Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
File: Kq8k6REaiJ202uCH5ICeEIbjP4I.mft (raw, json)
Hash identifier: ZWawFhwLQEPJs60Ex4sXc55AeTwjbA/NWl0n6P/Q8ug=
Subject key identifier: 52:4B:69:33:7E:62:F3:7A:F7:7C:3A:78:8D:3C:1F:DA:B9:67:57:1E
Authority key identifier: 2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
Certificate issuer: /CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Certificate serial: 0199FE7E00A51703E7DBA4C1CAB4549C47EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
Manifest number: 163F
Signing time: Sun 19 Oct 2025 22:01:34 +0000
Manifest this update: Sun 19 Oct 2025 22:01:34 +0000
Manifest next update: Mon 20 Oct 2025 22:01:34 +0000
Files and hashes: 1: 5sMxgmIczAQ4fn8JJ0_j3DrMjS0.roa (hash: VTfvZnzv8Q2Rd2Q6njhUyXmObqB+4ygm6Iue4TDP3ic=)
2: Kq8k6REaiJ202uCH5ICeEIbjP4I.crl (hash: nLslw3+yzHB8dectgJgIFPB0IOh9+GblEh9OmGBWo5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:00:a5:17:03:e7:db:a4:c1:ca:b4:54:9c:47:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Validity
Not Before: Oct 19 22:01:34 2025 GMT
Not After : Oct 20 22:01:34 2025 GMT
Subject: CN=524b69337e62f37af77c3a788d3c1fdab967571e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:52:4e:15:3c:03:91:8d:64:d0:15:20:21:
dc:56:6e:c6:54:23:93:9b:f7:08:b7:39:c1:54:27:
d1:6f:14:15:89:71:4e:96:05:0b:70:bc:85:ac:6e:
96:e6:5e:1f:5c:5a:37:ce:ed:c8:09:70:53:86:3b:
e1:4f:8a:49:0b:79:27:f2:11:c8:24:f7:fe:4b:aa:
6b:d6:7f:cf:35:1f:11:95:72:61:de:f7:e3:88:08:
56:3e:3c:3a:06:8a:80:a4:f3:23:7b:73:db:b6:c1:
4b:2b:40:a7:9d:77:6d:89:60:49:ec:24:a7:b3:90:
37:03:d3:66:9e:54:9b:2e:21:49:35:1d:ff:32:ab:
1e:e6:57:01:e9:eb:91:f0:ff:b2:76:95:f5:92:ba:
f9:a2:af:92:65:ce:f3:94:20:94:22:7c:98:b7:9e:
29:b1:67:6e:35:b2:80:f8:5c:bc:41:7e:30:fc:a4:
ff:72:67:2e:b7:59:73:5f:85:ee:c7:a2:d3:47:d3:
ae:c1:6a:ec:d9:8d:85:3c:f6:d4:b8:d5:d0:e1:74:
80:6a:6a:a8:6f:13:7c:d0:7e:31:6a:a3:06:69:1e:
f7:e3:57:dc:ea:93:71:30:2b:18:6e:3c:dd:90:ac:
af:b9:f6:6a:3d:b8:6b:88:37:f1:b9:5c:77:f9:1c:
f7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4B:69:33:7E:62:F3:7A:F7:7C:3A:78:8D:3C:1F:DA:B9:67:57:1E
X509v3 Authority Key Identifier:
keyid:2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7f:4b:47:78:96:2d:a5:23:78:c1:4d:a5:10:3f:9d:54:1f:
e3:49:78:b2:0f:54:5d:91:07:74:ec:9d:93:83:be:40:a1:81:
93:05:6e:ae:5a:43:6f:ee:98:f7:ce:1f:87:66:41:db:59:86:
c1:42:e7:09:25:3a:00:d9:4f:83:85:cc:5c:aa:21:2d:c7:f3:
6c:1a:fb:e3:0a:07:30:9e:e1:6c:06:c1:c3:ad:1a:43:ef:5c:
52:5d:bb:50:82:30:28:e8:e4:a9:2f:a2:5f:d8:67:00:45:64:
4a:91:fa:24:da:83:6b:50:71:4a:ae:d9:e5:c1:2a:18:d4:7c:
54:5d:d0:2c:72:cf:09:ea:62:11:56:de:7e:fc:f6:59:48:c5:
c8:01:58:bf:7a:d0:42:5c:32:6f:31:27:70:1d:69:ca:01:3a:
be:ab:18:55:c9:36:ab:fa:b3:d4:87:6a:b5:93:b1:b8:5c:82:
dc:14:3d:50:04:42:9d:ab:85:c4:9e:54:c1:a4:16:b3:73:e7:
0c:ea:ac:01:04:0b:08:ce:84:3d:9f:f6:1f:3b:80:64:9d:33:
8d:b8:56:15:7e:af:18:d6:da:20:0a:77:2b:f8:b9:7c:95:5c:
b7:9a:09:c9:5c:e5:38:d7:39:80:85:6d:07:d3:77:d5:42:d6:
8e:70:e7:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fgClFwPn26TByrRUnEfrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYWYyNGU5MTExYTg4OWRiNGRhZTA4N2U0ODA5ZTEwODZl
MzNmODIwHhcNMjUxMDE5MjIwMTM0WhcNMjUxMDIwMjIwMTM0WjAzMTEwLwYDVQQD
Eyg1MjRiNjkzMzdlNjJmMzdhZjc3YzNhNzg4ZDNjMWZkYWI5Njc1NzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz21SThU8A5GNZNAVICHcVm7GVCOT
m/cItznBVCfRbxQViXFOlgULcLyFrG6W5l4fXFo3zu3ICXBThjvhT4pJC3kn8hHI
JPf+S6pr1n/PNR8RlXJh3vfjiAhWPjw6BoqApPMje3PbtsFLK0CnnXdtiWBJ7CSn
s5A3A9NmnlSbLiFJNR3/Mqse5lcB6euR8P+ydpX1krr5oq+SZc7zlCCUInyYt54p
sWduNbKA+Fy8QX4w/KT/cmcut1lzX4Xux6LTR9OuwWrs2Y2FPPbUuNXQ4XSAamqo
bxN80H4xaqMGaR7341fc6pNxMCsYbjzdkKyvufZqPbhriDfxuVx3+Rz34QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJLaTN+YvN693w6eI08H9q5Z1ceMB8GA1UdIwQY
MBaAFCqvJOkRGoidtNrgh+SAnhCG4z+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3E4azZSRWFpSjIwMnVDSDVJQ2VFSWJqUDRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jODA4OTYtYzM2ZS00NjI3LTgzNTMt
MzQxYzNmYTQ1YjQzLzEvS3E4azZSRWFpSjIwMnVDSDVJQ2VFSWJqUDRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jODA4OTYtYzM2ZS00NjI3LTgzNTMtMzQxYzNmYTQ1YjQz
LzEvS3E4azZSRWFpSjIwMnVDSDVJQ2VFSWJqUDRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVX9LR3iW
LaUjeMFNpRA/nVQf40l4sg9UXZEHdOydk4O+QKGBkwVurlpDb+6Y984fh2ZB21mG
wULnCSU6ANlPg4XMXKohLcfzbBr74woHMJ7hbAbBw60aQ+9cUl27UIIwKOjkqS+i
X9hnAEVkSpH6JNqDa1BxSq7Z5cEqGNR8VF3QLHLPCepiEVbefvz2WUjFyAFYv3rQ
QlwybzEncB1pygE6vqsYVck2q/qz1IdqtZOxuFyC3BQ9UARCnauFxJ5UwaQWs3Pn
DOqsAQQLCM6EPZ/2HzuAZJ0zjbhWFX6vGNbaIAp3K/i5fJVct5oJyVzlONc5gIVt
B9N31ULWjnDn7Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:31:16 2025 by rpki-client