Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
File: KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft (raw, json)
Hash identifier: dWeRQ88PkZGXBDfQh19XAW+yXxRXD8PlkjHA8PIHh80=
Subject key identifier: 97:E3:F2:7E:C9:2A:10:E6:6A:70:43:A0:03:28:F9:A9:C0:89:26:53
Authority key identifier: 29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
Certificate issuer: /CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Certificate serial: 019A71B8D81314107DFBFE2091E1B21B6402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
Manifest number: 0FBB
Signing time: Tue 11 Nov 2025 07:02:10 +0000
Manifest this update: Tue 11 Nov 2025 07:02:10 +0000
Manifest next update: Wed 12 Nov 2025 07:02:10 +0000
Files and hashes: 1: KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl (hash: uHmL/P3k+0ks0sW5sLsf1E5QEC1J+WVX1r4GmXsMlZ4=)
2: b64Uii9JYXCMSIcDqVfd-guKolk.roa (hash: zu1QMl+md4/UwiMRhp2koQ5VJ3r3EhScu5BVA2+NzSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d8:13:14:10:7d:fb:fe:20:91:e1:b2:1b:64:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Validity
Not Before: Nov 11 07:02:10 2025 GMT
Not After : Nov 12 07:02:10 2025 GMT
Subject: CN=97e3f27ec92a10e66a7043a00328f9a9c0892653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:7f:0f:00:b3:d1:0a:20:05:04:42:49:be:
51:f3:17:a9:a7:5d:33:1e:2c:2a:1c:bc:14:b5:89:
e6:4e:80:bc:83:1d:7f:05:d4:f5:68:89:cd:1a:6d:
9b:7e:ea:e5:a2:9a:1a:3a:e5:85:72:08:57:ca:22:
20:c9:8c:b4:c2:f3:b3:54:f7:80:cc:7a:c5:fc:fc:
ec:67:99:51:43:1e:b6:82:14:49:07:05:50:6b:78:
3a:e6:d9:3c:f6:b8:5c:50:39:bb:45:24:ab:52:a9:
02:62:a9:25:79:12:d8:7b:14:c4:04:77:42:ab:00:
44:f7:87:6c:4c:8f:36:88:89:c7:83:ff:29:c7:39:
74:7f:3a:29:4b:69:a3:52:af:1a:dc:e3:ed:1e:ba:
7a:7e:7b:91:5c:ec:50:bf:00:76:92:b1:d1:1d:33:
09:80:90:ba:bb:87:3b:a0:d2:df:0d:58:2f:5a:26:
67:68:d2:0d:ec:44:db:9c:bd:30:86:ad:06:0f:6a:
f9:28:27:7c:5b:59:6f:44:7f:77:98:5c:9e:16:8f:
ae:89:9d:1e:7f:63:1d:9b:7a:f8:d5:27:0b:eb:98:
95:5a:b0:d1:cc:cd:1e:da:2f:1e:2f:b3:d3:78:cf:
eb:2f:0c:a3:df:16:27:42:04:14:42:6d:98:93:da:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E3:F2:7E:C9:2A:10:E6:6A:70:43:A0:03:28:F9:A9:C0:89:26:53
X509v3 Authority Key Identifier:
keyid:29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:3e:44:81:4f:0b:33:f2:9b:96:be:9b:df:a9:98:3b:2e:8b:
01:f7:3e:c2:fc:dd:a6:77:65:e4:29:01:65:40:fc:15:d8:a3:
f9:30:3c:4b:f7:b1:c5:e2:57:72:a1:70:cb:e9:d2:9d:98:1b:
b4:37:09:82:59:75:db:4e:2c:61:9e:6d:1a:93:4e:24:5e:39:
42:bd:c0:fe:55:32:86:6d:56:c3:5b:aa:c4:8a:00:b8:4a:ae:
87:ed:a8:25:f6:99:b7:07:5a:4b:87:de:ed:35:ff:21:72:27:
52:b5:36:ab:0b:d7:db:73:a3:16:8e:8e:3c:2f:db:cb:6d:69:
dc:d0:db:72:14:65:88:9c:93:81:86:2c:3c:74:7f:ca:9f:fb:
ee:dd:0e:d1:ef:68:6e:8a:9f:b3:ec:c2:74:b0:37:0e:db:59:
41:e0:8a:e6:cd:19:e2:90:ed:43:9c:4f:a4:a5:af:00:13:9e:
2d:55:ab:31:23:d1:30:d0:fb:3b:d3:94:7c:2c:b5:69:7b:94:
fa:85:06:c5:24:1b:5c:0e:0c:7f:4e:d2:a4:10:05:7d:4d:fb:
cc:5b:41:2c:54:a2:36:21:15:a7:42:e2:0a:bc:eb:33:79:4d:
4b:ed:82:07:0d:49:07:a9:12:81:9f:40:f7:79:06:90:94:cb:
c0:6e:5f:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuNgTFBB9+/4gkeGyG2QCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Nzc0NDY3Y2M5ZjFlZDlkOTU3YjgzYWExN2EwOTBiMWRm
NzY5NDYwHhcNMjUxMTExMDcwMjEwWhcNMjUxMTEyMDcwMjEwWjAzMTEwLwYDVQQD
Eyg5N2UzZjI3ZWM5MmExMGU2NmE3MDQzYTAwMzI4ZjlhOWMwODkyNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbB/DwCz0QogBQRCSb5R8xepp10z
HiwqHLwUtYnmToC8gx1/BdT1aInNGm2bfurlopoaOuWFcghXyiIgyYy0wvOzVPeA
zHrF/PzsZ5lRQx62ghRJBwVQa3g65tk89rhcUDm7RSSrUqkCYqkleRLYexTEBHdC
qwBE94dsTI82iInHg/8pxzl0fzopS2mjUq8a3OPtHrp6fnuRXOxQvwB2krHRHTMJ
gJC6u4c7oNLfDVgvWiZnaNIN7ETbnL0whq0GD2r5KCd8W1lvRH93mFyeFo+uiZ0e
f2Mdm3r41ScL65iVWrDRzM0e2i8eL7PTeM/rLwyj3xYnQgQUQm2Yk9rnRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfj8n7JKhDmanBDoAMo+anAiSZTMB8GA1UdIwQY
MBaAFCl3RGfMnx7Z2Ve4OqF6CQsd92lGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hkRVo4eWZIdG5aVjdnNm9Yb0pDeDMzYVVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85ZGMwOGMtZTFiNi00MjU5LWE1ZGIt
ZDU1ZTM4ODY4YTUyLzEvS1hkRVo4eWZIdG5aVjdnNm9Yb0pDeDMzYVVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85ZGMwOGMtZTFiNi00MjU5LWE1ZGItZDU1ZTM4ODY4YTUy
LzEvS1hkRVo4eWZIdG5aVjdnNm9Yb0pDeDMzYVVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsj5EgU8L
M/Kblr6b36mYOy6LAfc+wvzdpndl5CkBZUD8Fdij+TA8S/exxeJXcqFwy+nSnZgb
tDcJgll1204sYZ5tGpNOJF45Qr3A/lUyhm1Ww1uqxIoAuEquh+2oJfaZtwdaS4fe
7TX/IXInUrU2qwvX23OjFo6OPC/by21p3NDbchRliJyTgYYsPHR/yp/77t0O0e9o
boqfs+zCdLA3DttZQeCK5s0Z4pDtQ5xPpKWvABOeLVWrMSPRMND7O9OUfCy1aXuU
+oUGxSQbXA4Mf07SpBAFfU37zFtBLFSiNiEVp0LiCrzrM3lNS+2CBw1JB6kSgZ9A
93kGkJTLwG5fsA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:38 2025 by rpki-client