Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: O8AQGCLs/wUT9RmZ1d+s3sPVqb8aC92WLFjZ7iTuCqI=
Subject key identifier: 55:A6:86:19:CE:AB:F8:5D:62:08:D2:93:71:29:1A:63:DD:69:7A:2D
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 0199FBEB8D81C24B410DC8DB16AA703EE31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 116D
Signing time: Sun 19 Oct 2025 10:02:22 +0000
Manifest this update: Sun 19 Oct 2025 10:02:22 +0000
Manifest next update: Mon 20 Oct 2025 10:02:22 +0000
Files and hashes: 1: CJLUw4mYIg1UnnSDFK1Ml0o--zU.roa (hash: Tsn7ljuanQRqC13NxQKS7gSB56PsLYk7GAqdYRh4Uz0=)
2: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: HMsjrsu1aun4cqmRGy7l9EiVK07zopDsCd8JRArikac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8d:81:c2:4b:41:0d:c8:db:16:aa:70:3e:e3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Oct 19 10:02:22 2025 GMT
Not After : Oct 20 10:02:22 2025 GMT
Subject: CN=55a68619ceabf85d6208d29371291a63dd697a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1b:6d:de:9d:74:12:83:70:89:b8:7e:ca:b4:
75:2e:17:c8:bf:67:2d:3c:f0:bd:ce:02:51:ef:9b:
47:9b:06:85:4c:2d:8d:74:70:6a:fc:01:3c:c3:40:
c4:30:4a:84:99:69:38:2f:3a:f1:a6:b5:86:12:27:
63:52:07:61:6f:2f:1e:01:e3:10:e7:a3:f5:ee:71:
92:90:f1:36:e6:20:6a:91:4d:c7:fa:57:57:26:da:
74:12:5f:11:69:f3:95:0d:a6:0a:92:d7:57:29:ba:
92:0e:8e:20:e8:ff:f3:2d:b6:7a:2e:83:fb:67:ab:
f2:4c:75:e9:5e:44:6e:bb:ba:ab:81:e8:05:ca:5e:
6a:55:f4:8b:34:1f:1e:a9:16:88:f9:cc:ce:c3:ee:
ed:02:52:9b:25:55:a0:9f:66:75:97:54:83:6b:bd:
7f:85:27:72:6a:0e:2f:5f:c3:20:fb:71:c8:e7:ce:
59:ba:53:97:d1:d8:0f:00:33:aa:ca:04:e7:9f:77:
50:e3:17:61:0f:37:34:cb:e4:62:41:e9:4c:30:f4:
80:3b:9b:c4:75:6a:a0:8e:f9:ee:53:59:2c:d2:1a:
d3:58:3e:a0:46:f8:1a:e0:61:57:b4:0f:3a:33:25:
f6:2c:47:78:59:d6:59:13:f4:5f:9b:d7:93:92:dc:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A6:86:19:CE:AB:F8:5D:62:08:D2:93:71:29:1A:63:DD:69:7A:2D
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0e:b6:86:ba:94:2e:5f:60:f0:65:fb:eb:5b:04:18:5e:e6:
c4:54:9a:46:63:40:f0:0e:62:32:46:e8:37:68:b8:7b:4c:03:
65:80:24:11:0f:b8:78:37:fb:37:2c:52:0d:44:d3:9a:65:d8:
7d:92:ac:0b:89:c4:cb:47:95:b8:c3:e7:5f:0a:21:14:cd:a3:
d2:b0:79:20:9b:35:b6:26:c8:94:90:42:cf:9e:e2:fb:4e:c8:
a6:8e:46:f3:0d:ad:c2:84:89:06:e4:87:6e:25:d5:56:cc:6e:
a1:8b:db:a9:78:07:24:9c:1e:97:a7:4d:b5:59:c5:9f:81:79:
f7:b8:b8:a8:8e:36:f5:03:b8:0a:bc:f8:63:23:97:9c:84:53:
01:d8:f4:fc:87:31:eb:5b:d7:b1:0c:af:89:df:2d:bc:7e:9a:
2f:aa:ec:68:fe:a0:d2:4d:c6:a0:ac:0b:79:1b:aa:5c:ae:4a:
78:af:9d:8d:cb:49:6c:14:e6:dc:f6:5d:75:c0:e3:e3:29:94:
f9:95:55:df:7c:76:4e:7d:f5:62:c3:5e:cd:e1:e4:d5:31:61:
29:29:13:e2:b9:d2:7b:3d:6a:00:18:e5:ba:69:24:17:14:c4:
e5:ef:44:07:3c:8e:0e:2f:cc:77:da:05:ff:d6:ac:eb:12:16:
00:41:06:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7642BwktBDcjbFqpwPuMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MTk0NjE4NDQ1NDk4MjQ1MDBiN2NkMWM0NTFkODI0YmE2
ZTU2NzcwHhcNMjUxMDE5MTAwMjIyWhcNMjUxMDIwMTAwMjIyWjAzMTEwLwYDVQQD
Eyg1NWE2ODYxOWNlYWJmODVkNjIwOGQyOTM3MTI5MWE2M2RkNjk3YTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBtt3p10EoNwibh+yrR1LhfIv2ct
PPC9zgJR75tHmwaFTC2NdHBq/AE8w0DEMEqEmWk4LzrxprWGEidjUgdhby8eAeMQ
56P17nGSkPE25iBqkU3H+ldXJtp0El8RafOVDaYKktdXKbqSDo4g6P/zLbZ6LoP7
Z6vyTHXpXkRuu7qrgegFyl5qVfSLNB8eqRaI+czOw+7tAlKbJVWgn2Z1l1SDa71/
hSdyag4vX8Mg+3HI585ZulOX0dgPADOqygTnn3dQ4xdhDzc0y+RiQelMMPSAO5vE
dWqgjvnuU1ks0hrTWD6gRvga4GFXtA86MyX2LEd4WdZZE/Rfm9eTkty94QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWmhhnOq/hdYgjSk3EpGmPdaXotMB8GA1UdIwQY
MBaAFCkZRhhEVJgkUAt80cRR2CS6blZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kOGM2ZjItNDE5MS00NmU2LThkYjYt
YjZlYTgyZjE5MjIwLzEvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kOGM2ZjItNDE5MS00NmU2LThkYjYtYjZlYTgyZjE5MjIw
LzEvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARw62hrqU
Ll9g8GX761sEGF7mxFSaRmNA8A5iMkboN2i4e0wDZYAkEQ+4eDf7NyxSDUTTmmXY
fZKsC4nEy0eVuMPnXwohFM2j0rB5IJs1tibIlJBCz57i+07Ipo5G8w2twoSJBuSH
biXVVsxuoYvbqXgHJJwel6dNtVnFn4F597i4qI429QO4Crz4YyOXnIRTAdj0/Icx
61vXsQyvid8tvH6aL6rsaP6g0k3GoKwLeRuqXK5KeK+djctJbBTm3PZddcDj4ymU
+ZVV33x2Tn31YsNezeHk1TFhKSkT4rnSez1qABjlumkkFxTE5e9EBzyODi/Md9oF
/9as6xIWAEEG9g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:39 2025 by rpki-client