Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
File: KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft (raw, json)
Hash identifier: H6kbQ0HTiIhdrikAnEVrXXrARExpAcDHbdyC9gDlB9c=
Subject key identifier: FE:F2:C9:2C:B8:3D:0A:B9:01:7E:C4:42:67:EB:B2:E3:1D:65:A1:95
Authority key identifier: 29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
Certificate issuer: /CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Certificate serial: 0199FEB4784ED88A347DC8ABD94EF4CC05CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 23:01:04 +0000
Manifest this update: Sun 19 Oct 2025 23:01:04 +0000
Manifest next update: Mon 20 Oct 2025 23:01:04 +0000
Files and hashes: 1: KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl (hash: NTfkWSTt0EjTVZPfXI8L6incbgOHIAgMLTAkmxSuDYg=)
2: aI7Jkk0hKBc5FvPXNc087oh3O6I.roa (hash: NGQRZS/iBgx2LNEuUjWmKtWDne6hFeLh8g8pm9sOGIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:78:4e:d8:8a:34:7d:c8:ab:d9:4e:f4:cc:05:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Validity
Not Before: Oct 19 23:01:04 2025 GMT
Not After : Oct 20 23:01:04 2025 GMT
Subject: CN=fef2c92cb83d0ab9017ec44267ebb2e31d65a195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:a4:d5:aa:f9:49:f8:0b:f5:4e:08:95:00:
a8:9e:85:5c:15:cd:b2:42:ea:98:e3:cb:02:13:85:
08:c2:ff:31:43:c5:93:bf:0f:a7:f2:ef:1a:60:45:
b3:ae:dc:6f:8a:d7:b1:d6:df:c1:05:00:a9:8e:e3:
60:0c:cd:56:89:c8:0a:35:34:6d:b3:cd:a1:f6:dd:
27:d5:1a:a0:76:ca:59:c5:a5:50:f2:c1:6a:87:a5:
e2:95:fa:18:d5:3e:78:e5:33:e1:e1:f0:fd:2d:93:
36:26:79:43:c8:fc:b0:47:4c:28:ae:91:c5:e2:bf:
49:ef:e6:26:25:49:63:9a:87:e2:74:35:ee:10:68:
f8:a9:66:a9:04:77:28:2d:7d:a8:62:26:24:2c:51:
93:33:e1:fd:77:a9:ac:e1:5d:3b:62:f1:21:d4:d9:
ee:ff:c9:de:af:af:b8:9b:ae:b1:02:5d:fc:6f:cc:
92:b6:98:58:1b:5d:5e:67:fe:92:af:6b:9a:bd:fe:
f6:a9:40:b8:37:99:ce:a1:d6:44:7c:0b:ca:74:5c:
12:4f:f9:c8:9d:6b:b9:d0:d1:28:c6:8a:8c:10:b7:
2c:07:68:06:d3:8f:e9:8a:bb:ba:0a:89:66:39:b6:
86:e3:0e:03:bb:0c:6c:f4:86:8d:d7:5c:10:33:d1:
2e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F2:C9:2C:B8:3D:0A:B9:01:7E:C4:42:67:EB:B2:E3:1D:65:A1:95
X509v3 Authority Key Identifier:
keyid:29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:64:42:41:ca:e3:95:d5:a6:3b:c0:0a:09:3b:df:31:47:38:
42:81:4c:6f:5d:2f:fa:12:38:a7:ec:f9:87:ce:33:d1:ca:75:
ba:7c:57:9a:6d:88:06:4b:ea:b0:16:b8:ae:e0:d9:c1:b1:de:
8d:5d:cf:17:6b:99:eb:2b:d0:06:20:27:8d:61:9b:b0:ac:6f:
a0:d5:95:0d:0d:a8:f0:61:cc:dc:21:80:d7:20:80:9d:52:67:
b9:cd:d4:1e:7e:ca:71:72:99:b4:11:9d:8f:cd:41:0e:a8:d4:
6e:17:97:8a:a5:85:18:9d:84:6e:20:35:28:36:b3:42:a7:a4:
23:fa:9c:95:a5:46:19:1b:54:07:dc:fa:ef:6d:1a:8b:f5:89:
21:65:2e:d6:dd:af:36:b4:85:99:ad:59:95:7f:13:e9:66:45:
17:21:a6:3e:ec:c4:4c:24:7f:f6:ed:bb:1f:f1:b6:00:a5:c7:
b2:a3:07:2a:ce:ec:ac:50:80:2e:fa:2c:03:ff:68:1b:74:65:
b6:f5:d9:da:f1:6b:c7:a8:74:a5:d8:c2:86:38:9a:3a:ae:27:
af:e6:3b:67:b6:a3:e4:b4:3d:40:17:7c:4f:65:4e:6c:5c:c1:
69:ba:ef:87:b8:ad:5d:23:b1:d9:a7:58:99:1a:91:e7:7f:ce:
e0:dc:16:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tHhO2Io0fcir2U70zAXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NWI2YTM0YTIxMDliYTdjNGQ5N2Y3NmM3NDQ2NmYxNGMz
MzMzZTAwHhcNMjUxMDE5MjMwMTA0WhcNMjUxMDIwMjMwMTA0WjAzMTEwLwYDVQQD
EyhmZWYyYzkyY2I4M2QwYWI5MDE3ZWM0NDI2N2ViYjJlMzFkNjVhMTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUuk1ar5SfgL9U4IlQConoVcFc2y
QuqY48sCE4UIwv8xQ8WTvw+n8u8aYEWzrtxvitex1t/BBQCpjuNgDM1WicgKNTRt
s82h9t0n1RqgdspZxaVQ8sFqh6XilfoY1T545TPh4fD9LZM2JnlDyPywR0worpHF
4r9J7+YmJUljmofidDXuEGj4qWapBHcoLX2oYiYkLFGTM+H9d6ms4V07YvEh1Nnu
/8ner6+4m66xAl38b8yStphYG11eZ/6Sr2uavf72qUC4N5nOodZEfAvKdFwST/nI
nWu50NEoxoqMELcsB2gG04/piru6ColmObaG4w4Duwxs9IaN11wQM9Eu6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7yySy4PQq5AX7EQmfrsuMdZaGVMB8GA1UdIwQY
MBaAFClbajSiEJunxNl/dsdEZvFMMzPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Z0cU5LSVFtNmZFMlg5MngwUm04VXd6TS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lOWIxNzMtOTJiNi00MjEwLWE4ZTAt
Yjc5N2E0NDA2ZjMwLzEvS1Z0cU5LSVFtNmZFMlg5MngwUm04VXd6TS1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lOWIxNzMtOTJiNi00MjEwLWE4ZTAtYjc5N2E0NDA2ZjMw
LzEvS1Z0cU5LSVFtNmZFMlg5MngwUm04VXd6TS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2RCQcrj
ldWmO8AKCTvfMUc4QoFMb10v+hI4p+z5h84z0cp1unxXmm2IBkvqsBa4ruDZwbHe
jV3PF2uZ6yvQBiAnjWGbsKxvoNWVDQ2o8GHM3CGA1yCAnVJnuc3UHn7KcXKZtBGd
j81BDqjUbheXiqWFGJ2EbiA1KDazQqekI/qclaVGGRtUB9z6720ai/WJIWUu1t2v
NrSFma1ZlX8T6WZFFyGmPuzETCR/9u27H/G2AKXHsqMHKs7srFCALvosA/9oG3Rl
tvXZ2vFrx6h0pdjChjiaOq4nr+Y7Z7aj5LQ9QBd8T2VObFzBabrvh7itXSOx2adY
mRqR53/O4NwWOQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:10:45 2025 by rpki-client