Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: fapwHOYIIstJBnoOdp/z/nIvLRg1JXNaUqlG2vJ2QKQ=
Subject key identifier: 06:F0:2A:94:DA:12:FD:31:45:1C:56:E7:04:64:9A:0D:81:E1:B4:E7
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 019A2478D533B1C2198279FF17D9BDA9708C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 12ED
Signing time: Mon 27 Oct 2025 07:01:29 +0000
Manifest this update: Mon 27 Oct 2025 07:01:29 +0000
Manifest next update: Tue 28 Oct 2025 07:01:29 +0000
Files and hashes: 1: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: iopgsZPApBcKHFgXTVODOD5DEEj24Gl6lNLo2Zic2DE=)
2: wWu_mnG1mF1XhVWaW0DZDLRaMZA.roa (hash: OxlFGiJEt7spgwhfyEKbeiDTLip5JYbp9FNAPkL6rNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:d5:33:b1:c2:19:82:79:ff:17:d9:bd:a9:70:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Oct 27 07:01:29 2025 GMT
Not After : Oct 28 07:01:29 2025 GMT
Subject: CN=06f02a94da12fd31451c56e704649a0d81e1b4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:40:b1:12:1a:b8:ba:d7:e8:fe:2a:b1:58:
2c:fb:25:bc:81:51:7a:10:b0:61:f3:91:f0:b5:24:
9a:5a:7a:4a:e6:65:25:04:47:63:b2:6b:6c:cc:c3:
02:16:b2:90:ea:aa:ce:75:30:e7:80:52:d2:f0:eb:
36:05:7b:09:cd:fb:72:23:da:cd:c6:9c:69:ad:2a:
3c:a6:61:e6:22:c0:b6:3f:f2:76:0b:a7:a3:1a:58:
89:8e:33:d7:99:76:4a:01:56:12:df:63:e1:01:27:
d2:de:7e:e8:77:5e:0d:1a:75:86:c0:94:31:92:76:
55:f2:2f:bd:b5:5a:68:f3:80:17:9c:02:95:ba:d8:
f4:af:42:0c:27:c8:f3:2b:d9:71:56:1e:d5:de:35:
70:dc:84:8c:18:8f:02:93:af:d6:48:48:db:7c:61:
f0:f1:91:e3:2f:5a:1a:db:fd:94:3e:82:56:56:b2:
79:ce:d2:d3:6e:fb:33:8d:ac:7c:dc:95:73:ec:43:
90:3b:62:13:82:5a:52:d9:bc:56:06:fb:45:a5:87:
83:8e:72:c3:f8:92:10:e1:b5:35:dc:e7:ab:2c:44:
b7:12:e9:0e:ee:da:a7:72:c3:f0:7e:9a:88:55:4c:
7a:68:09:ac:00:ec:c5:72:77:5e:96:34:01:0c:05:
fc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F0:2A:94:DA:12:FD:31:45:1C:56:E7:04:64:9A:0D:81:E1:B4:E7
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e6:2c:f5:bd:0e:5b:17:2c:fc:21:72:8c:cc:7f:78:85:df:
09:be:1f:ea:a5:7d:b5:27:92:6f:fd:8b:6d:99:ca:c1:ce:62:
2a:16:0a:65:db:34:e0:95:4e:9f:61:3a:94:59:71:e8:f2:32:
28:db:fb:eb:64:8b:fa:d1:b0:fb:db:1a:69:6f:c5:c7:7b:6c:
78:fb:93:7e:03:a6:26:c4:15:18:41:36:a7:4d:a5:ac:84:45:
c6:37:99:9b:3d:87:5a:38:db:29:5d:8d:40:cc:01:8a:23:92:
32:f9:59:a7:2d:44:60:7c:e5:53:a2:b6:49:ae:d4:4f:9d:9d:
59:80:e8:9a:42:3b:90:2f:a1:ea:a7:c0:81:ca:78:29:21:38:
54:9f:8c:d9:ab:fd:0c:ed:7a:3d:df:76:e7:be:56:86:2a:c1:
66:60:7b:23:98:02:a4:90:6e:83:56:05:13:3a:57:ba:81:81:
56:72:b4:ad:49:53:01:a2:97:44:63:77:58:c0:cc:a9:93:f6:
40:82:7b:cf:48:d2:87:13:29:c2:31:c1:46:dd:ee:4c:2b:f2:
fd:28:ec:eb:01:55:28:ee:d0:f2:c2:c6:44:c4:8b:22:9f:54:
9e:4e:38:97:6d:ad:41:6c:80:ed:34:c5:09:45:84:94:65:d8:
ee:4b:9f:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokeNUzscIZgnn/F9m9qXCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZmI3ZGEzYjQ0ZTQxYjMyMzY5ZTRhNWM3OTBkMzA4MWZj
NjlhYTkwHhcNMjUxMDI3MDcwMTI5WhcNMjUxMDI4MDcwMTI5WjAzMTEwLwYDVQQD
EygwNmYwMmE5NGRhMTJmZDMxNDUxYzU2ZTcwNDY0OWEwZDgxZTFiNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstFAsRIauLrX6P4qsVgs+yW8gVF6
ELBh85HwtSSaWnpK5mUlBEdjsmtszMMCFrKQ6qrOdTDngFLS8Os2BXsJzftyI9rN
xpxprSo8pmHmIsC2P/J2C6ejGliJjjPXmXZKAVYS32PhASfS3n7od14NGnWGwJQx
knZV8i+9tVpo84AXnAKVutj0r0IMJ8jzK9lxVh7V3jVw3ISMGI8Ck6/WSEjbfGHw
8ZHjL1oa2/2UPoJWVrJ5ztLTbvszjax83JVz7EOQO2ITglpS2bxWBvtFpYeDjnLD
+JIQ4bU13OerLES3EukO7tqncsPwfpqIVUx6aAmsAOzFcndeljQBDAX8TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbwKpTaEv0xRRxW5wRkmg2B4bTnMB8GA1UdIwQY
MBaAFCn7faO0TkGzI2nkpceQ0wgfxpqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xN2EwMTYtMjZjNy00MjRjLTg2MmYt
YmNhYzhiNTUyYTlhLzEvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8xN2EwMTYtMjZjNy00MjRjLTg2MmYtYmNhYzhiNTUyYTlh
LzEvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuYs9b0O
Wxcs/CFyjMx/eIXfCb4f6qV9tSeSb/2LbZnKwc5iKhYKZds04JVOn2E6lFlx6PIy
KNv762SL+tGw+9saaW/Fx3tsePuTfgOmJsQVGEE2p02lrIRFxjeZmz2HWjjbKV2N
QMwBiiOSMvlZpy1EYHzlU6K2Sa7UT52dWYDomkI7kC+h6qfAgcp4KSE4VJ+M2av9
DO16Pd92575WhirBZmB7I5gCpJBug1YFEzpXuoGBVnK0rUlTAaKXRGN3WMDMqZP2
QIJ7z0jShxMpwjHBRt3uTCvy/Sjs6wFVKO7Q8sLGRMSLIp9Unk44l22tQWyA7TTF
CUWElGXY7kuf6g==
-----END CERTIFICATE-----
Generated at Mon Oct 27 17:03:04 2025 by rpki-client