Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
File: KH4cl_cfNVhn4_uHfyGqUTC2z10.mft (raw, json)
Hash identifier: pI12dRXCUMNo2Q2jDtaSONYOEul9DxdRHWoaNe6zt40=
Subject key identifier: 8B:CD:C6:47:2D:F2:4A:8C:8E:88:08:99:17:6A:AE:27:13:29:B4:D8
Authority key identifier: 28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
Certificate issuer: /CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Certificate serial: 0199FF594B86182EFF9B6081D6973D1516F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
Manifest number: 0B2F
Signing time: Mon 20 Oct 2025 02:01:06 +0000
Manifest this update: Mon 20 Oct 2025 02:01:06 +0000
Manifest next update: Tue 21 Oct 2025 02:01:06 +0000
Files and hashes: 1: 1gJl5QGcLnfhKR4ZX5vkhukZyTU.roa (hash: NMFFqW5s2zQQWT6VrzvJinnOwTRcu4h6yTFNCCxpjXA=)
2: HlpYPKfUTSJ7pDq2oQziu1OJN70.roa (hash: 2/lnsP1apTOPlsNH0YhFprUwFbQM2G9j3yZLF5vZFt4=)
3: KH4cl_cfNVhn4_uHfyGqUTC2z10.crl (hash: CIyKjChibHaM6TPMN4a6knZDdAGDRP0nMo1A/4UORxI=)
4: n82Q14Y2YDik1JFdwsQlLlmUXCU.roa (hash: Pqu0KJ3PErrtF3waClxiFcaMqimhO+E9Mo28nI/aapw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:4b:86:18:2e:ff:9b:60:81:d6:97:3d:15:16:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Validity
Not Before: Oct 20 02:01:06 2025 GMT
Not After : Oct 21 02:01:06 2025 GMT
Subject: CN=8bcdc6472df24a8c8e880899176aae271329b4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:86:37:4b:24:99:04:37:6e:c2:6d:39:99:
9f:20:52:b5:91:85:7b:ad:f2:2d:fb:19:e5:6d:ec:
56:3d:23:0a:d0:35:9e:d0:a3:f4:21:54:37:96:0d:
67:26:b6:3e:d3:6a:fc:44:bd:86:e2:17:a9:04:2a:
2e:fa:ae:29:69:aa:61:76:8f:6f:81:24:6c:c4:96:
90:b3:cb:3c:fe:c5:a3:54:82:9a:3a:7c:1e:46:b7:
d2:51:c6:c6:d5:1b:e7:1d:be:a3:7d:30:17:c8:7d:
92:70:74:50:a0:af:36:8a:b2:05:e1:98:33:ff:5c:
f3:40:fb:76:6b:6d:67:e2:a1:d7:2c:c1:b1:87:fd:
3f:1b:1c:65:72:93:ed:b0:27:27:9d:1b:cb:0b:9b:
d9:ea:42:0f:91:63:4c:2a:0e:4a:23:24:27:92:85:
c3:d3:81:b8:15:bc:bd:3c:ed:26:3a:e0:ac:d8:80:
f0:98:df:a8:62:1a:3a:a6:6a:97:9a:eb:68:dc:83:
34:4a:a5:06:4f:64:71:68:e5:d9:7b:dc:c0:a9:de:
1e:27:df:07:2d:d7:be:54:ac:b4:31:e1:ae:23:d2:
67:95:ab:b8:b8:29:3b:ea:0b:26:15:b2:0f:28:3e:
a1:94:12:fc:6d:10:dc:ee:5f:9d:0c:5e:b1:19:93:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CD:C6:47:2D:F2:4A:8C:8E:88:08:99:17:6A:AE:27:13:29:B4:D8
X509v3 Authority Key Identifier:
keyid:28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:30:df:4a:8f:38:09:d2:8b:e3:b8:29:43:fe:2f:5c:b2:a8:
4d:9a:41:95:46:65:ad:0f:53:34:da:5d:c6:fd:6e:3a:2e:c3:
05:85:ab:fa:ea:7a:72:9a:36:3d:92:1c:f2:40:6f:4d:07:e9:
2c:89:6d:7b:7a:89:5d:42:ac:9f:ac:97:44:90:68:50:aa:9a:
55:68:03:89:94:94:3b:3d:6e:36:96:4f:e9:96:8e:2a:03:84:
f0:41:6f:f9:40:a8:c0:c2:00:da:ae:13:dd:2d:bb:12:0b:6c:
d1:ee:21:a1:4e:6f:97:1c:43:bd:8e:e7:34:fc:47:17:11:f9:
39:98:a6:40:16:fe:5f:87:4f:ae:1c:5f:75:03:df:bc:72:14:
00:33:b5:02:5b:2e:a4:ef:7f:a0:18:65:6a:16:51:ed:17:dc:
37:d0:3c:52:d9:d2:a0:2b:c4:7a:73:ed:dc:bb:18:08:58:81:
d5:ae:8e:02:04:1a:8f:d9:fe:ce:df:bb:3a:1c:3f:09:4c:14:
32:7f:dd:37:8d:3e:49:83:6d:32:48:29:0f:94:50:cf:7b:b5:
f3:ac:03:93:55:5b:a7:7e:b6:cf:de:bd:9b:32:c9:e5:60:aa:
c0:78:87:1b:11:17:4d:c7:39:21:86:3b:a4:82:7a:a0:a9:40:
88:c8:4f:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WUuGGC7/m2CB1pc9FRb5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4N2UxYzk3ZjcxZjM1NTg2N2UzZmI4NzdmMjFhYTUxMzBi
NmNmNWQwHhcNMjUxMDIwMDIwMTA2WhcNMjUxMDIxMDIwMTA2WjAzMTEwLwYDVQQD
Eyg4YmNkYzY0NzJkZjI0YThjOGU4ODA4OTkxNzZhYWUyNzEzMjliNGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCGGN0skmQQ3bsJtOZmfIFK1kYV7
rfIt+xnlbexWPSMK0DWe0KP0IVQ3lg1nJrY+02r8RL2G4hepBCou+q4paaphdo9v
gSRsxJaQs8s8/sWjVIKaOnweRrfSUcbG1RvnHb6jfTAXyH2ScHRQoK82irIF4Zgz
/1zzQPt2a21n4qHXLMGxh/0/GxxlcpPtsCcnnRvLC5vZ6kIPkWNMKg5KIyQnkoXD
04G4Fby9PO0mOuCs2IDwmN+oYho6pmqXmuto3IM0SqUGT2RxaOXZe9zAqd4eJ98H
Lde+VKy0MeGuI9Jnlau4uCk76gsmFbIPKD6hlBL8bRDc7l+dDF6xGZOMQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvNxkct8kqMjogImRdqricTKbTYMB8GA1UdIwQY
MBaAFCh+HJf3HzVYZ+P7h38hqlEwts9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0g0Y2xfY2ZOVmhuNF91SGZ5R3FVVEMyejEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hZjE2MWItZWY1MS00NGJkLThlMGEt
OWViM2M2ODJiMDA5LzEvS0g0Y2xfY2ZOVmhuNF91SGZ5R3FVVEMyejEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hZjE2MWItZWY1MS00NGJkLThlMGEtOWViM2M2ODJiMDA5
LzEvS0g0Y2xfY2ZOVmhuNF91SGZ5R3FVVEMyejEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtDDfSo84
CdKL47gpQ/4vXLKoTZpBlUZlrQ9TNNpdxv1uOi7DBYWr+up6cpo2PZIc8kBvTQfp
LIlte3qJXUKsn6yXRJBoUKqaVWgDiZSUOz1uNpZP6ZaOKgOE8EFv+UCowMIA2q4T
3S27Egts0e4hoU5vlxxDvY7nNPxHFxH5OZimQBb+X4dPrhxfdQPfvHIUADO1Alsu
pO9/oBhlahZR7RfcN9A8UtnSoCvEenPt3LsYCFiB1a6OAgQaj9n+zt+7Ohw/CUwU
Mn/dN40+SYNtMkgpD5RQz3u186wDk1Vbp362z969mzLJ5WCqwHiHGxEXTcc5IYY7
pIJ6oKlAiMhPvw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:25:26 2025 by rpki-client