Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
File: kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json)
Hash identifier: 4QsIvJI+clZZsJbMlo5nnGEpAI8TXasSiHEO/HWd2Y0=
Subject key identifier: A0:F9:48:A6:2A:00:37:1D:1B:09:B0:72:D2:B5:F9:89:65:4C:E3:C0
Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823
Certificate serial: 0199FBEADC8E9FD5004CD261DF5E6C23877C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:01:37 +0000
Manifest this update: Sun 19 Oct 2025 10:01:37 +0000
Manifest next update: Mon 20 Oct 2025 10:01:37 +0000
Files and hashes: 1: 1pItkF34I0T0XrYWSJRD7pj_ja0.roa (hash: xX/gcWJfZ1minzry/xWMxIOizMCvErT51ZVCYZljegM=)
2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: l1k3wh9WQuQhjANkgxgg26NcqixtPi2JZ1+0ucl0b+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:dc:8e:9f:d5:00:4c:d2:61:df:5e:6c:23:87:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823
Validity
Not Before: Oct 19 10:01:37 2025 GMT
Not After : Oct 20 10:01:37 2025 GMT
Subject: CN=a0f948a62a00371d1b09b072d2b5f989654ce3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:0a:c9:7c:4f:fa:8b:f3:4d:a5:fa:bb:c8:
b6:dd:ae:da:9a:26:0e:9b:c7:26:41:b1:a2:99:37:
38:dd:53:3e:3f:69:02:a8:18:58:72:ff:17:9b:10:
97:4a:2e:71:d9:36:da:13:0e:f4:a7:94:20:9e:86:
e8:23:a3:25:21:8e:05:b3:84:bb:43:d4:fc:0a:e6:
34:d8:ab:5a:61:f2:0a:60:db:87:c1:17:c5:3d:e0:
82:99:6f:f1:4e:c3:13:f8:e1:38:d1:c8:e7:73:a3:
ff:3e:2a:80:eb:fd:27:84:02:f9:d8:71:31:73:6a:
57:12:9d:1c:e4:a9:0c:c9:c8:86:f0:b2:c8:eb:88:
c6:70:b7:ee:35:a4:39:15:02:ef:cf:41:86:d8:88:
65:07:c7:93:93:8e:15:cc:06:d4:90:98:15:99:78:
cf:35:d3:11:94:78:49:fb:92:f4:35:0d:6e:44:80:
50:5f:a9:4b:81:cc:91:65:15:fa:80:d6:70:76:6a:
9f:0e:39:c9:ad:46:b8:21:9a:2a:06:b5:60:1c:dc:
ce:37:77:78:43:8b:3e:74:7f:c8:c5:18:df:d2:a2:
36:cb:3a:7b:be:37:6d:5f:68:e4:50:c7:83:e2:e6:
45:ab:1d:48:d4:0d:70:8b:8b:1a:c1:6c:a0:71:1a:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F9:48:A6:2A:00:37:1D:1B:09:B0:72:D2:B5:F9:89:65:4C:E3:C0
X509v3 Authority Key Identifier:
keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:83:b3:9e:4a:c0:7c:46:16:5f:66:31:0c:14:eb:4e:bd:47:
6e:1d:90:d0:9e:e0:e9:e1:98:3f:c4:ff:2e:8a:bb:f4:4f:76:
19:80:4f:01:8d:50:1e:17:c5:f6:42:d4:08:80:a2:bb:b0:e5:
10:47:64:8f:7a:cc:aa:d3:d3:02:ee:16:2b:b5:c2:f8:bb:14:
5f:0e:e4:4e:d7:00:56:6a:fc:c6:07:d3:a5:4d:16:22:06:b2:
b6:ea:ef:a4:5b:23:de:af:28:8a:5c:e7:aa:63:79:ce:12:f3:
61:bb:34:46:0f:e2:b1:6e:2d:0f:0e:5b:f1:6f:16:61:21:56:
88:01:69:55:6e:03:09:13:d1:42:74:4f:b1:1a:d5:ee:38:45:
b1:4a:6a:05:8d:5f:7a:d5:27:9c:29:12:86:bf:16:fe:22:f2:
d9:3f:29:96:67:84:23:f1:e4:fe:b7:5c:83:44:f8:d1:ac:e7:
de:08:c4:b3:27:b0:71:0f:31:e7:7e:d2:69:53:e0:d6:fe:b4:
6a:a4:be:c6:0c:f6:b8:a1:12:e4:b7:ac:6d:fd:5e:09:d7:e1:
35:3b:71:20:a3:61:67:f8:aa:42:1e:03:5b:94:1b:88:29:ac:
3a:cd:0b:5d:4d:f0:2e:91:ec:e6:76:e4:87:01:57:67:2c:86:
d9:c0:e6:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76tyOn9UATNJh315sI4d8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxODMxNmFiNGVhMTNlYmI1NDU2MGMxYTY3MDQyZDQ3ZTk2
NmQ4MjMwHhcNMjUxMDE5MTAwMTM3WhcNMjUxMDIwMTAwMTM3WjAzMTEwLwYDVQQD
EyhhMGY5NDhhNjJhMDAzNzFkMWIwOWIwNzJkMmI1Zjk4OTY1NGNlM2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql4KyXxP+ovzTaX6u8i23a7amiYO
m8cmQbGimTc43VM+P2kCqBhYcv8XmxCXSi5x2TbaEw70p5QgnoboI6MlIY4Fs4S7
Q9T8CuY02KtaYfIKYNuHwRfFPeCCmW/xTsMT+OE40cjnc6P/PiqA6/0nhAL52HEx
c2pXEp0c5KkMyciG8LLI64jGcLfuNaQ5FQLvz0GG2IhlB8eTk44VzAbUkJgVmXjP
NdMRlHhJ+5L0NQ1uRIBQX6lLgcyRZRX6gNZwdmqfDjnJrUa4IZoqBrVgHNzON3d4
Q4s+dH/IxRjf0qI2yzp7vjdtX2jkUMeD4uZFqx1I1A1wi4sawWygcRpHHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKD5SKYqADcdGwmwctK1+YllTOPAMB8GA1UdIwQY
MBaAFJGDFqtOoT67VFYMGmcELUfpZtgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84OWZiOTktOTA0OS00ODJmLTk1ZGMt
OWUzY2QwZDlkNzdhLzEva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84OWZiOTktOTA0OS00ODJmLTk1ZGMtOWUzY2QwZDlkNzdh
LzEva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuIOznkrA
fEYWX2YxDBTrTr1Hbh2Q0J7g6eGYP8T/Loq79E92GYBPAY1QHhfF9kLUCICiu7Dl
EEdkj3rMqtPTAu4WK7XC+LsUXw7kTtcAVmr8xgfTpU0WIgayturvpFsj3q8oilzn
qmN5zhLzYbs0Rg/isW4tDw5b8W8WYSFWiAFpVW4DCRPRQnRPsRrV7jhFsUpqBY1f
etUnnCkShr8W/iLy2T8plmeEI/Hk/rdcg0T40azn3gjEsyewcQ8x537SaVPg1v60
aqS+xgz2uKES5Lesbf1eCdfhNTtxIKNhZ/iqQh4DW5QbiCmsOs0LXU3wLpHs5nbk
hwFXZyyG2cDm/w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:42 2025 by rpki-client