Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: gHxsUBe/1sMN7cLVtI/Iwy4jdnRzuqPcmhN7bgCMaIo=
Subject key identifier: 1C:82:3E:27:E0:00:EE:24:60:FF:B9:B1:2D:02:98:6D:91:57:3A:9C
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 0199FC58DDCE2D5C70B5DE9BDC267EB690E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 063D
Signing time: Sun 19 Oct 2025 12:01:46 +0000
Manifest this update: Sun 19 Oct 2025 12:01:46 +0000
Manifest next update: Mon 20 Oct 2025 12:01:46 +0000
Files and hashes: 1: BEBiIFhite7xZ0bNEP-JA8QrqMg.roa (hash: QbnrrPHP3fwKy8016pI0qpDqUM0JJdXwZKXHEa0y/SQ=)
2: LARL1hIKcaD4vW3zR5MLoEhaFxc.roa (hash: b6NkmGlDSYN3he0zDu5SwrD1JA7+YMRtU9hknGZasjA=)
3: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: 2H0Tx2wSwmPcDM9KrFv0Io6+NlOcMFdGdSg4Unyox4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:dd:ce:2d:5c:70:b5:de:9b:dc:26:7e:b6:90:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Oct 19 12:01:46 2025 GMT
Not After : Oct 20 12:01:46 2025 GMT
Subject: CN=1c823e27e000ee2460ffb9b12d02986d91573a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:a7:fb:87:df:1e:12:21:c2:45:4c:f4:0c:
ad:cb:eb:62:7f:97:4f:2c:27:79:63:f8:46:56:6e:
7c:59:40:2f:0f:c5:cd:6d:5f:b3:ef:b8:97:f4:d6:
73:ab:1b:3e:0d:7f:f8:20:02:f2:1f:32:1f:49:37:
b2:b6:ca:8d:d9:97:81:47:b5:ea:43:91:7c:b0:cd:
95:33:1a:6c:78:1e:3b:d2:5c:d0:99:be:45:7f:fd:
c2:c8:d0:6a:20:13:71:62:43:0b:b2:fb:01:d7:a4:
aa:54:23:65:40:60:f9:a5:df:ac:42:20:c9:c8:64:
cd:56:38:11:1b:b5:4c:5c:a0:00:a8:71:9a:20:6c:
31:03:97:4d:8b:72:2d:6e:87:0e:0d:f1:cb:83:9d:
60:43:1e:53:29:5e:1a:4e:02:b6:39:42:e6:ed:e4:
51:14:78:fe:37:f3:58:de:cf:70:0b:53:5c:4a:02:
c1:22:96:70:c6:cf:75:ca:8b:c8:ab:b7:3c:df:64:
9e:dc:9f:f2:b3:de:eb:4e:c0:72:60:21:f3:88:74:
4f:9e:09:59:e7:d0:08:dd:c9:2a:46:05:8a:73:7e:
44:4e:f2:0b:65:f4:01:e2:c3:d1:a2:f4:d7:0b:38:
95:21:36:c9:0b:68:06:83:2b:b2:3a:35:14:4b:08:
56:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:82:3E:27:E0:00:EE:24:60:FF:B9:B1:2D:02:98:6D:91:57:3A:9C
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:27:03:cf:87:8e:ba:4e:d3:6c:e2:22:60:fb:71:d1:1d:03:
04:44:a4:09:24:6f:cb:27:67:48:b4:27:34:71:f1:08:4f:8d:
ce:c4:b3:5b:ce:9d:a0:35:a5:4f:91:7b:84:68:88:d6:65:d4:
e3:43:b1:a0:34:7d:e7:f9:f0:ad:cc:e7:89:53:47:12:3d:87:
3e:f7:5c:24:d3:7f:d8:5e:30:aa:3e:65:c7:79:52:19:92:2d:
0f:c7:8a:9b:11:f2:d1:35:b0:4d:fc:9a:7f:11:71:27:34:70:
d3:ef:8d:67:ec:e5:18:cd:69:39:98:1a:82:82:77:da:56:55:
59:60:d3:c5:6f:34:0c:a7:ad:24:4f:23:f9:4d:a6:e8:d4:08:
dd:03:bd:a2:cc:62:46:4f:82:5f:e0:de:5b:72:0f:e5:19:4e:
f2:aa:a9:e0:72:14:a8:a9:85:4b:50:bc:91:24:23:09:34:67:
4b:84:41:0e:82:02:c6:90:25:0f:ed:3d:27:27:a0:76:ee:2d:
94:7f:86:d6:f6:f6:49:6c:63:dc:4b:42:2d:32:95:42:9e:5f:
90:64:1e:fd:7e:ba:6a:d5:63:3c:46:cf:d7:c9:43:0e:1e:3c:
db:be:e5:13:b0:34:80:69:d3:db:8c:85:c3:31:a9:05:6f:65:
c9:2a:29:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WN3OLVxwtd6b3CZ+tpDiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDkwODlhOGUzMjhkMzJkNmRlMTZkN2RhMjU3YjgxMWIw
NTIzOWQwHhcNMjUxMDE5MTIwMTQ2WhcNMjUxMDIwMTIwMTQ2WjAzMTEwLwYDVQQD
EygxYzgyM2UyN2UwMDBlZTI0NjBmZmI5YjEyZDAyOTg2ZDkxNTczYTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukan+4ffHhIhwkVM9Ayty+tif5dP
LCd5Y/hGVm58WUAvD8XNbV+z77iX9NZzqxs+DX/4IALyHzIfSTeytsqN2ZeBR7Xq
Q5F8sM2VMxpseB470lzQmb5Ff/3CyNBqIBNxYkMLsvsB16SqVCNlQGD5pd+sQiDJ
yGTNVjgRG7VMXKAAqHGaIGwxA5dNi3ItbocODfHLg51gQx5TKV4aTgK2OULm7eRR
FHj+N/NY3s9wC1NcSgLBIpZwxs91yovIq7c832Se3J/ys97rTsByYCHziHRPnglZ
59AI3ckqRgWKc35ETvILZfQB4sPRovTXCziVITbJC2gGgyuyOjUUSwhWtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByCPifgAO4kYP+5sS0CmG2RVzqcMB8GA1UdIwQY
MBaAFJLZCJqOMo0y1t4W19ole4EbBSOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80MzE2MzQtMzVjYi00NTQ1LTg3N2It
ZGYzYzA3ZjM0MTFlLzEva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80MzE2MzQtMzVjYi00NTQ1LTg3N2ItZGYzYzA3ZjM0MTFl
LzEva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCcDz4eO
uk7TbOIiYPtx0R0DBESkCSRvyydnSLQnNHHxCE+NzsSzW86doDWlT5F7hGiI1mXU
40OxoDR95/nwrczniVNHEj2HPvdcJNN/2F4wqj5lx3lSGZItD8eKmxHy0TWwTfya
fxFxJzRw0++NZ+zlGM1pOZgagoJ32lZVWWDTxW80DKetJE8j+U2m6NQI3QO9osxi
Rk+CX+DeW3IP5RlO8qqp4HIUqKmFS1C8kSQjCTRnS4RBDoICxpAlD+09Jyegdu4t
lH+G1vb2SWxj3EtCLTKVQp5fkGQe/X66atVjPEbP18lDDh48277lE7A0gGnT24yF
wzGpBW9lySopDQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:52 2025 by rpki-client