Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
File: kO4Jv_TXomLQaTBzsll1WOSAdRg.mft (raw, json)
Hash identifier: lxV4O8CSKkkL9HOlG/qSYrPCzNPCH+iStquGR/NMRuE=
Subject key identifier: 93:8F:B9:7C:73:2F:13:29:BA:95:01:CD:65:86:0C:C3:6C:4C:A6:9F
Authority key identifier: 90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
Certificate issuer: /CN=90ee09bff4d7a262d0693073b2597558e4807518
Certificate serial: 0199FB460FA3D7292E911E2003DEEE541DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
Manifest number: 166F
Signing time: Sun 19 Oct 2025 07:01:36 +0000
Manifest this update: Sun 19 Oct 2025 07:01:36 +0000
Manifest next update: Mon 20 Oct 2025 07:01:36 +0000
Files and hashes: 1: kO4Jv_TXomLQaTBzsll1WOSAdRg.crl (hash: ssip+ehjornxOHw1mqjyMBPHU8UX0IDKT0ao50BHa0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:0f:a3:d7:29:2e:91:1e:20:03:de:ee:54:1d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ee09bff4d7a262d0693073b2597558e4807518
Validity
Not Before: Oct 19 07:01:36 2025 GMT
Not After : Oct 20 07:01:36 2025 GMT
Subject: CN=938fb97c732f1329ba9501cd65860cc36c4ca69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:57:25:79:3d:fe:d4:11:fe:d8:91:e3:a1:
2c:ff:51:e9:a7:ea:6e:b3:58:1a:0d:88:2a:05:61:
78:39:d5:b5:6f:ac:ae:6b:6d:1f:fd:d3:6a:6a:1e:
36:5c:22:59:37:ef:c2:35:cf:9f:e6:d3:f8:ae:62:
e1:5a:6d:6b:0d:18:96:8f:00:85:c8:c5:18:20:67:
4a:f7:4e:c9:c2:ee:c5:34:87:e5:d1:d3:93:28:8c:
15:48:bf:64:c2:ad:53:0e:20:d0:86:d7:d4:83:f9:
1a:32:52:2d:60:72:8e:f4:e9:6e:8a:a0:b9:5c:f7:
af:16:bf:51:ea:cd:d7:f1:15:97:b7:b6:50:85:50:
e0:69:a0:d9:76:80:09:19:62:7e:18:61:3e:14:2b:
b0:a7:fa:58:6e:87:0d:b1:f7:a6:d6:e9:db:08:1c:
e3:0f:7e:6d:8f:48:eb:7e:83:52:c2:a7:3c:be:27:
cc:8f:2f:ad:78:c9:f8:cd:97:fd:f7:88:95:24:c7:
ce:63:2b:cd:69:60:71:7f:d5:c7:c7:0d:3b:06:e4:
eb:31:84:5e:83:a2:ed:ca:74:8a:fb:c9:59:b1:5a:
89:3a:d4:aa:3e:10:b3:6c:80:86:ef:08:fa:46:ae:
fc:b6:b3:7d:be:73:20:00:c0:c3:6c:db:8e:0a:c9:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8F:B9:7C:73:2F:13:29:BA:95:01:CD:65:86:0C:C3:6C:4C:A6:9F
X509v3 Authority Key Identifier:
keyid:90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:19:56:6e:19:06:e5:8c:98:f2:3f:81:32:ec:f6:9d:e4:a1:
12:f3:67:03:c7:5a:df:b1:e7:3e:90:3c:e8:62:0f:57:5e:69:
3b:99:c5:6f:34:08:b3:d6:dd:d1:83:e2:39:dc:77:8b:53:9a:
2b:45:36:12:02:79:cd:c4:50:17:00:1d:e2:26:04:28:b3:e3:
b1:83:a9:23:c9:6e:60:91:47:89:eb:b9:47:a7:fd:fe:92:07:
33:43:41:d6:8f:e7:2a:7d:93:81:06:ea:83:d9:90:7e:28:71:
02:4f:6c:6a:71:8c:0e:da:97:06:bb:19:f0:c7:a0:b5:f7:a4:
2a:e1:4f:19:7e:e2:76:28:71:ed:7f:1c:4b:43:c6:76:5f:90:
33:cf:57:c7:e0:e8:68:65:97:20:d3:eb:3b:33:7c:cd:9e:85:
c2:09:d2:39:07:5f:2f:f8:aa:be:04:e6:eb:f9:e5:ae:f0:62:
64:ec:85:fb:5e:86:cc:df:91:ac:4f:41:d0:a6:c1:40:45:0c:
e4:ab:63:8c:f7:de:77:b9:ba:cf:6c:c3:9a:9b:15:31:c3:39:
9b:0b:5e:6a:4e:64:97:6c:3d:c4:b7:c3:ba:b6:46:f3:82:c7:
2a:c5:c7:7b:9d:32:29:72:78:c5:cf:af:ab:01:ad:7e:e3:f9:
06:61:e8:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rg+j1ykukR4gA97uVB3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZWUwOWJmZjRkN2EyNjJkMDY5MzA3M2IyNTk3NTU4ZTQ4
MDc1MTgwHhcNMjUxMDE5MDcwMTM2WhcNMjUxMDIwMDcwMTM2WjAzMTEwLwYDVQQD
Eyg5MzhmYjk3YzczMmYxMzI5YmE5NTAxY2Q2NTg2MGNjMzZjNGNhNjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMVXJXk9/tQR/tiR46Es/1Hpp+pu
s1gaDYgqBWF4OdW1b6yua20f/dNqah42XCJZN+/CNc+f5tP4rmLhWm1rDRiWjwCF
yMUYIGdK907Jwu7FNIfl0dOTKIwVSL9kwq1TDiDQhtfUg/kaMlItYHKO9OluiqC5
XPevFr9R6s3X8RWXt7ZQhVDgaaDZdoAJGWJ+GGE+FCuwp/pYbocNsfem1unbCBzj
D35tj0jrfoNSwqc8vifMjy+teMn4zZf994iVJMfOYyvNaWBxf9XHxw07BuTrMYRe
g6LtynSK+8lZsVqJOtSqPhCzbICG7wj6Rq78trN9vnMgAMDDbNuOCskAlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOPuXxzLxMpupUBzWWGDMNsTKafMB8GA1UdIwQY
MBaAFJDuCb/016Ji0Gkwc7JZdVjkgHUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mM2NiNzItNGU1YS00ZmJiLTgxZGQt
ZjhkYzk1MzUwYjg1LzEva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mM2NiNzItNGU1YS00ZmJiLTgxZGQtZjhkYzk1MzUwYjg1
LzEva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxlWbhkG
5YyY8j+BMuz2neShEvNnA8da37HnPpA86GIPV15pO5nFbzQIs9bd0YPiOdx3i1Oa
K0U2EgJ5zcRQFwAd4iYEKLPjsYOpI8luYJFHieu5R6f9/pIHM0NB1o/nKn2TgQbq
g9mQfihxAk9sanGMDtqXBrsZ8MegtfekKuFPGX7idihx7X8cS0PGdl+QM89Xx+Do
aGWXINPrOzN8zZ6FwgnSOQdfL/iqvgTm6/nlrvBiZOyF+16GzN+RrE9B0KbBQEUM
5KtjjPfed7m6z2zDmpsVMcM5mwteak5kl2w9xLfDurZG84LHKsXHe50yKXJ4xc+v
qwGtfuP5BmHoOA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:17 2025 by rpki-client