Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
File: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft (raw, json)
Hash identifier: quS2VGfi9hc8sew85FzvWMiNEm9J4iJ7W6zgnBGmypo=
Subject key identifier: 78:AE:56:72:CB:13:C0:37:07:7E:68:C3:D1:E2:AC:9B:93:45:0C:44
Authority key identifier: 28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
Certificate issuer: /CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Certificate serial: 0199FAD7FC7316BAB60791140418CB94FB0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
Manifest number: 112B
Signing time: Sun 19 Oct 2025 05:01:22 +0000
Manifest this update: Sun 19 Oct 2025 05:01:22 +0000
Manifest next update: Mon 20 Oct 2025 05:01:22 +0000
Files and hashes: 1: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl (hash: YGd4CtyDDnKQcW8RxE21aHwOAtAQw7MfzMR6xbtPZJ4=)
2: rYNJq30hG9TfQKEAUAnbb-JlarU.roa (hash: bobhiWtsSX2sPVTtreNAJF6ae9i50YxHtcGAHPsK84U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:fc:73:16:ba:b6:07:91:14:04:18:cb:94:fb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Validity
Not Before: Oct 19 05:01:22 2025 GMT
Not After : Oct 20 05:01:22 2025 GMT
Subject: CN=78ae5672cb13c037077e68c3d1e2ac9b93450c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:b1:98:57:db:82:fb:f6:4d:49:8f:32:ad:
48:f0:ae:a8:14:0b:c8:d5:23:98:6e:9b:e6:71:4a:
08:61:a6:56:c6:eb:4c:26:2d:bf:34:c7:68:b0:61:
c3:5a:6a:72:ac:77:cc:85:95:1b:5c:9d:a4:04:09:
d6:c0:71:ed:b9:77:11:84:d2:aa:80:81:7d:25:cd:
37:0c:83:50:b2:45:c7:fd:01:47:72:17:93:44:6b:
7f:80:63:24:54:fa:d0:7d:50:0b:f0:3f:eb:44:48:
a1:e5:a2:e5:c7:ae:6f:eb:8b:6c:5a:fc:59:1f:6b:
84:5a:e9:9d:ee:cd:cf:bf:20:dd:6b:d7:9d:13:55:
90:f1:f7:8e:e3:18:d2:8f:b9:da:28:16:5c:6b:1a:
a6:6e:3c:73:ad:a3:e0:3f:54:79:d4:6c:92:45:4b:
81:f3:55:26:ab:07:8d:af:d9:7b:73:02:01:7c:c2:
50:a9:2d:c2:d3:5a:14:b1:9f:dd:9b:74:ab:22:75:
13:e6:0c:55:aa:db:55:85:d3:36:1e:d0:8e:ab:5b:
4a:c1:c2:df:24:7a:52:a3:20:c4:43:14:29:c2:42:
61:f0:73:10:b8:19:46:26:2e:7e:cb:5d:1f:02:46:
39:87:21:ee:9a:bb:8b:68:7d:f2:cb:66:8d:d9:26:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AE:56:72:CB:13:C0:37:07:7E:68:C3:D1:E2:AC:9B:93:45:0C:44
X509v3 Authority Key Identifier:
keyid:28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:45:bc:4e:07:9b:aa:89:af:18:df:00:7b:8f:92:e0:a0:7a:
18:f9:4b:6e:03:15:af:91:9a:01:dc:24:11:bf:5a:89:0b:79:
28:8e:8e:a2:5a:62:54:38:55:c9:9a:a7:9d:b8:34:78:d0:7e:
6b:1b:a5:40:66:37:71:44:84:51:74:f7:38:99:82:46:09:fb:
18:9c:74:2e:6a:8c:ac:64:a6:c5:27:b5:28:0b:49:a1:1f:d2:
92:78:4e:b1:10:29:57:65:cb:da:d2:e5:31:f8:73:22:34:0d:
31:1f:fd:ba:8a:72:9b:df:c4:ee:01:d2:e6:1e:79:3e:b9:aa:
82:d8:8c:91:c4:92:b4:04:05:11:ae:d1:8c:75:88:3e:2a:90:
e4:db:bb:2d:c5:93:fe:f2:bc:59:0d:23:ae:66:4f:0f:fe:af:
6b:7a:a2:4a:b5:7b:74:b5:1b:ef:77:f4:d0:28:a5:ea:31:32:
67:ec:ae:5c:42:e3:c4:f6:c1:72:59:d1:90:18:74:30:a4:f8:
f7:e6:2c:05:b9:b5:aa:6c:15:ef:ff:e3:5a:2c:d1:38:33:03:
d2:59:b6:3e:71:32:c9:25:38:32:fc:d8:33:8e:dd:5d:c6:ce:
74:8f:68:b1:e4:bd:fa:7c:bb:09:73:3e:5f:a6:54:97:11:5d:
fa:01:2d:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn61/xzFrq2B5EUBBjLlPsNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4Zjk4MWMyMGFhNjUyYWE4NWUwMDhiZDI2MmY3YmMxZjg1
NmMzNTgwHhcNMjUxMDE5MDUwMTIyWhcNMjUxMDIwMDUwMTIyWjAzMTEwLwYDVQQD
Eyg3OGFlNTY3MmNiMTNjMDM3MDc3ZTY4YzNkMWUyYWM5YjkzNDUwYzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCSxmFfbgvv2TUmPMq1I8K6oFAvI
1SOYbpvmcUoIYaZWxutMJi2/NMdosGHDWmpyrHfMhZUbXJ2kBAnWwHHtuXcRhNKq
gIF9Jc03DINQskXH/QFHcheTRGt/gGMkVPrQfVAL8D/rREih5aLlx65v64tsWvxZ
H2uEWumd7s3PvyDda9edE1WQ8feO4xjSj7naKBZcaxqmbjxzraPgP1R51GySRUuB
81UmqweNr9l7cwIBfMJQqS3C01oUsZ/dm3SrInUT5gxVqttVhdM2HtCOq1tKwcLf
JHpSoyDEQxQpwkJh8HMQuBlGJi5+y10fAkY5hyHumruLaH3yy2aN2SZ3EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiuVnLLE8A3B35ow9HirJuTRQxEMB8GA1UdIwQY
MBaAFCj5gcIKplKqheAIvSYve8H4VsNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1BtQndncW1VcXFGNEFpOUppOTd3ZmhXdzFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zNTJmOWEtNGZkZS00ODRhLWI5MjMt
Yzg3ZmJiZDAzZTg2LzEvS1BtQndncW1VcXFGNEFpOUppOTd3ZmhXdzFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zNTJmOWEtNGZkZS00ODRhLWI5MjMtYzg3ZmJiZDAzZTg2
LzEvS1BtQndncW1VcXFGNEFpOUppOTd3ZmhXdzFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUW8Tgeb
qomvGN8Ae4+S4KB6GPlLbgMVr5GaAdwkEb9aiQt5KI6OolpiVDhVyZqnnbg0eNB+
axulQGY3cUSEUXT3OJmCRgn7GJx0LmqMrGSmxSe1KAtJoR/SknhOsRApV2XL2tLl
MfhzIjQNMR/9uopym9/E7gHS5h55PrmqgtiMkcSStAQFEa7RjHWIPiqQ5Nu7LcWT
/vK8WQ0jrmZPD/6va3qiSrV7dLUb73f00Cil6jEyZ+yuXELjxPbBclnRkBh0MKT4
9+YsBbm1qmwV7//jWizRODMD0lm2PnEyySU4MvzYM47dXcbOdI9oseS9+ny7CXM+
X6ZUlxFd+gEtXQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:18 2025 by rpki-client