Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
File: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft (raw, json)
Hash identifier: Sxt7R4VyTcW42FgnHbR3A4+8jZ2qOLfLqbbqLGRE5zw=
Subject key identifier: 17:66:BC:49:B0:9F:A6:09:02:90:4F:FB:99:F1:CB:CC:08:B6:02:C1
Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
Certificate issuer: /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Certificate serial: 019A71B8E93288B094C88F4BD642A3592F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
Manifest number: 0DB4
Signing time: Tue 11 Nov 2025 07:02:14 +0000
Manifest this update: Tue 11 Nov 2025 07:02:14 +0000
Manifest next update: Wed 12 Nov 2025 07:02:14 +0000
Files and hashes: 1: H_XRmIddIdPBZC4McGFtZFb7xLI.roa (hash: URusFpEY9p6Rr7dRogLTLrCEXbfHuzjHeSeeheoUdt4=)
2: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl (hash: SYlM2XNwvkOQFUEXSK0GXMCz7WWv9gdJipz5CBiTneI=)
3: xh-we9d8ckMU7F7FFzCQ7FMsb3I.roa (hash: EaElHQr8TuQZrISDJ1FWoKtH8vNTIdcwsRa2JKICJyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e9:32:88:b0:94:c8:8f:4b:d6:42:a3:59:2f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Validity
Not Before: Nov 11 07:02:14 2025 GMT
Not After : Nov 12 07:02:14 2025 GMT
Subject: CN=1766bc49b09fa60902904ffb99f1cbcc08b602c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:76:56:4c:d8:c1:e0:eb:b5:49:e0:c7:cf:
49:b7:d8:2e:67:24:91:bd:79:14:e6:24:19:7f:2c:
b2:f1:0a:53:95:2a:40:31:f7:aa:c1:83:d5:36:02:
40:45:93:fe:e0:d4:4f:cf:92:5c:d4:53:3f:9b:d8:
ce:9a:8e:27:53:d4:21:b7:66:0b:e8:9a:48:f2:3c:
81:44:e3:df:8d:79:3d:7e:71:e1:0f:b0:9a:8c:f5:
ea:d0:81:e5:6d:04:45:cf:bd:36:62:23:f2:7e:e7:
c9:8f:f7:5b:09:05:07:4f:77:a5:eb:e7:5a:cd:fe:
1e:c4:24:65:46:db:6b:84:d3:5e:e7:88:34:d4:d7:
56:1a:05:a7:5a:0b:51:09:5e:32:76:d3:15:4c:c2:
32:67:b1:07:53:d4:bd:8d:28:60:64:04:64:4c:46:
e4:41:ea:36:6c:37:83:60:b7:42:bd:95:de:f0:59:
3b:39:cf:b5:6d:5e:db:7d:e8:f8:16:63:13:86:90:
5f:d6:91:ee:99:c9:50:ab:45:49:a0:03:a6:c1:6e:
6d:bf:37:dd:37:fe:4a:cd:b6:7a:50:f4:bb:4f:f1:
12:ab:40:7c:d2:96:b4:bc:4c:c6:d3:d1:14:c4:39:
cb:74:e8:79:7a:ba:f5:38:73:0d:3b:e7:f8:49:4a:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:66:BC:49:B0:9F:A6:09:02:90:4F:FB:99:F1:CB:CC:08:B6:02:C1
X509v3 Authority Key Identifier:
keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:86:9f:8b:bd:51:20:d9:e1:27:c0:f3:97:8e:d0:ca:3d:68:
21:a6:ee:10:be:86:61:6a:94:69:3b:e3:e8:8c:f0:6b:db:60:
5b:24:db:df:c4:5a:a8:f4:e1:55:ce:fb:b2:19:82:09:44:2a:
49:08:dd:f6:9a:ac:2c:53:8b:64:4d:99:39:63:5c:75:bc:29:
5c:cc:f8:70:29:04:23:5e:8a:73:fb:2d:85:9a:e2:3e:54:50:
08:78:77:38:eb:e2:1d:88:74:b5:e9:f1:7e:60:3d:cc:4e:ac:
ab:82:ef:6e:7d:d4:7d:85:32:91:61:50:e2:9f:10:8d:c0:f2:
6e:0b:56:8f:0b:52:97:fc:3e:93:82:6d:cb:f0:51:bd:df:a1:
23:a5:10:03:d7:c4:9c:f4:61:4f:35:d7:d7:6d:1e:51:86:90:
41:3d:5a:fe:30:5b:71:e7:85:9f:03:8a:71:3f:16:eb:44:aa:
31:69:b5:ab:49:c1:25:2e:b6:3a:f5:4f:f4:d3:9e:56:af:91:
ef:25:2c:b4:ab:d0:41:38:2d:b0:9f:21:36:67:6b:a7:f7:fa:
b1:73:72:51:93:a2:ea:0b:84:94:5c:6e:c0:43:93:1e:d7:09:
54:92:f4:8d:94:14:29:e5:f9:ae:d9:e4:f4:1e:21:be:3d:2d:
d6:42:08:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuOkyiLCUyI9L1kKjWS9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYmNjNWM2NjRhNGE4MjMwNTg5MmE4YzQzM2U5NGZmZTMy
ZGFkYjcwHhcNMjUxMTExMDcwMjE0WhcNMjUxMTEyMDcwMjE0WjAzMTEwLwYDVQQD
EygxNzY2YmM0OWIwOWZhNjA5MDI5MDRmZmI5OWYxY2JjYzA4YjYwMmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xp2VkzYweDrtUngx89Jt9guZySR
vXkU5iQZfyyy8QpTlSpAMfeqwYPVNgJARZP+4NRPz5Jc1FM/m9jOmo4nU9Qht2YL
6JpI8jyBROPfjXk9fnHhD7CajPXq0IHlbQRFz702YiPyfufJj/dbCQUHT3el6+da
zf4exCRlRttrhNNe54g01NdWGgWnWgtRCV4ydtMVTMIyZ7EHU9S9jShgZARkTEbk
Qeo2bDeDYLdCvZXe8Fk7Oc+1bV7bfej4FmMThpBf1pHumclQq0VJoAOmwW5tvzfd
N/5KzbZ6UPS7T/ESq0B80pa0vEzG09EUxDnLdOh5err1OHMNO+f4SUp4kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdmvEmwn6YJApBP+5nxy8wItgLBMB8GA1UdIwQY
MBaAFCq8xcZkpKgjBYkqjEM+lP/jLa23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kYzczNDUtNzVjYi00NDIwLWEzZjAt
NjVmYjEwYTA2ZTg5LzEvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9kYzczNDUtNzVjYi00NDIwLWEzZjAtNjVmYjEwYTA2ZTg5
LzEvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoafi71R
INnhJ8Dzl47Qyj1oIabuEL6GYWqUaTvj6Izwa9tgWyTb38RaqPThVc77shmCCUQq
SQjd9pqsLFOLZE2ZOWNcdbwpXMz4cCkEI16Kc/sthZriPlRQCHh3OOviHYh0tenx
fmA9zE6sq4Lvbn3UfYUykWFQ4p8QjcDybgtWjwtSl/w+k4Jty/BRvd+hI6UQA9fE
nPRhTzXX120eUYaQQT1a/jBbceeFnwOKcT8W60SqMWm1q0nBJS62OvVP9NOeVq+R
7yUstKvQQTgtsJ8hNmdrp/f6sXNyUZOi6guElFxuwEOTHtcJVJL0jZQUKeX5rtnk
9B4hvj0t1kII1w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:47:02 2025 by rpki-client