Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: ZGLoKPY/0vjr40iUfwXI5DdjzbnLlck1IhPGSmbRzUM=
Subject key identifier: CA:9B:FD:D0:A9:ED:09:E0:3F:C8:8C:66:03:51:80:09:E9:6B:A0:51
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 019A71EE5B9153CA74FAD9C764137DABC350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 0804
Signing time: Tue 11 Nov 2025 08:00:37 +0000
Manifest this update: Tue 11 Nov 2025 08:00:37 +0000
Manifest next update: Wed 12 Nov 2025 08:00:37 +0000
Files and hashes: 1: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: LUQh4SBeiXwMbFlP1raoIlBIo4HFt2XiUL7f6UFMCRc=)
2: Wky7GIO48q5Am7lt9_maGgpqgJU.roa (hash: zVs1sI4WsKaD65jBAnhtkrYGwGsMw1WHVF/3i95RTn0=)
3: fEeq-E1sxHOFQUJWiqwG8VrB7mI.roa (hash: /r8rCHZ/j6Q+/dPG2IPSlLzNTFQayT8a7Qiqlbqm++I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:5b:91:53:ca:74:fa:d9:c7:64:13:7d:ab:c3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: Nov 11 08:00:37 2025 GMT
Not After : Nov 12 08:00:37 2025 GMT
Subject: CN=ca9bfdd0a9ed09e03fc88c6603518009e96ba051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:b1:b7:99:0b:8f:99:f4:fc:c6:5d:02:a9:
9d:f8:f5:a8:d2:c7:64:eb:e1:b9:b7:04:49:5a:c7:
dd:d0:4c:9f:22:67:c8:40:3e:3d:61:d1:68:96:e5:
56:04:44:f5:56:dc:eb:0a:7e:6f:bc:77:7f:88:1e:
d3:42:39:e1:e6:53:75:67:73:0f:49:94:47:a7:5d:
52:5c:fb:23:3d:b2:33:a6:6a:1a:99:f0:77:d2:97:
7e:ad:c6:bc:d6:b2:b9:43:83:db:aa:9a:b9:71:b3:
55:1e:bc:74:d7:95:ed:e8:7a:f7:5c:36:97:56:44:
5b:6a:88:2e:73:fc:72:11:d7:80:19:f3:98:16:89:
d9:33:b2:02:82:35:4d:e3:c3:2d:c5:8b:27:35:2c:
50:77:80:5a:c2:da:b7:c1:0c:5d:b9:9f:0d:24:99:
52:c7:57:48:b0:35:45:f8:9b:a2:28:4a:2c:c8:2e:
6f:f2:b2:24:dc:90:03:2f:77:43:88:45:ba:20:be:
0d:20:83:e3:ec:8f:8e:dd:d0:2f:5a:2c:d5:20:21:
28:28:14:94:b4:ed:ad:55:00:5b:b8:22:df:6d:7c:
bd:33:ce:f9:1e:f1:fa:83:51:ab:b0:4b:ec:e9:d6:
15:43:f3:f2:e5:ca:e5:0f:db:bf:6d:0a:ca:27:3c:
fd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9B:FD:D0:A9:ED:09:E0:3F:C8:8C:66:03:51:80:09:E9:6B:A0:51
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:78:a7:f4:c5:69:04:f0:43:0f:a1:3e:66:d2:30:3b:ca:30:
b5:5f:63:af:dd:0e:cc:80:17:0b:2e:53:cd:78:fe:7d:e3:76:
65:ad:3e:a0:cb:79:9b:61:e1:28:a8:38:d5:aa:ae:ec:52:32:
bf:a5:5e:cd:ac:47:5e:3a:e7:e8:84:6a:48:d4:cf:a5:6b:b0:
b3:5b:4c:b2:cf:dd:7a:f7:b7:b1:8d:ed:51:f8:b9:34:bf:2d:
04:6d:5d:a0:39:46:b1:c5:38:c6:96:3c:70:23:0f:63:f2:85:
25:a4:95:35:0c:52:63:cb:23:27:b1:be:e4:bd:41:2e:ba:d9:
9b:8c:b8:ad:28:4e:0f:cf:a1:39:b7:22:36:b6:b6:8e:12:1a:
8e:9a:34:36:68:9f:75:44:e7:4f:fb:d0:56:8a:96:24:44:52:
58:b0:c0:68:c4:72:e2:85:83:a0:c8:92:5a:0d:f7:b0:7c:bb:
73:d1:ce:c7:8b:8c:15:cf:94:55:58:ef:ef:c3:03:a1:d7:ea:
e0:63:ba:e6:3f:af:09:dd:4f:be:4c:05:13:09:40:ca:aa:9c:
71:22:1a:16:8d:a0:84:35:fc:c4:2c:b8:a8:5c:fe:f7:a6:00:
da:3f:40:be:32:d8:23:0f:05:a8:3f:29:c7:15:53:90:03:79:
a6:5f:53:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7luRU8p0+tnHZBN9q8NQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhN2RmMzVkNDFiNDA2MmMxMGZjMTE4MTg5ZGU0N2RhMjcw
OTZkYjgwHhcNMjUxMTExMDgwMDM3WhcNMjUxMTEyMDgwMDM3WjAzMTEwLwYDVQQD
EyhjYTliZmRkMGE5ZWQwOWUwM2ZjODhjNjYwMzUxODAwOWU5NmJhMDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxaxt5kLj5n0/MZdAqmd+PWo0sdk
6+G5twRJWsfd0EyfImfIQD49YdFoluVWBET1VtzrCn5vvHd/iB7TQjnh5lN1Z3MP
SZRHp11SXPsjPbIzpmoamfB30pd+rca81rK5Q4Pbqpq5cbNVHrx015Xt6Hr3XDaX
VkRbaoguc/xyEdeAGfOYFonZM7ICgjVN48MtxYsnNSxQd4Bawtq3wQxduZ8NJJlS
x1dIsDVF+JuiKEosyC5v8rIk3JADL3dDiEW6IL4NIIPj7I+O3dAvWizVICEoKBSU
tO2tVQBbuCLfbXy9M875HvH6g1GrsEvs6dYVQ/Py5crlD9u/bQrKJzz9JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqb/dCp7QngP8iMZgNRgAnpa6BRMB8GA1UdIwQY
MBaAFCp9811BtAYsEPwRgYneR9onCW24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lZDMzNGMtZDc5Ny00MjVhLTkzYTEt
YTljYzg5ZDQ0YjI1LzEvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lZDMzNGMtZDc5Ny00MjVhLTkzYTEtYTljYzg5ZDQ0YjI1
LzEvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHin9MVp
BPBDD6E+ZtIwO8owtV9jr90OzIAXCy5TzXj+feN2Za0+oMt5m2HhKKg41aqu7FIy
v6VezaxHXjrn6IRqSNTPpWuws1tMss/deve3sY3tUfi5NL8tBG1doDlGscU4xpY8
cCMPY/KFJaSVNQxSY8sjJ7G+5L1BLrrZm4y4rShOD8+hObciNra2jhIajpo0Nmif
dUTnT/vQVoqWJERSWLDAaMRy4oWDoMiSWg33sHy7c9HOx4uMFc+UVVjv78MDodfq
4GO65j+vCd1PvkwFEwlAyqqccSIaFo2ghDX8xCy4qFz+96YA2j9AvjLYIw8FqD8p
xxVTkAN5pl9Trw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:20 2025 by rpki-client