Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json)
Hash identifier: 807PZ84ESRAe8gFrtzrzuu6WGvWX3alDE0+IElg5BoE=
Subject key identifier: AC:E2:5A:69:C1:23:F3:14:F8:F4:98:85:BA:DA:7D:D5:A5:54:A6:B2
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial: 0199FB0EDA5B9A7E120F34BF85941BDB9EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 06:01:18 +0000
Manifest this update: Sun 19 Oct 2025 06:01:18 +0000
Manifest next update: Mon 20 Oct 2025 06:01:18 +0000
Files and hashes: 1: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: dbAwhwayTPdcUGyPd9tKC+ql3UfpwvxRynytRhGY3R0=)
2: h-R5SrdfAe7rN8zMOqkX0BtsnJ4.roa (hash: 3D3z76pesB4+PkPGfBCrb/veNRexeyxDAf3xN4YJwnQ=)
3: tOD9yELwWOB6I1JsshHxqOqJaWE.roa (hash: E867kd+hZLMJTwwIfg4wQE1B1KmxpcWNXSjEvrvHFrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:da:5b:9a:7e:12:0f:34:bf:85:94:1b:db:9e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Validity
Not Before: Oct 19 06:01:18 2025 GMT
Not After : Oct 20 06:01:18 2025 GMT
Subject: CN=ace25a69c123f314f8f49885bada7dd5a554a6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:fc:67:aa:89:92:c0:ab:1c:40:94:89:a6:
ec:6e:71:db:36:6d:f4:5f:76:10:7d:95:92:cb:f4:
a9:73:1f:73:79:58:be:1e:3c:cd:e5:a8:f1:4e:92:
c2:16:ab:03:8f:59:43:20:5e:b6:3f:3c:ee:69:fe:
23:3b:85:e2:34:03:c1:f5:5d:fd:37:c6:6e:04:e0:
0d:33:d6:b1:97:ca:27:15:30:85:c1:3a:19:65:cb:
66:96:34:48:41:15:55:12:f0:12:8a:94:93:d2:d0:
b4:de:6c:ed:db:32:af:34:f6:ef:17:24:4c:36:ec:
07:7d:e3:96:32:5e:b6:3c:be:ac:cb:81:50:b4:9b:
9b:92:09:75:64:70:c1:c7:58:3d:fb:42:d2:13:79:
2e:4c:3e:0e:9c:62:f5:89:6f:d5:8f:85:db:93:cf:
d1:5c:68:36:23:2f:71:93:53:54:be:73:db:8f:ff:
e0:c1:2a:3f:80:85:58:fc:e1:d5:08:bd:c5:2a:91:
d6:20:66:37:10:dc:d5:6d:da:94:02:7b:73:4d:65:
bf:7e:b0:91:7b:c4:fb:16:4f:bb:5a:4f:39:8e:c7:
79:f0:a4:9e:06:b2:44:92:68:9f:80:46:72:11:f3:
34:1f:1c:5a:0c:84:ff:e5:95:22:ab:88:ad:86:f8:
3a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E2:5A:69:C1:23:F3:14:F8:F4:98:85:BA:DA:7D:D5:A5:54:A6:B2
X509v3 Authority Key Identifier:
keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e3:4f:82:6e:76:4a:20:c3:02:87:66:4d:1f:1b:6d:51:22:
e4:a0:00:b4:83:7d:9b:e7:3f:d4:f7:32:b6:6c:81:4e:77:29:
bf:2f:d8:b7:91:69:8a:ee:69:e1:1f:d8:7b:4f:ae:47:4e:ca:
c9:0d:c0:10:d6:49:69:33:96:a6:ed:0e:50:27:97:4a:b6:6a:
87:a6:c6:87:22:d0:25:bf:a0:2d:5f:5b:49:ff:2e:54:74:ea:
b2:6e:48:8f:74:4a:1f:f4:60:a1:40:11:a7:50:38:04:e2:7d:
64:fd:71:0b:29:18:65:20:10:a6:5f:b0:a5:30:99:2b:2c:c5:
87:b9:16:12:ad:d8:ea:2d:62:0f:37:4a:77:bc:48:cc:53:2c:
ac:4f:b6:86:a3:f3:8a:66:12:e2:2d:db:78:54:c6:df:77:97:
64:79:12:be:8e:4f:a5:53:88:f1:fe:9c:ec:84:8e:6a:24:be:
5f:07:d4:c3:fc:90:31:51:ef:6a:9a:e1:3d:c5:99:66:ed:ba:
f9:21:ab:35:9b:8c:d5:9b:82:80:9f:ae:ae:89:8b:b2:e7:c5:
33:53:8d:da:95:4f:f8:9f:f8:04:0f:3d:47:9f:3d:6d:dd:f6:
dd:34:38:80:0f:68:81:69:55:14:c0:95:4f:a8:a9:e6:4f:bc:
96:0a:08:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Dtpbmn4SDzS/hZQb257gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YWQ4YmZlMDdhZDVkMmNjYjQzYjBkMWRiYTZiMTkyY2I1
MWRiZWEwHhcNMjUxMDE5MDYwMTE4WhcNMjUxMDIwMDYwMTE4WjAzMTEwLwYDVQQD
EyhhY2UyNWE2OWMxMjNmMzE0ZjhmNDk4ODViYWRhN2RkNWE1NTRhNmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05n8Z6qJksCrHECUiabsbnHbNm30
X3YQfZWSy/Spcx9zeVi+HjzN5ajxTpLCFqsDj1lDIF62Pzzuaf4jO4XiNAPB9V39
N8ZuBOANM9axl8onFTCFwToZZctmljRIQRVVEvASipST0tC03mzt2zKvNPbvFyRM
NuwHfeOWMl62PL6sy4FQtJubkgl1ZHDBx1g9+0LSE3kuTD4OnGL1iW/Vj4Xbk8/R
XGg2Iy9xk1NUvnPbj//gwSo/gIVY/OHVCL3FKpHWIGY3ENzVbdqUAntzTWW/frCR
e8T7Fk+7Wk85jsd58KSeBrJEkmifgEZyEfM0HxxaDIT/5ZUiq4ithvg6CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKziWmnBI/MU+PSYhbrafdWlVKayMB8GA1UdIwQY
MBaAFCmti/4HrV0sy0Ow0dumsZLLUdvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTkt
Mzc4NDk5Mzk4ZjE4LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTktMzc4NDk5Mzk4ZjE4
LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+NPgm52
SiDDAodmTR8bbVEi5KAAtIN9m+c/1PcytmyBTncpvy/Yt5Fpiu5p4R/Ye0+uR07K
yQ3AENZJaTOWpu0OUCeXSrZqh6bGhyLQJb+gLV9bSf8uVHTqsm5Ij3RKH/RgoUAR
p1A4BOJ9ZP1xCykYZSAQpl+wpTCZKyzFh7kWEq3Y6i1iDzdKd7xIzFMsrE+2hqPz
imYS4i3beFTG33eXZHkSvo5PpVOI8f6c7ISOaiS+XwfUw/yQMVHvaprhPcWZZu26
+SGrNZuM1ZuCgJ+uromLsufFM1ON2pVP+J/4BA89R589bd323TQ4gA9ogWlVFMCV
T6ip5k+8lgoINw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:34 2025 by rpki-client