Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
File: _KrlFMX5lAORQ1YU15QEvuEgmzs.mft (raw, json)
Hash identifier: l2NT9ot4mSUeR2kuACDwUEO3Ce5bYtG5aYh4o1GCH4A=
Subject key identifier: 9E:E8:BD:61:E7:06:1F:F0:FA:44:78:D0:D7:5A:26:80:6E:24:B8:49
Authority key identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
Certificate issuer: /CN=fcaae514c5f9940391435614d79404bee1209b3b
Certificate serial: 0199FD3487DC791D331093A11AED73DDB327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
Manifest number: 088A
Signing time: Sun 19 Oct 2025 16:01:41 +0000
Manifest this update: Sun 19 Oct 2025 16:01:41 +0000
Manifest next update: Mon 20 Oct 2025 16:01:41 +0000
Files and hashes: 1: _KrlFMX5lAORQ1YU15QEvuEgmzs.crl (hash: 7DSeF/Sc/5v7BzVcuDWVYEPKjMrEbU9b9MZlPgqcEMs=)
2: x6k0RFp7Tx1S2sYvTKRUnwMB54o.roa (hash: Kj0Dd36Z9ZII60RmdvUVufyE+PZ0m6JPvwn/WhUbw7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:87:dc:79:1d:33:10:93:a1:1a:ed:73:dd:b3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcaae514c5f9940391435614d79404bee1209b3b
Validity
Not Before: Oct 19 16:01:41 2025 GMT
Not After : Oct 20 16:01:41 2025 GMT
Subject: CN=9ee8bd61e7061ff0fa4478d0d75a26806e24b849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:18:c3:c7:11:d3:b6:4c:e6:fd:b6:90:13:91:
fe:a5:8d:e6:19:9d:50:f5:eb:5a:6b:f6:64:6e:13:
e0:a3:73:91:02:3a:30:d9:1c:71:94:ad:56:af:e7:
86:68:f3:04:02:f8:a4:08:bb:55:16:b6:77:a6:ab:
85:e2:ff:39:5e:7a:13:90:e3:20:bf:87:90:81:ff:
3c:d2:37:68:9c:70:1c:93:00:e5:67:d6:71:e9:86:
4f:ef:c8:e8:6e:19:39:60:05:10:52:ba:34:15:28:
e8:31:37:12:72:e6:3c:6d:5d:8a:4d:56:b1:ea:b7:
e6:ac:49:09:27:29:52:0f:7c:6f:24:b5:87:73:3c:
e6:46:8c:ce:e4:09:37:3a:7f:ef:76:0a:9b:dc:dd:
79:da:cf:e7:0d:a5:0f:32:88:f5:0d:b4:e3:ce:ce:
47:b4:97:a7:05:3f:1b:b4:da:5e:7e:65:b4:11:a2:
c2:3a:70:46:27:19:5e:17:aa:95:3e:31:1f:3e:12:
93:33:59:ea:bc:8d:00:7d:2f:99:05:32:6e:29:23:
58:7c:c2:f8:60:3d:87:49:5a:5e:85:3f:2d:be:83:
60:f9:97:5d:68:dc:05:40:82:67:b8:c8:db:60:f6:
db:51:c1:21:04:2f:28:93:34:8e:b3:ee:7c:9a:61:
0a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E8:BD:61:E7:06:1F:F0:FA:44:78:D0:D7:5A:26:80:6E:24:B8:49
X509v3 Authority Key Identifier:
keyid:FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c3:9f:0b:ee:99:df:60:e1:ef:65:9b:b5:79:2c:9b:44:76:
4f:94:1c:33:7f:2d:ee:6f:ba:91:00:82:b7:bd:0e:a7:bf:3b:
21:05:bf:bc:14:21:fb:68:a6:f7:bb:6a:94:d1:5f:33:95:b5:
28:42:60:41:aa:29:6c:d9:09:31:53:01:d3:42:55:87:d4:bc:
f3:60:03:a5:de:63:17:0f:16:64:c7:4a:7a:9a:eb:33:fc:62:
db:56:b9:71:cd:65:e3:f2:8e:db:3b:03:1e:00:e2:ef:12:d7:
3c:5e:b6:cd:cf:61:03:dd:f1:23:92:13:56:d6:d9:89:8c:cf:
89:61:6c:24:87:0e:8a:cd:42:71:a1:53:ee:c4:1f:9b:e9:63:
06:9b:2e:60:44:76:d4:4c:37:f8:0b:41:3d:ea:e2:6e:93:92:
f6:80:65:3b:ee:b1:44:e2:ab:64:5d:a0:01:ef:20:4f:85:a8:
b1:4d:35:de:6d:18:5b:12:ca:b2:47:34:ed:db:4f:f7:fa:cd:
4a:35:3d:d8:ea:8a:c5:93:c4:bb:53:62:b2:56:8e:91:d9:fd:
e3:38:bc:29:aa:af:dc:47:3f:41:38:35:64:7a:8e:8e:31:31:
b7:7f:31:a0:76:6b:61:1a:fc:0b:5e:ca:0e:09:86:08:b1:75:
ed:59:67:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NIfceR0zEJOhGu1z3bMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYWFlNTE0YzVmOTk0MDM5MTQzNTYxNGQ3OTQwNGJlZTEy
MDliM2IwHhcNMjUxMDE5MTYwMTQxWhcNMjUxMDIwMTYwMTQxWjAzMTEwLwYDVQQD
Eyg5ZWU4YmQ2MWU3MDYxZmYwZmE0NDc4ZDBkNzVhMjY4MDZlMjRiODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBjDxxHTtkzm/baQE5H+pY3mGZ1Q
9etaa/ZkbhPgo3ORAjow2RxxlK1Wr+eGaPMEAvikCLtVFrZ3pquF4v85XnoTkOMg
v4eQgf880jdonHAckwDlZ9Zx6YZP78jobhk5YAUQUro0FSjoMTcScuY8bV2KTVax
6rfmrEkJJylSD3xvJLWHczzmRozO5Ak3On/vdgqb3N152s/nDaUPMoj1DbTjzs5H
tJenBT8btNpefmW0EaLCOnBGJxleF6qVPjEfPhKTM1nqvI0AfS+ZBTJuKSNYfML4
YD2HSVpehT8tvoNg+ZddaNwFQIJnuMjbYPbbUcEhBC8okzSOs+58mmEK2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7ovWHnBh/w+kR40NdaJoBuJLhJMB8GA1UdIwQY
MBaAFPyq5RTF+ZQDkUNWFNeUBL7hIJs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0tybEZNWDVsQU9SUTFZVTE1UUV2dUVnbXpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81NjJlMWQtOTUyYS00ZmVhLTllNGEt
NjdhOThlMjU2Y2M3LzEvX0tybEZNWDVsQU9SUTFZVTE1UUV2dUVnbXpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy81NjJlMWQtOTUyYS00ZmVhLTllNGEtNjdhOThlMjU2Y2M3
LzEvX0tybEZNWDVsQU9SUTFZVTE1UUV2dUVnbXpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMOfC+6Z
32Dh72WbtXksm0R2T5QcM38t7m+6kQCCt70Op787IQW/vBQh+2im97tqlNFfM5W1
KEJgQaopbNkJMVMB00JVh9S882ADpd5jFw8WZMdKeprrM/xi21a5cc1l4/KO2zsD
HgDi7xLXPF62zc9hA93xI5ITVtbZiYzPiWFsJIcOis1CcaFT7sQfm+ljBpsuYER2
1Ew3+AtBPeribpOS9oBlO+6xROKrZF2gAe8gT4WosU013m0YWxLKskc07dtP9/rN
SjU92OqKxZPEu1NislaOkdn94zi8Kaqv3Ec/QTg1ZHqOjjExt38xoHZrYRr8C17K
DgmGCLF17VlnxQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:50 2025 by rpki-client