Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
File: kkUytPdDz5XL7BhoG6Z6xduFTzM.mft (raw, json)
Hash identifier: en6ehaTEs3cNOe1BXCQsUqAL3cOiAbbR9OaTVI7cqG4=
Subject key identifier: 8A:D1:5F:16:49:9D:A7:E3:DC:5D:A2:A5:38:9B:2A:37:C6:F4:41:D8
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Certificate issuer: /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial: 0199FC583EBE435DA876CCB7BF96972FFA8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
Manifest number: 0A80
Signing time: Sun 19 Oct 2025 12:01:05 +0000
Manifest this update: Sun 19 Oct 2025 12:01:05 +0000
Manifest next update: Mon 20 Oct 2025 12:01:05 +0000
Files and hashes: 1: 1-nmX1WTJ49yJbme7KYE3jeC7q4Y.roa (hash: zAEWgizXd30YPkGAc5Kl/PvBR6kbJd2FV8oWGwFvE/I=)
2: kkUytPdDz5XL7BhoG6Z6xduFTzM.crl (hash: 5gQW0YPpdurUnbvOzqF+EwFJVrIgyAJKMIN6Xe+CzUc=)
3: qJnDw_Xmq2bfel2_89lbdiftBRQ.roa (hash: O4ff3v5t1d6BKPF64qTARMkRfucrOU0EI+MHTwPLMTc=)
4: yyVSocue_VD1x2HepimmN6bExsc.roa (hash: 6+QKFhEGkikap65WiEFQ9q79rIkGnFuCa6iQx/4KnWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3e:be:43:5d:a8:76:cc:b7:bf:96:97:2f:fa:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
Validity
Not Before: Oct 19 12:01:05 2025 GMT
Not After : Oct 20 12:01:05 2025 GMT
Subject: CN=8ad15f16499da7e3dc5da2a5389b2a37c6f441d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:24:5c:05:a2:bd:19:6c:67:77:70:f6:a0:
48:a5:3a:13:66:54:73:d8:5a:11:6b:79:32:53:69:
d9:5e:f2:33:90:6d:f7:0f:7c:94:e4:c4:dd:53:7e:
0a:d3:3a:08:2e:a1:5e:b3:68:6a:c6:6c:9b:9b:59:
39:14:cd:37:cb:af:b9:0b:21:7a:e3:fd:c4:7c:70:
35:80:28:1e:6c:7b:c9:03:0b:60:b2:75:1b:d4:f4:
1f:72:7f:4c:fa:cb:2d:0d:8e:62:ee:29:35:af:4f:
aa:f3:ef:9f:b7:88:39:04:a4:42:c9:c0:46:14:8b:
a8:19:b5:ea:22:b0:ea:47:b5:f0:8a:43:31:2a:63:
6d:e5:76:20:74:9b:d7:84:e8:bd:bd:fe:3a:ba:08:
28:28:d9:e9:be:90:e6:4a:45:71:84:76:1e:30:f0:
db:92:9d:1f:32:62:ff:b3:a2:92:d0:70:64:60:81:
54:e7:c9:eb:89:d0:2d:0e:a3:5a:ac:b2:7b:a8:95:
86:42:f4:d9:37:f0:80:ec:c9:2f:cd:f8:c2:70:b3:
98:72:27:9d:c6:6c:b9:5a:f0:1b:44:2a:58:ca:c2:
46:0e:1b:1f:0b:67:23:1d:79:7e:de:71:93:4d:de:
44:c5:e4:96:56:64:17:cb:1a:84:87:c7:ee:1a:86:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D1:5F:16:49:9D:A7:E3:DC:5D:A2:A5:38:9B:2A:37:C6:F4:41:D8
X509v3 Authority Key Identifier:
keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:08:c3:ca:ae:13:6e:d7:24:11:da:91:21:35:8e:46:0e:51:
e4:39:ce:be:e6:b7:60:04:78:ca:86:50:4a:1f:16:ca:a4:de:
07:ac:e7:83:e7:de:e1:6c:2a:ec:39:14:66:64:26:d2:6b:ef:
c7:64:b2:b4:b1:9d:30:b3:9a:bd:3d:07:2f:bb:29:0c:aa:3d:
33:06:20:8b:0d:dc:55:5a:e1:d4:bf:42:43:1d:63:e7:65:8c:
df:c0:0c:aa:16:6a:69:d6:81:00:ab:b2:cc:3f:fc:d4:f3:0e:
a5:56:cf:89:77:79:2f:e5:df:d9:7b:45:cb:94:c4:7a:d8:44:
ba:8b:13:76:c1:36:32:2b:71:11:88:49:72:a5:63:07:84:c2:
0e:07:aa:6d:59:fb:30:23:2b:f9:c2:19:24:55:4f:5d:32:b8:
72:a3:95:5c:34:58:d0:40:0a:c0:c1:cb:99:7d:c9:7b:f2:37:
1c:11:b5:56:10:54:41:44:5d:87:a2:e4:be:dd:e7:fb:66:82:
58:b5:d9:89:a5:3e:2a:3f:12:91:13:82:9f:3a:e0:ba:e6:26:
ad:e8:60:13:d7:4f:19:e4:6a:67:ea:2d:20:ba:71:f2:d1:66:
c6:d9:55:ed:09:6f:43:75:cc:a7:3f:b5:d9:13:04:f6:4d:2b:
b7:2a:5a:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WD6+Q12odsy3v5aXL/qNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDUzMmI0Zjc0M2NmOTVjYmVjMTg2ODFiYTY3YWM1ZGI4
NTRmMzMwHhcNMjUxMDE5MTIwMTA1WhcNMjUxMDIwMTIwMTA1WjAzMTEwLwYDVQQD
Eyg4YWQxNWYxNjQ5OWRhN2UzZGM1ZGEyYTUzODliMmEzN2M2ZjQ0MWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD4kXAWivRlsZ3dw9qBIpToTZlRz
2FoRa3kyU2nZXvIzkG33D3yU5MTdU34K0zoILqFes2hqxmybm1k5FM03y6+5CyF6
4/3EfHA1gCgebHvJAwtgsnUb1PQfcn9M+sstDY5i7ik1r0+q8++ft4g5BKRCycBG
FIuoGbXqIrDqR7XwikMxKmNt5XYgdJvXhOi9vf46uggoKNnpvpDmSkVxhHYeMPDb
kp0fMmL/s6KS0HBkYIFU58nridAtDqNarLJ7qJWGQvTZN/CA7MkvzfjCcLOYcied
xmy5WvAbRCpYysJGDhsfC2cjHXl+3nGTTd5ExeSWVmQXyxqEh8fuGoar0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrRXxZJnafj3F2ipTibKjfG9EHYMB8GA1UdIwQY
MBaAFJJFMrT3Q8+Vy+wYaBumesXbhU8zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tVeXRQZER6NVhMN0Job0c2WjZ4ZHVGVHpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yYjlmMDEtYTU2ZS00YmU5LWFkMzIt
MzhlZDcxNTU5OTVjLzEva2tVeXRQZER6NVhMN0Job0c2WjZ4ZHVGVHpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yYjlmMDEtYTU2ZS00YmU5LWFkMzItMzhlZDcxNTU5OTVj
LzEva2tVeXRQZER6NVhMN0Job0c2WjZ4ZHVGVHpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1AjDyq4T
btckEdqRITWORg5R5DnOvua3YAR4yoZQSh8WyqTeB6zng+fe4Wwq7DkUZmQm0mvv
x2SytLGdMLOavT0HL7spDKo9MwYgiw3cVVrh1L9CQx1j52WM38AMqhZqadaBAKuy
zD/81PMOpVbPiXd5L+Xf2XtFy5TEethEuosTdsE2MitxEYhJcqVjB4TCDgeqbVn7
MCMr+cIZJFVPXTK4cqOVXDRY0EAKwMHLmX3Je/I3HBG1VhBUQURdh6Lkvt3n+2aC
WLXZiaU+Kj8SkROCnzrguuYmrehgE9dPGeRqZ+otILpx8tFmxtlV7QlvQ3XMpz+1
2RME9k0rtypaWw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:41 2025 by rpki-client