Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
File: Kw51nA6mfY_3IqrIh8fszs3tPsc.mft (raw, json)
Hash identifier: 4yiREhIBIoEOVmK94b8WnDe3oAskKTG0aYL/zLa9ekw=
Subject key identifier: 53:CD:14:EA:44:BC:7E:AA:1E:8A:D3:1F:50:5C:EE:9D:AD:AB:BA:00
Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
Certificate issuer: /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Certificate serial: 0199FC5826E72E5AC0907AB068A9BC3382B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
Manifest number: 1290
Signing time: Sun 19 Oct 2025 12:00:59 +0000
Manifest this update: Sun 19 Oct 2025 12:00:59 +0000
Manifest next update: Mon 20 Oct 2025 12:00:59 +0000
Files and hashes: 1: Kw51nA6mfY_3IqrIh8fszs3tPsc.crl (hash: U0l5Tb5sC0J/3vxRybQWsdx2z4utNuqY+fpUWlpQYO8=)
2: gK2aqLyacYNLut1v3SVo1JeIzsU.roa (hash: jw6ne3V3i5hc0TYypnVPI2Vg7jRiBa/IR1Y/Jp3Wy/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:26:e7:2e:5a:c0:90:7a:b0:68:a9:bc:33:82:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Validity
Not Before: Oct 19 12:00:59 2025 GMT
Not After : Oct 20 12:00:59 2025 GMT
Subject: CN=53cd14ea44bc7eaa1e8ad31f505cee9dadabba00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:53:c6:1e:62:ce:6c:1c:14:e2:29:d9:33:
de:b3:bf:11:66:37:92:93:07:2f:c3:6e:00:8b:6c:
4b:c9:d4:ab:c5:1b:c8:8c:2f:de:0b:87:15:79:3b:
8a:42:cc:7e:80:9a:d0:74:ef:3a:3e:01:78:84:3f:
f9:43:f0:3f:f8:9c:da:91:84:a1:61:78:00:71:25:
9c:17:b0:fe:c7:9a:51:f3:9c:6f:d7:cf:7e:b3:d1:
bf:b2:3a:4e:e9:61:da:a6:a9:a4:6a:81:34:03:1d:
ff:45:66:bf:f5:6f:5b:91:f9:8e:e9:e8:7f:f8:fe:
6e:9f:b7:e6:1b:96:19:44:fa:ed:f6:b1:70:0a:7a:
61:cb:33:03:05:c7:4c:1f:d2:1f:58:1c:0f:08:b4:
48:b5:cc:58:1f:36:c4:7f:74:e4:55:07:0f:51:3f:
c5:73:8a:8c:ad:45:54:ff:00:37:d4:87:75:4d:a5:
84:cc:65:5a:a4:1c:97:7f:6e:29:ad:fd:e5:4f:97:
a1:2f:00:4e:21:73:ce:63:30:39:14:80:e0:52:66:
f5:ca:cb:b7:a1:a2:78:b0:09:1f:d6:a5:bb:96:5f:
37:10:ba:df:1f:81:e4:35:d3:ac:c3:4a:f6:81:0c:
aa:86:62:a1:f8:3f:bb:68:10:fe:9e:94:0a:d7:77:
a4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CD:14:EA:44:BC:7E:AA:1E:8A:D3:1F:50:5C:EE:9D:AD:AB:BA:00
X509v3 Authority Key Identifier:
keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:42:61:b9:54:ad:26:32:9f:d6:30:b0:cf:8d:00:3b:0e:8f:
6d:ff:dc:54:43:5d:82:85:4e:28:f1:c2:ce:10:44:8f:75:d9:
02:b3:e8:68:f7:61:2a:87:cb:d6:18:bd:5e:77:68:3d:b9:15:
8f:df:73:92:e3:e0:44:7f:86:5d:59:2e:db:78:46:13:7e:e0:
c6:37:f1:29:a6:06:b0:b6:51:56:72:a2:c0:a1:dd:31:dc:ef:
70:73:fc:7f:6d:f1:aa:f7:b8:30:79:57:01:12:7c:11:b2:b0:
6b:b6:b2:51:01:91:b5:8d:8d:85:d1:ba:90:3d:2c:96:08:56:
3e:29:3d:70:0d:ce:4e:af:7a:de:3c:9f:18:31:43:49:66:00:
61:f6:6e:49:e2:0e:c1:00:75:d1:fc:b0:0d:ac:fa:ad:ef:82:
c7:d2:c9:7b:21:0b:f7:fc:23:aa:71:ef:a5:32:a2:7f:83:54:
cd:80:58:45:c8:aa:0e:21:c2:17:c6:fe:5e:90:5c:46:d2:83:
71:96:93:fb:c4:51:5a:8e:a5:e5:f3:2a:58:a4:bc:6d:8b:16:
5f:60:63:35:97:fb:8f:00:de:41:9c:9d:a8:d8:ef:94:46:62:
32:03:d5:a0:23:9a:bc:71:c2:b4:e7:fc:19:cf:5d:e0:af:cf:
e1:0f:b2:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WCbnLlrAkHqwaKm8M4KxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMGU3NTljMGVhNjdkOGZmNzIyYWFjODg3YzdlY2NlY2Rl
ZDNlYzcwHhcNMjUxMDE5MTIwMDU5WhcNMjUxMDIwMTIwMDU5WjAzMTEwLwYDVQQD
Eyg1M2NkMTRlYTQ0YmM3ZWFhMWU4YWQzMWY1MDVjZWU5ZGFkYWJiYTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYRTxh5izmwcFOIp2TPes78RZjeS
kwcvw24Ai2xLydSrxRvIjC/eC4cVeTuKQsx+gJrQdO86PgF4hD/5Q/A/+JzakYSh
YXgAcSWcF7D+x5pR85xv189+s9G/sjpO6WHapqmkaoE0Ax3/RWa/9W9bkfmO6eh/
+P5un7fmG5YZRPrt9rFwCnphyzMDBcdMH9IfWBwPCLRItcxYHzbEf3TkVQcPUT/F
c4qMrUVU/wA31Id1TaWEzGVapByXf24prf3lT5ehLwBOIXPOYzA5FIDgUmb1ysu3
oaJ4sAkf1qW7ll83ELrfH4HkNdOsw0r2gQyqhmKh+D+7aBD+npQK13ekrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPNFOpEvH6qHorTH1Bc7p2tq7oAMB8GA1UdIwQY
MBaAFCsOdZwOpn2P9yKqyIfH7M7N7T7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kNGRiMDMtZThhZC00MDI3LTljZTgt
NTVlMWZmN2YzMmY5LzEvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kNGRiMDMtZThhZC00MDI3LTljZTgtNTVlMWZmN2YzMmY5
LzEvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUJhuVSt
JjKf1jCwz40AOw6Pbf/cVENdgoVOKPHCzhBEj3XZArPoaPdhKofL1hi9XndoPbkV
j99zkuPgRH+GXVku23hGE37gxjfxKaYGsLZRVnKiwKHdMdzvcHP8f23xqve4MHlX
ARJ8EbKwa7ayUQGRtY2NhdG6kD0slghWPik9cA3OTq963jyfGDFDSWYAYfZuSeIO
wQB10fywDaz6re+Cx9LJeyEL9/wjqnHvpTKif4NUzYBYRciqDiHCF8b+XpBcRtKD
cZaT+8RRWo6l5fMqWKS8bYsWX2BjNZf7jwDeQZydqNjvlEZiMgPVoCOavHHCtOf8
Gc9d4K/P4Q+ygw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:03 2025 by rpki-client