Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
File: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft (raw, json)
Hash identifier: w4GzeBlxSU3t5vqoj+KdVRmUe5OWNKY2MyYYP41tWF0=
Subject key identifier: 38:DE:5B:58:DE:58:18:37:6C:61:4F:9D:28:22:58:1E:36:49:C7:C9
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial: 0199FC58973A4D7F32BA5C139DDA430BBC9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:28 +0000
Manifest this update: Sun 19 Oct 2025 12:01:28 +0000
Manifest next update: Mon 20 Oct 2025 12:01:28 +0000
Files and hashes: 1: aSkETRaAPEJs87vkPB5vARFsUpQ.roa (hash: aCCeFkfXg4eaGy/UUrllTCVipmWIQ10CNhHiLobPblo=)
2: h0KwGsV7Y4PS9-ubvbwvPxeINTw.roa (hash: QnImr5OAriGOLs8DShZajEz7o3J5PVeEaUrLJ83dAtA=)
3: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl (hash: ZGr+lhY4pmpY4G3ybgD0EaiBy0kbBKHTJPtcZ5nLMzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:97:3a:4d:7f:32:ba:5c:13:9d:da:43:0b:bc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
Validity
Not Before: Oct 19 12:01:28 2025 GMT
Not After : Oct 20 12:01:28 2025 GMT
Subject: CN=38de5b58de5818376c614f9d2822581e3649c7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:05:18:d8:61:00:ea:34:b2:fb:ac:d5:59:68:
2e:03:e9:56:c2:88:7e:1a:33:76:b7:d7:2a:f8:13:
83:ea:43:01:19:b0:7f:c6:73:3a:e8:74:40:0f:a0:
b5:7e:21:57:e4:83:fd:d2:26:68:9c:9e:4e:af:0a:
fe:7d:d1:62:a7:ca:cb:d9:f7:11:23:f9:48:ec:aa:
2f:e6:38:31:75:42:12:11:32:62:76:d2:5b:f1:44:
67:17:7c:29:80:94:32:aa:7d:6b:47:f1:85:b7:af:
ac:fd:45:4b:c3:9b:54:ea:51:45:67:fe:b6:2a:85:
fe:eb:e5:95:11:4e:70:1f:95:c4:2a:2a:59:96:30:
e5:8a:a7:b5:06:1c:ed:8c:8f:36:79:b9:76:c2:c9:
ac:51:cc:ce:40:7a:77:0f:92:b6:f3:5f:c8:82:d3:
46:e1:f2:c5:f7:4a:a2:52:c2:36:ed:5a:71:bd:04:
3b:08:97:03:fa:8a:b4:1b:93:00:c0:30:6a:07:f7:
19:dc:6a:37:da:4a:39:f9:52:24:3f:2d:32:ca:d7:
95:60:db:fb:2c:4e:c5:eb:e9:b2:5b:dc:6a:83:b6:
3b:d5:af:b4:77:7a:9c:70:e5:2d:14:bd:0f:a4:d4:
4b:29:fe:e1:01:d2:c1:67:8d:f3:5c:65:81:50:9f:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DE:5B:58:DE:58:18:37:6C:61:4F:9D:28:22:58:1E:36:49:C7:C9
X509v3 Authority Key Identifier:
keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:aa:54:23:0a:a2:4e:97:5b:ac:a1:95:d3:57:c7:cc:e6:db:
91:1c:22:f9:bf:3f:61:ff:6f:4b:12:1e:96:6f:cf:94:95:e7:
29:52:c0:9f:6a:b8:7e:35:fd:03:46:9f:ea:11:b0:a4:70:be:
5e:a8:4c:f5:57:f1:e1:0d:58:28:c5:9b:de:7c:d5:db:8c:72:
71:20:9c:13:44:7d:0f:aa:63:7e:64:cb:37:62:22:ab:92:de:
6a:87:e4:76:59:7e:79:2a:19:70:14:28:c3:d1:23:61:d3:c3:
9c:d8:a4:5f:7a:e3:0e:91:65:6b:b3:58:fe:33:84:1b:55:c5:
cf:81:5d:2c:44:4e:5c:8f:b8:55:3b:e1:c7:df:0e:bd:1b:5f:
fc:24:87:b8:ac:da:08:c3:2c:89:d2:11:fc:bd:39:9d:99:4c:
2f:38:09:1c:5d:e0:16:87:ed:cf:87:f2:44:fa:dd:b0:a1:86:
7c:34:50:c0:d2:6c:8f:c8:79:83:7e:d8:8f:44:8c:8c:dc:42:
61:7b:31:59:d6:fc:0e:07:aa:96:f5:b9:1d:10:9e:0c:75:38:
9b:1b:54:99:b0:14:3e:e1:3d:ca:32:22:57:ba:87:b2:da:a7:
64:1c:72:61:48:d0:d7:cc:7a:7b:1e:56:87:48:2c:5e:d2:54:
2f:7d:22:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WJc6TX8yulwTndpDC7yaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDY3ODVmNDY5YmU4YWE3MTUxZTMzMzNlNDc0NjVkNDc4
ZmQwZTcwHhcNMjUxMDE5MTIwMTI4WhcNMjUxMDIwMTIwMTI4WjAzMTEwLwYDVQQD
EygzOGRlNWI1OGRlNTgxODM3NmM2MTRmOWQyODIyNTgxZTM2NDljN2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QUY2GEA6jSy+6zVWWguA+lWwoh+
GjN2t9cq+BOD6kMBGbB/xnM66HRAD6C1fiFX5IP90iZonJ5Orwr+fdFip8rL2fcR
I/lI7Kov5jgxdUISETJidtJb8URnF3wpgJQyqn1rR/GFt6+s/UVLw5tU6lFFZ/62
KoX+6+WVEU5wH5XEKipZljDliqe1BhztjI82ebl2wsmsUczOQHp3D5K281/IgtNG
4fLF90qiUsI27VpxvQQ7CJcD+oq0G5MAwDBqB/cZ3Go32ko5+VIkPy0yyteVYNv7
LE7F6+myW9xqg7Y71a+0d3qccOUtFL0PpNRLKf7hAdLBZ43zXGWBUJ8cYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjeW1jeWBg3bGFPnSgiWB42ScfJMB8GA1UdIwQY
MBaAFJJGeF9Gm+iqcVHjMz5HRl1Hj9DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2taNFgwYWI2S3B4VWVNelBrZEdYVWVQME9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ZTA1ODAtOGIyZi00OWE3LWFiZDgt
NWMzOGM3NDc1YWE5LzEva2taNFgwYWI2S3B4VWVNelBrZEdYVWVQME9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80ZTA1ODAtOGIyZi00OWE3LWFiZDgtNWMzOGM3NDc1YWE5
LzEva2taNFgwYWI2S3B4VWVNelBrZEdYVWVQME9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKpUIwqi
TpdbrKGV01fHzObbkRwi+b8/Yf9vSxIelm/PlJXnKVLAn2q4fjX9A0af6hGwpHC+
XqhM9Vfx4Q1YKMWb3nzV24xycSCcE0R9D6pjfmTLN2Iiq5Leaofkdll+eSoZcBQo
w9EjYdPDnNikX3rjDpFla7NY/jOEG1XFz4FdLEROXI+4VTvhx98OvRtf/CSHuKza
CMMsidIR/L05nZlMLzgJHF3gFoftz4fyRPrdsKGGfDRQwNJsj8h5g37Yj0SMjNxC
YXsxWdb8DgeqlvW5HRCeDHU4mxtUmbAUPuE9yjIiV7qHstqnZBxyYUjQ18x6ex5W
h0gsXtJUL30ilQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:39:04 2025 by rpki-client