Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
File: kWAz3VV0R5Zb2u-LRySl5308Ba4.mft (raw, json)
Hash identifier: 9z6G1poI3y0mXTwrR+jjupPPDIfowcvCDaSXnN944Nk=
Subject key identifier: 86:43:FD:F7:BA:9F:E9:43:0F:BA:00:15:4D:A5:4E:31:BF:4A:A5:69
Authority key identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
Certificate issuer: /CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Certificate serial: 0199FBB3703A7E6F70DF67B074B068B9280B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
Manifest number: 094B
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: H9X8h-Jo2ED93QCRffXvwdj9Wvo.roa (hash: 12jQO6dfQb4ZiHwe3922CE3yIwiEA5iTvy+mpgxA/Kk=)
2: kWAz3VV0R5Zb2u-LRySl5308Ba4.crl (hash: sG9IsSC3Nb3Jk/HWZ+B/8w8eOTfqUbkk3fCdA5SFQT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:70:3a:7e:6f:70:df:67:b0:74:b0:68:b9:28:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=8643fdf7ba9fe9430fba00154da54e31bf4aa569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:94:10:3d:df:7f:58:f8:f5:bf:b7:2c:1f:
cc:31:3b:84:af:b5:96:46:66:14:d5:67:97:0d:bd:
42:4d:82:8e:41:e3:5b:c1:98:c4:f3:7b:08:84:54:
53:1e:f4:93:a7:c5:e2:bc:dc:c9:ce:9d:bd:b6:25:
b0:a4:f9:de:cb:e0:b2:df:ae:e9:6a:3e:42:e6:ca:
6f:12:8a:dc:3e:a3:97:a5:1c:9a:ab:ba:73:c0:e2:
d7:e8:ac:26:e6:1d:dc:a4:a8:fd:52:82:e3:97:98:
c3:9c:12:f2:03:a4:94:ca:af:4e:16:b2:57:d6:2c:
72:8b:58:37:1b:53:f3:e6:41:59:44:8f:5f:f6:a3:
04:a3:2a:41:fd:58:52:38:44:66:ed:a5:9a:88:c0:
96:1c:72:06:07:a2:bd:bd:13:35:f8:6e:97:8b:0c:
c7:2e:49:7d:56:b6:0c:f1:70:4a:5a:26:dd:42:37:
0c:0e:da:de:b2:12:d9:63:d9:e0:bc:f0:74:25:66:
d1:b0:8d:01:cc:c5:4d:6a:0f:6f:48:c0:d7:1b:c5:
b3:19:02:4b:4c:f8:36:3a:dd:7e:d5:8d:40:4f:a9:
7c:b6:cb:3c:f4:49:5f:c1:f9:6f:9e:1b:b3:9a:fa:
85:02:27:67:ee:0f:3c:ee:7b:27:d5:a8:17:23:b4:
fd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:43:FD:F7:BA:9F:E9:43:0F:BA:00:15:4D:A5:4E:31:BF:4A:A5:69
X509v3 Authority Key Identifier:
keyid:91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:00:ee:af:eb:25:08:43:f2:70:fe:97:b9:a8:a9:2d:e8:9e:
b5:c9:79:30:35:3a:ab:8b:8b:5d:89:da:a6:69:33:48:a0:38:
5f:21:35:6b:10:1f:de:3e:9b:5c:2c:cc:69:92:1a:4b:25:d2:
a2:84:5e:84:ee:c3:e2:3a:43:45:8c:b9:4b:3c:39:b9:fa:aa:
f2:62:74:af:0e:b4:ff:54:d3:ec:96:f6:ad:07:c8:6f:a4:7c:
bc:1c:dd:b1:3c:26:82:5d:b2:58:87:d0:ca:8c:e6:90:0c:2c:
3f:73:f5:95:7f:52:42:ee:16:b2:a3:1a:95:48:5d:7c:2d:44:
79:0a:a2:f7:73:0e:27:f4:1a:07:34:ff:b1:f0:86:19:b1:94:
e5:25:d4:1e:24:5b:2c:d9:49:14:81:62:d7:05:62:21:0e:5e:
ff:2a:fa:e5:fa:32:8b:b2:7f:d9:e5:b9:b1:13:7c:f2:ef:dc:
e8:62:23:fb:31:58:ea:47:2d:57:18:e2:81:87:b6:4a:56:b4:
f8:9b:14:ef:45:cb:f9:10:07:f0:70:a8:d5:9b:a6:e8:f9:5f:
ea:7c:22:11:f8:71:47:fb:a2:05:2a:bd:88:d7:47:c8:22:51:
03:1b:1b:ce:af:c0:09:db:7c:dc:a2:01:59:df:50:55:e2:be:
07:c3:01:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s3A6fm9w32ewdLBouSgLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNjAzM2RkNTU3NDQ3OTY1YmRhZWY4YjQ3MjRhNWU3N2Qz
YzA1YWUwHhcNMjUxMDE5MDkwMTA0WhcNMjUxMDIwMDkwMTA0WjAzMTEwLwYDVQQD
Eyg4NjQzZmRmN2JhOWZlOTQzMGZiYTAwMTU0ZGE1NGUzMWJmNGFhNTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOKUED3ff1j49b+3LB/MMTuEr7WW
RmYU1WeXDb1CTYKOQeNbwZjE83sIhFRTHvSTp8XivNzJzp29tiWwpPney+Cy367p
aj5C5spvEorcPqOXpRyaq7pzwOLX6Kwm5h3cpKj9UoLjl5jDnBLyA6SUyq9OFrJX
1ixyi1g3G1Pz5kFZRI9f9qMEoypB/VhSOERm7aWaiMCWHHIGB6K9vRM1+G6XiwzH
Lkl9VrYM8XBKWibdQjcMDtreshLZY9ngvPB0JWbRsI0BzMVNag9vSMDXG8WzGQJL
TPg2Ot1+1Y1AT6l8tss89ElfwflvnhuzmvqFAidn7g887nsn1agXI7T90wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZD/fe6n+lDD7oAFU2lTjG/SqVpMB8GA1UdIwQY
MBaAFJFgM91VdEeWW9rvi0ckped9PAWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1dBejNWVjBSNVpiMnUtTFJ5U2w1MzA4QmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iYzUxZjQtNjFmMi00ZmFhLWEwMmEt
NjAyOTM2NTM5NDA1LzEva1dBejNWVjBSNVpiMnUtTFJ5U2w1MzA4QmE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9iYzUxZjQtNjFmMi00ZmFhLWEwMmEtNjAyOTM2NTM5NDA1
LzEva1dBejNWVjBSNVpiMnUtTFJ5U2w1MzA4QmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcADur+sl
CEPycP6XuaipLeietcl5MDU6q4uLXYnapmkzSKA4XyE1axAf3j6bXCzMaZIaSyXS
ooRehO7D4jpDRYy5Szw5ufqq8mJ0rw60/1TT7Jb2rQfIb6R8vBzdsTwmgl2yWIfQ
yozmkAwsP3P1lX9SQu4WsqMalUhdfC1EeQqi93MOJ/QaBzT/sfCGGbGU5SXUHiRb
LNlJFIFi1wViIQ5e/yr65foyi7J/2eW5sRN88u/c6GIj+zFY6kctVxjigYe2Sla0
+JsU70XL+RAH8HCo1Zum6Plf6nwiEfhxR/uiBSq9iNdHyCJRAxsbzq/ACdt83KIB
Wd9QVeK+B8MBrw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:56 2025 by rpki-client