Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
File: kxqerhFBEi0V8KZO8HjIAp_r_jw.mft (raw, json)
Hash identifier: hCtG7QoYPVmlW4ZMBo+0CPW/TBwFAG4jg7tU/GVj9M4=
Subject key identifier: 6B:87:05:32:71:C9:22:59:E0:C4:CD:05:8E:BA:B9:D2:92:30:B5:4A
Authority key identifier: 93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C
Certificate issuer: /CN=931a9eae1141122d15f0a64ef078c8029febfe3c
Certificate serial: 0199FCC630F4EAF1D464CAF107F57E9EA5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 14:01:10 +0000
Manifest this update: Sun 19 Oct 2025 14:01:10 +0000
Manifest next update: Mon 20 Oct 2025 14:01:10 +0000
Files and hashes: 1: kxqerhFBEi0V8KZO8HjIAp_r_jw.crl (hash: 2oNtvo9DNwc5+jwAbax/E0T9xXGP6oYrwHKwVO2vQmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:30:f4:ea:f1:d4:64:ca:f1:07:f5:7e:9e:a5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931a9eae1141122d15f0a64ef078c8029febfe3c
Validity
Not Before: Oct 19 14:01:10 2025 GMT
Not After : Oct 20 14:01:10 2025 GMT
Subject: CN=6b87053271c92259e0c4cd058ebab9d29230b54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:52:d2:db:9e:3e:53:7b:19:71:f9:a6:f9:
c2:f0:b0:bd:48:72:a9:1f:99:6e:b3:47:cf:ac:9e:
c3:12:ff:a1:2a:e4:2f:b0:80:04:23:4a:77:35:e5:
9a:d4:a9:d2:10:4d:eb:68:da:74:7a:1b:d6:9e:d9:
e8:f2:04:0c:07:ff:a6:1d:6d:55:0e:ce:3d:ef:a3:
a3:c0:7d:27:d1:cc:60:57:3d:a6:db:80:e5:6f:c5:
0b:3e:80:f8:90:68:30:64:b0:03:f9:b3:8a:67:99:
21:94:05:f5:43:c3:80:c1:d7:9d:e5:0f:59:63:c6:
a3:60:89:b0:02:f7:c5:62:b6:79:8f:17:62:b4:d6:
3e:ef:86:a7:e6:ef:da:d9:12:c1:20:cb:64:d2:dd:
9d:5f:c1:7d:aa:6d:8f:74:09:08:52:3a:f6:c5:95:
df:2e:38:13:d9:15:01:57:56:ea:e0:7e:5e:7f:0f:
1a:51:42:da:f6:dd:68:93:e8:c9:5b:24:44:c6:c6:
88:39:61:30:bb:35:04:89:8b:94:46:cd:34:4b:f3:
de:3c:f6:30:02:ca:ed:71:56:a4:8b:d6:83:31:00:
01:b0:ab:09:8f:bb:4f:dd:64:c8:47:72:38:a3:b8:
53:51:4d:eb:18:80:16:a3:e0:29:00:8e:eb:11:d7:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:87:05:32:71:C9:22:59:E0:C4:CD:05:8E:BA:B9:D2:92:30:B5:4A
X509v3 Authority Key Identifier:
keyid:93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:80:e0:0d:11:c3:44:71:fb:3a:8b:ec:c5:97:b9:29:e9:cb:
8e:c6:24:84:21:b4:8e:04:88:d8:4a:d2:e7:a9:24:a9:48:0c:
e4:37:7f:2e:f7:57:f2:7f:81:a4:84:c6:d7:71:8d:58:94:00:
d6:74:03:f9:47:69:49:58:ce:a6:5b:6a:e5:22:7a:da:1a:96:
77:54:97:69:77:67:e9:d9:48:5b:dd:c9:7c:58:81:49:e7:9e:
ff:08:ee:96:e3:8d:22:db:6e:52:a0:d9:a8:46:8c:ff:18:cb:
95:de:da:49:9b:61:07:6f:a5:b7:13:32:7f:7e:5f:8f:81:b7:
dd:d0:86:89:bc:10:23:ec:2e:ec:50:b3:7b:d0:1b:28:18:6a:
3e:1a:77:b0:61:45:42:30:e1:a7:ea:1a:ee:ee:36:49:fb:f9:
ef:00:d4:5f:69:7f:d1:54:c3:dc:83:c4:6f:32:3c:67:77:c4:
16:87:d5:f9:11:4d:f8:5b:e5:89:67:56:7a:5b:00:d4:01:de:
fc:d1:c6:71:8f:48:66:19:b5:39:05:60:21:d4:e7:78:63:47:
90:c5:94:dd:00:fe:76:3d:0a:a5:74:71:7c:0f:ad:d7:cf:d5:
2d:63:79:ee:11:b4:fc:6d:41:fa:24:e0:a6:f1:5b:62:eb:66:
cc:3a:be:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xjD06vHUZMrxB/V+nqXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMWE5ZWFlMTE0MTEyMmQxNWYwYTY0ZWYwNzhjODAyOWZl
YmZlM2MwHhcNMjUxMDE5MTQwMTEwWhcNMjUxMDIwMTQwMTEwWjAzMTEwLwYDVQQD
Eyg2Yjg3MDUzMjcxYzkyMjU5ZTBjNGNkMDU4ZWJhYjlkMjkyMzBiNTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rVS0tuePlN7GXH5pvnC8LC9SHKp
H5lus0fPrJ7DEv+hKuQvsIAEI0p3NeWa1KnSEE3raNp0ehvWntno8gQMB/+mHW1V
Ds4976OjwH0n0cxgVz2m24Dlb8ULPoD4kGgwZLAD+bOKZ5khlAX1Q8OAwded5Q9Z
Y8ajYImwAvfFYrZ5jxditNY+74an5u/a2RLBIMtk0t2dX8F9qm2PdAkIUjr2xZXf
LjgT2RUBV1bq4H5efw8aUULa9t1ok+jJWyRExsaIOWEwuzUEiYuURs00S/PePPYw
AsrtcVaki9aDMQABsKsJj7tP3WTIR3I4o7hTUU3rGIAWo+ApAI7rEdelMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuHBTJxySJZ4MTNBY66udKSMLVKMB8GA1UdIwQY
MBaAFJManq4RQRItFfCmTvB4yAKf6/48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3hxZXJoRkJFaTBWOEtaTzhIaklBcF9yX2p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80NzM3NjgtM2E1OS00YjBiLWFkMjYt
MTkxMzZiN2IwMzk2LzEva3hxZXJoRkJFaTBWOEtaTzhIaklBcF9yX2p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi80NzM3NjgtM2E1OS00YjBiLWFkMjYtMTkxMzZiN2IwMzk2
LzEva3hxZXJoRkJFaTBWOEtaTzhIaklBcF9yX2p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4DgDRHD
RHH7OovsxZe5KenLjsYkhCG0jgSI2ErS56kkqUgM5Dd/LvdX8n+BpITG13GNWJQA
1nQD+UdpSVjOpltq5SJ62hqWd1SXaXdn6dlIW93JfFiBSeee/wjuluONIttuUqDZ
qEaM/xjLld7aSZthB2+ltxMyf35fj4G33dCGibwQI+wu7FCze9AbKBhqPhp3sGFF
QjDhp+oa7u42Sfv57wDUX2l/0VTD3IPEbzI8Z3fEFofV+RFN+FvliWdWelsA1AHe
/NHGcY9IZhm1OQVgIdTneGNHkMWU3QD+dj0KpXRxfA+t18/VLWN57hG0/G1B+iTg
pvFbYutmzDq+UA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:11 2025 by rpki-client