Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
File: K_sNVIxJtqVhik07PB2kw9FEv0Y.mft (raw, json)
Hash identifier: kz6wGIHt+FZckYra1rbGnxzxwSy/1TURwuTN+EUL4ig=
Subject key identifier: 93:7D:E8:0A:69:3D:33:58:B9:42:ED:C5:58:B1:38:B2:DB:AA:9A:6F
Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Certificate serial: 019A2778BDE56E4C6A4B715C3663B0A39294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
Manifest number: 0C9A
Signing time: Mon 27 Oct 2025 21:00:15 +0000
Manifest this update: Mon 27 Oct 2025 21:00:15 +0000
Manifest next update: Tue 28 Oct 2025 21:00:15 +0000
Files and hashes: 1: BZKsmbKkOgpiNQItA4ToED7-XVE.roa (hash: +K+xyT8SZ5ycbey8u6qvz7hsOUxVuM3hMuLKIog812k=)
2: K_sNVIxJtqVhik07PB2kw9FEv0Y.crl (hash: dOgI0HqJqiQ29tWX9kmxMc4oom41fX07+vErJLkIyjA=)
3: igZag3cgyJRdv01vkp4DRY6VvTk.roa (hash: JpGBcXUxW150Ej7SxtVldKg4tZ/GU0LkZvopH1/QgMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:78:bd:e5:6e:4c:6a:4b:71:5c:36:63:b0:a3:92:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Validity
Not Before: Oct 27 21:00:15 2025 GMT
Not After : Oct 28 21:00:15 2025 GMT
Subject: CN=937de80a693d3358b942edc558b138b2dbaa9a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:bb:a9:15:30:cf:e3:78:2e:ae:a4:a1:d1:
a9:e4:51:9d:62:e9:a1:51:06:73:60:8e:9c:17:cd:
17:29:63:00:86:26:cc:97:ef:14:db:ba:dc:e0:93:
cf:9e:00:0d:30:c0:c8:cb:34:33:fa:3a:d5:22:40:
ec:cf:18:d3:bc:81:9a:6a:8b:07:5c:c0:2f:e8:06:
7a:4c:11:ae:9a:e6:74:84:7b:48:6d:2b:e4:22:fd:
2e:a4:2b:0a:49:17:45:ee:ae:3c:ba:5b:ee:a9:a4:
ec:e5:33:68:ec:b3:a9:c5:0a:71:86:4c:b5:5c:79:
22:dd:1f:98:50:14:a8:25:e2:d0:c3:cf:a0:7d:c1:
e1:c5:2b:8f:65:d3:01:f2:a1:33:c9:ba:7a:7c:42:
55:f9:f8:87:87:7c:0b:98:a1:e2:2e:3b:9a:b2:4d:
5c:c2:38:2b:b9:0f:bf:f5:d2:7c:9b:74:48:2e:a5:
79:fb:06:db:f6:56:db:8e:80:2b:40:80:34:80:28:
42:eb:22:0a:1d:2c:86:2c:a4:77:52:06:30:c2:b5:
bc:52:90:e9:27:0f:a2:14:f1:1e:c3:e5:71:46:bb:
6a:af:20:6c:9b:b3:b8:26:64:d0:6d:d6:0a:ef:0c:
f6:2e:80:20:ce:27:68:d2:08:85:d4:45:79:65:7e:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7D:E8:0A:69:3D:33:58:B9:42:ED:C5:58:B1:38:B2:DB:AA:9A:6F
X509v3 Authority Key Identifier:
keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:80:63:7f:9d:5a:c0:51:94:c5:72:83:5e:d5:ff:09:de:c4:
40:d7:dd:42:d9:da:33:93:0e:3c:c0:c2:9c:78:da:3f:ea:4a:
8b:03:8f:d3:fd:ae:63:c4:cb:5e:61:ef:0f:15:1b:71:e7:57:
f2:3f:63:7e:04:23:25:ae:6a:37:63:13:c7:29:bd:5e:59:45:
96:f9:81:32:8a:d3:6b:77:57:eb:22:94:70:ae:fe:c4:4f:f0:
75:9b:7d:46:f8:07:fd:c0:90:b9:83:6e:ca:30:49:da:00:ce:
b3:d7:83:7e:49:ae:af:1d:d1:73:a6:70:4d:9b:08:1e:fb:11:
eb:05:2c:2e:67:25:75:1b:11:c6:36:6f:9a:6e:84:01:55:07:
2e:c6:f6:1b:33:ef:f2:12:73:1d:f5:05:a1:c8:5a:24:5a:57:
74:aa:94:f6:bc:bc:35:4c:97:61:ab:d4:a1:bb:ad:aa:93:0c:
d4:8d:28:2a:d7:20:81:c4:28:18:63:35:ba:b1:65:dc:78:5e:
f4:5d:3a:2a:97:8d:9f:e7:f1:6c:26:b3:a7:8e:3c:20:72:e4:
8e:11:be:6e:b5:0a:15:79:f1:78:59:89:af:73:73:80:73:b7:
03:17:4b:e4:12:be:e1:f5:ee:59:02:5e:4c:bf:6f:a7:ff:a6:
8f:3c:04:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoneL3lbkxqS3FcNmOwo5KUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZmIwZDU0OGM0OWI2YTU2MThhNGQzYjNjMWRhNGMzZDE0
NGJmNDYwHhcNMjUxMDI3MjEwMDE1WhcNMjUxMDI4MjEwMDE1WjAzMTEwLwYDVQQD
Eyg5MzdkZTgwYTY5M2QzMzU4Yjk0MmVkYzU1OGIxMzhiMmRiYWE5YTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniK7qRUwz+N4Lq6kodGp5FGdYumh
UQZzYI6cF80XKWMAhibMl+8U27rc4JPPngANMMDIyzQz+jrVIkDszxjTvIGaaosH
XMAv6AZ6TBGumuZ0hHtIbSvkIv0upCsKSRdF7q48ulvuqaTs5TNo7LOpxQpxhky1
XHki3R+YUBSoJeLQw8+gfcHhxSuPZdMB8qEzybp6fEJV+fiHh3wLmKHiLjuask1c
wjgruQ+/9dJ8m3RILqV5+wbb9lbbjoArQIA0gChC6yIKHSyGLKR3UgYwwrW8UpDp
Jw+iFPEew+VxRrtqryBsm7O4JmTQbdYK7wz2LoAgzido0giF1EV5ZX74nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJN96AppPTNYuULtxVixOLLbqppvMB8GA1UdIwQY
MBaAFCv7DVSMSbalYYpNOzwdpMPRRL9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mNWQwZjktY2EyZi00YjZlLTkxN2Mt
MTM3MTA5MzY5NjIxLzEvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mNWQwZjktY2EyZi00YjZlLTkxN2MtMTM3MTA5MzY5NjIx
LzEvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4Bjf51a
wFGUxXKDXtX/Cd7EQNfdQtnaM5MOPMDCnHjaP+pKiwOP0/2uY8TLXmHvDxUbcedX
8j9jfgQjJa5qN2MTxym9XllFlvmBMorTa3dX6yKUcK7+xE/wdZt9RvgH/cCQuYNu
yjBJ2gDOs9eDfkmurx3Rc6ZwTZsIHvsR6wUsLmcldRsRxjZvmm6EAVUHLsb2GzPv
8hJzHfUFochaJFpXdKqU9ry8NUyXYavUobutqpMM1I0oKtcggcQoGGM1urFl3Hhe
9F06KpeNn+fxbCazp448IHLkjhG+brUKFXnxeFmJr3NzgHO3AxdL5BK+4fXuWQJe
TL9vp/+mjzwE8g==
-----END CERTIFICATE-----
Generated at Tue Oct 28 07:08:14 2025 by rpki-client