Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
File: KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft (raw, json)
Hash identifier: HTsKozpDOzPnf7pYf053nP5Rq3yBDmnB+azfHy4w+GM=
Subject key identifier: 35:64:78:93:17:8E:78:E6:4F:26:4F:28:CC:71:D8:F0:6D:E8:55:94
Authority key identifier: 29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
Certificate issuer: /CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Certificate serial: 0199FF2260A7051849B13B6F67358ADA3F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
Manifest number: 1419
Signing time: Mon 20 Oct 2025 01:01:06 +0000
Manifest this update: Mon 20 Oct 2025 01:01:06 +0000
Manifest next update: Tue 21 Oct 2025 01:01:06 +0000
Files and hashes: 1: KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl (hash: AI31QklwMoeCC29Cnv6IfvKpEgsDzz2uXQEczJa34J8=)
2: Lc2MOeHrhJYACH3DTtJSFK-up5U.roa (hash: jsqmE6guApHIEUr5xOYbDvIqn7++Rg1hChyQTZ/F2xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:60:a7:05:18:49:b1:3b:6f:67:35:8a:da:3f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Validity
Not Before: Oct 20 01:01:06 2025 GMT
Not After : Oct 21 01:01:06 2025 GMT
Subject: CN=35647893178e78e64f264f28cc71d8f06de85594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:10:e5:00:2a:f1:88:98:14:55:78:85:9a:05:
c7:fb:2c:82:c2:02:13:0b:90:48:3e:97:60:0f:0c:
c1:18:a8:ea:f0:f1:5b:2c:a9:46:bc:0a:ab:6f:f4:
b7:0c:a8:91:ad:ef:54:f5:12:f7:37:83:a4:c5:55:
b2:62:7a:e3:5e:e2:d2:5c:7a:9f:71:36:69:97:bd:
58:dc:d8:db:f8:ef:03:4d:53:83:47:f5:b0:6e:a6:
60:36:0b:35:b9:1f:be:69:53:b0:95:45:4b:94:f0:
45:95:dd:98:81:ab:46:cb:6c:eb:87:af:b2:35:f7:
3c:98:d0:13:83:cb:0c:2a:bb:9a:59:a1:ed:be:bb:
33:19:b2:f2:44:d2:d2:d9:b3:bc:ab:43:3c:5f:3b:
ad:91:ad:d8:5e:4b:80:fe:11:fe:37:51:58:79:a0:
bb:a0:c5:62:eb:2d:83:58:64:6a:90:f2:2f:aa:85:
2c:f6:3d:db:85:43:92:96:8f:2d:38:d8:8a:c3:a4:
4f:bc:dc:5d:23:49:7c:fc:55:b4:7c:19:ed:d8:e2:
13:ea:16:d9:29:f8:17:5f:52:11:dc:f4:f5:05:1e:
01:ed:21:61:83:e5:c6:82:47:57:b1:20:23:ae:72:
74:02:4f:66:ce:f8:f1:9e:10:27:78:ea:8d:a2:f5:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:64:78:93:17:8E:78:E6:4F:26:4F:28:CC:71:D8:F0:6D:E8:55:94
X509v3 Authority Key Identifier:
keyid:29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:55:68:54:f6:61:4b:97:7a:b1:e1:0d:1d:3e:3f:54:49:7e:
d2:e9:d8:ad:e6:fe:4b:9f:e2:9f:64:80:a1:cc:fe:02:49:67:
26:3e:e9:42:80:eb:07:f9:76:5e:31:fa:9d:c6:15:88:83:7a:
c7:85:d7:05:8f:28:b8:30:7d:7c:81:33:4b:c1:fb:4f:55:98:
a4:a4:c9:e4:2b:dd:8a:52:61:72:75:49:2e:7e:18:d0:88:eb:
96:27:c0:85:cc:91:28:ae:fd:d0:ff:a0:7d:53:d3:37:b0:3e:
0b:15:7e:e8:e6:82:0f:ac:79:b6:15:2a:f8:39:87:d8:60:f5:
67:26:27:41:7e:4c:30:d1:0a:c8:5b:02:48:34:dd:9d:25:cd:
6a:d0:43:40:ff:1f:a2:8f:1d:58:06:78:ef:60:61:a3:ea:0c:
23:42:0d:c5:2d:1f:93:be:8e:ce:6e:64:ae:56:c4:ee:e6:bb:
e0:97:7d:4d:eb:03:d5:14:0a:e7:da:f3:d4:59:4f:5b:c5:61:
c3:49:42:d7:f4:73:0b:42:53:68:57:30:62:9e:ff:a0:ab:b3:
3c:fe:40:53:5d:18:03:4e:0a:c4:78:a5:56:d8:36:48:5a:dd:
4c:2f:63:3b:d8:08:d8:46:dc:e8:e0:cf:b2:7f:f8:f8:98:82:
c2:02:8f:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/ImCnBRhJsTtvZzWK2j8lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5M2YyZWM3NGI0MDY2YWM2N2E4NzY4ZDhlMzg2MDZlZmNk
NjQwMTMwHhcNMjUxMDIwMDEwMTA2WhcNMjUxMDIxMDEwMTA2WjAzMTEwLwYDVQQD
EygzNTY0Nzg5MzE3OGU3OGU2NGYyNjRmMjhjYzcxZDhmMDZkZTg1NTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BDlACrxiJgUVXiFmgXH+yyCwgIT
C5BIPpdgDwzBGKjq8PFbLKlGvAqrb/S3DKiRre9U9RL3N4OkxVWyYnrjXuLSXHqf
cTZpl71Y3Njb+O8DTVODR/WwbqZgNgs1uR++aVOwlUVLlPBFld2YgatGy2zrh6+y
Nfc8mNATg8sMKruaWaHtvrszGbLyRNLS2bO8q0M8Xzutka3YXkuA/hH+N1FYeaC7
oMVi6y2DWGRqkPIvqoUs9j3bhUOSlo8tONiKw6RPvNxdI0l8/FW0fBnt2OIT6hbZ
KfgXX1IR3PT1BR4B7SFhg+XGgkdXsSAjrnJ0Ak9mzvjxnhAneOqNovUYewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVkeJMXjnjmTyZPKMxx2PBt6FWUMB8GA1UdIwQY
MBaAFCk/LsdLQGasZ6h2jY44YG781kATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OTA0NWEtYTViMS00ZTU5LTk3MTct
MjNmMjI2M2I5YmQyLzEvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82OTA0NWEtYTViMS00ZTU5LTk3MTctMjNmMjI2M2I5YmQy
LzEvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1VoVPZh
S5d6seENHT4/VEl+0unYreb+S5/in2SAocz+AklnJj7pQoDrB/l2XjH6ncYViIN6
x4XXBY8ouDB9fIEzS8H7T1WYpKTJ5CvdilJhcnVJLn4Y0IjrlifAhcyRKK790P+g
fVPTN7A+CxV+6OaCD6x5thUq+DmH2GD1ZyYnQX5MMNEKyFsCSDTdnSXNatBDQP8f
oo8dWAZ472Bho+oMI0INxS0fk76Ozm5krlbE7ua74Jd9TesD1RQK59rz1FlPW8Vh
w0lC1/RzC0JTaFcwYp7/oKuzPP5AU10YA04KxHilVtg2SFrdTC9jO9gI2Ebc6ODP
sn/4+JiCwgKPIg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:13:43 2025 by rpki-client