5:1f:b5:82:01:0a:3f:49:f2:66:21:bc:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B7:8A:3B:CA:12:64:14:18:D0:CE:26:01:01:80:D4:FC:7E:70:A3
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bb:6e:cd:52:b0:95:1e:6b:d4:a4:ab:e2:ec:f4:37:5f:25:
5f:39:69:5f:aa:72:7c:30:9c:37:9e:fc:a6:03:dd:6b:8f:fe:
5d:2f:a9:6f:33:0d:e8:bf:bd:5a:6f:45:d2:17:1c:61:5a:cf:
e0:44:c1:cf:9e:19:00:cd:4a:7b:fb:4a:87:92:a1:23:d7:a3:
08:95:3b:9f:fb:38:ac:8e:5c:ae:f9:ef:a8:ac:f2:28:be:2c:
bc:e7:26:08:bc:15:ec:0d:90:2f:55:97:db:43:9b:74:61:1e:
9f:ab:a8:d0:a7:e2:04:6e:1b:78:c1:ef:51:77:9f:4b:b3:30:
a4:af:8e:52:ec:47:83:51:4a:b4:f4:a5:5f:db:d4:0b:ff:04:
9c:28:36:18:1e:40:5a:9c:6f:8a:df:76:e3:b4:5d:e6:05:f3:
50:26:6d:8a:1b:68:87:8e:cc:81:34:c4:71:c1:3f:20:14:bb:
25:46:68:43:50:7e:eb:46:30:36:2c:a5:34:ec:00:8b:c2:6f:
9f:85:0b:12:b0:17:df:9c:80:6c:fd:f2:e6:08:bd:ab:47:70:
c9:60:73:5b:cf:cf:54:49:3b:97:2e:59:9f:c8:a8:4f:d8:51:
07:b2:66:e5:de:07:b9:79:21:6b:82:a6:53:88:d8:a8:3c:91:
de:c3:b3:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoJ3EU/9rMsVR+uvcOaWhzoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMjQ2MGI3OGY2ZThmNDY2MmFlYzc4NThlOTIwNTFlODU2
MDk5ZjUwHhcNMjUxMDIyMDMwMDIxWhcNMjUxMDIzMDMwMDIxWjAzMTEwLwYDVQQD
EyhiOGI3OGEzYmNhMTI2NDE0MThkMGNlMjYwMTAxODBkNGZjN2U3MGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypwShQ977bow9I351iajMJyENdLJ
fRAQHujT76txwphnmCgNcp9PDRL965rMaf/iALQWS1TdkCOfleFMBleJAglceFjf
pOeneeJn20TYzsaTgYnoS5uMcNRL3/mGADTasZiFeDFm3ufk1xozzXSMIWrJdJMS
9mKfRiHKYbv6YHO9gv/wFg5dzHuPv9o+eNG9rx4RDPNTkSr34j9qX9ShAZj6DnzL
hVBd7WKThcUa7eZTixUInBbpvspn8m8UBeEoFeknvVXWQlmQc/hmQtK3r5wT8xeG
QjjXp7WCFlymlaD46Z2KusU74JlGDVXk/6UjWQb1H7WCAQo/SfJmIbxrzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLi3ijvKEmQUGNDOJgEBgNT8fnCjMB8GA1UdIwQY
MBaAFJMkYLePbo9GYq7HhY6SBR6FYJn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jMjUxZjEtY2I3MC00MjgzLTg0MzMt
OGM5ZmNiYjNlYzUyLzEva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9jMjUxZjEtY2I3MC00MjgzLTg0MzMtOGM5ZmNiYjNlYzUy
LzEva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbtuzVKw
lR5r1KSr4uz0N18lXzlpX6pyfDCcN578pgPda4/+XS+pbzMN6L+9Wm9F0hccYVrP
4ETBz54ZAM1Ke/tKh5KhI9ejCJU7n/s4rI5crvnvqKzyKL4svOcmCLwV7A2QL1WX
20ObdGEen6uo0KfiBG4beMHvUXefS7MwpK+OUuxHg1FKtPSlX9vUC/8EnCg2GB5A
Wpxvit9247Rd5gXzUCZtihtoh47MgTTEccE/IBS7JUZoQ1B+60YwNiylNOwAi8Jv
n4ULErAX35yAbP3y5gi9q0dwyWBzW8/PVEk7ly5Zn8ioT9hRB7Jm5d4HuXkha4Km
U4jYqDyR3sOzGA==
-----END CERTIFICATE-----
Generated at Wed Oct 22 12:11:43 2025 by rpki-client