Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
File: kB-EOslEjLB3kZF7kDVAFf_iPbc.mft (raw, json)
Hash identifier: gkVIZ2NaaGKjL2dopeUqNRb8gAVKzLKHhNRjyw2m3ac=
Subject key identifier: D5:FB:77:7C:34:7E:72:F1:82:D7:C2:35:1A:45:2E:AB:2A:2D:44:73
Authority key identifier: 90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7
Certificate issuer: /CN=901f843ac9448cb07791917b90354015ffe23db7
Certificate serial: 019A71EE6262503C1DC38DFAD8F3590D15DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 08:00:39 +0000
Manifest this update: Tue 11 Nov 2025 08:00:39 +0000
Manifest next update: Wed 12 Nov 2025 08:00:39 +0000
Files and hashes: 1: kB-EOslEjLB3kZF7kDVAFf_iPbc.crl (hash: Jr5DDmnN+ZBISAY0ajz1LODHmKnQc7Jb1sN2e8L1v6w=)
2: qJaxShBy0DTWJnv89u4j-u1rRt0.roa (hash: v1eQwogxLyju8Nd0v7YmtPyhLDpVTvEoi8QUOeFY/iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:62:62:50:3c:1d:c3:8d:fa:d8:f3:59:0d:15:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901f843ac9448cb07791917b90354015ffe23db7
Validity
Not Before: Nov 11 08:00:39 2025 GMT
Not After : Nov 12 08:00:39 2025 GMT
Subject: CN=d5fb777c347e72f182d7c2351a452eab2a2d4473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:e7:9b:74:26:bc:3a:e5:cf:e1:c7:71:56:
3b:1d:f8:c3:90:fa:cb:2f:78:46:e0:d4:1c:a0:0e:
e0:49:4e:b5:2b:16:a3:7e:a0:26:a3:52:82:1b:13:
47:61:ba:74:13:7e:a9:ab:c2:41:e4:da:d3:43:5a:
c2:02:98:f9:3b:a5:17:f7:cc:16:ab:c7:56:83:1a:
db:ba:de:17:0e:76:23:23:97:2b:b1:80:2d:2f:07:
92:04:51:a3:72:7e:72:2f:d0:ad:72:d8:1e:bb:65:
5c:db:23:21:bc:ac:cc:b2:52:78:85:ad:ce:ae:3e:
53:e3:da:3f:a1:f8:6a:fe:10:ec:e0:38:f1:52:38:
49:d1:75:40:89:fd:5e:75:c5:19:d9:e2:11:ff:8c:
d8:c7:4a:ea:40:f7:fe:5d:26:f8:42:38:37:fb:86:
0d:a2:55:48:ff:b8:55:85:e1:cf:4f:ac:9c:16:46:
ae:b6:09:30:62:fd:84:24:e8:82:2b:e7:7c:f2:c8:
75:52:0c:6f:4e:dd:17:45:bf:38:c6:5e:e4:af:62:
31:ca:13:9f:33:36:6f:57:c5:86:c1:5a:ed:43:27:
24:f6:c7:65:58:44:11:67:37:95:dc:19:25:2a:9d:
bb:52:32:58:83:82:36:f8:86:b2:ec:25:2f:e8:ef:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FB:77:7C:34:7E:72:F1:82:D7:C2:35:1A:45:2E:AB:2A:2D:44:73
X509v3 Authority Key Identifier:
keyid:90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:08:85:81:54:f2:d5:09:b2:74:04:1b:fa:c0:d7:ef:93:8c:
fe:64:8c:6a:34:e1:0f:c8:87:fe:21:d3:dc:46:8d:13:e2:d2:
28:25:02:88:7c:3b:02:eb:d0:ce:a1:95:0f:35:3a:81:07:50:
3e:e4:66:45:42:e7:de:83:14:92:ae:c9:f0:34:4e:d5:d9:d0:
d5:0d:28:63:0b:47:29:d1:d8:9d:53:9b:3e:63:62:dd:9e:d0:
e5:18:37:70:b2:9d:33:bf:51:80:4b:76:9c:7f:26:4f:36:9c:
43:2b:05:21:94:3c:35:f4:c7:19:93:89:1b:eb:8c:7d:82:7b:
50:33:b7:78:f6:8b:ae:13:ce:e7:81:15:a9:58:d8:f6:d3:c8:
01:9f:fb:03:dc:4a:74:bb:59:b1:f7:bb:a8:6f:45:5c:23:f8:
fa:62:11:c8:b6:6c:fb:2d:6d:b3:35:8f:82:27:0f:a2:a9:73:
8b:1b:e3:2a:9a:d1:f0:b7:fc:a2:a3:b2:37:01:d7:51:eb:3f:
0b:70:a2:4d:f6:af:e0:4c:cc:22:c9:97:0f:ce:9a:e2:13:a3:
87:9d:23:e5:55:8c:9a:e6:6d:b1:58:10:c7:bc:7b:6d:d8:b3:
05:e8:1f:59:11:f8:11:f9:8d:41:2a:c4:fb:bc:03:53:41:9e:
e9:71:f8:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7mJiUDwdw4362PNZDRXbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMWY4NDNhYzk0NDhjYjA3NzkxOTE3YjkwMzU0MDE1ZmZl
MjNkYjcwHhcNMjUxMTExMDgwMDM5WhcNMjUxMTEyMDgwMDM5WjAzMTEwLwYDVQQD
EyhkNWZiNzc3YzM0N2U3MmYxODJkN2MyMzUxYTQ1MmVhYjJhMmQ0NDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrrnm3QmvDrlz+HHcVY7HfjDkPrL
L3hG4NQcoA7gSU61KxajfqAmo1KCGxNHYbp0E36pq8JB5NrTQ1rCApj5O6UX98wW
q8dWgxrbut4XDnYjI5crsYAtLweSBFGjcn5yL9Ctctgeu2Vc2yMhvKzMslJ4ha3O
rj5T49o/ofhq/hDs4DjxUjhJ0XVAif1edcUZ2eIR/4zYx0rqQPf+XSb4Qjg3+4YN
olVI/7hVheHPT6ycFkautgkwYv2EJOiCK+d88sh1UgxvTt0XRb84xl7kr2IxyhOf
MzZvV8WGwVrtQyck9sdlWEQRZzeV3BklKp27UjJYg4I2+Iay7CUv6O/A8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNX7d3w0fnLxgtfCNRpFLqsqLURzMB8GA1UdIwQY
MBaAFJAfhDrJRIywd5GRe5A1QBX/4j23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wM2M3MzQtNzU5OC00YmQ3LWFlMjEt
YjIwNGY5ZmNhZGI2LzEva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wM2M3MzQtNzU5OC00YmQ3LWFlMjEtYjIwNGY5ZmNhZGI2
LzEva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHgiFgVTy
1QmydAQb+sDX75OM/mSMajThD8iH/iHT3EaNE+LSKCUCiHw7AuvQzqGVDzU6gQdQ
PuRmRULn3oMUkq7J8DRO1dnQ1Q0oYwtHKdHYnVObPmNi3Z7Q5Rg3cLKdM79RgEt2
nH8mTzacQysFIZQ8NfTHGZOJG+uMfYJ7UDO3ePaLrhPO54EVqVjY9tPIAZ/7A9xK
dLtZsfe7qG9FXCP4+mIRyLZs+y1tszWPgicPoqlzixvjKprR8Lf8oqOyNwHXUes/
C3CiTfav4EzMIsmXD86a4hOjh50j5VWMmuZtsVgQx7x7bdizBegfWRH4EfmNQSrE
+7wDU0Ge6XH4OQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:22 2025 by rpki-client