Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
File: KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft (raw, json)
Hash identifier: uBq8dCnvNUVW5PVqClL4cFtLtNh5RkA6AHbFhpG9CyE=
Subject key identifier: 0C:58:65:35:64:D4:A9:24:E5:0B:08:A1:E8:BA:43:14:4F:76:F3:31
Authority key identifier: 2A:14:91:5E:27:F8:BF:40:5C:CF:CA:94:B6:C5:30:BD:4D:3E:54:C0
Certificate issuer: /CN=2a14915e27f8bf405ccfca94b6c530bd4d3e54c0
Certificate serial: 0199FBEB65041569D33A91BE9B8BEADB1D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
Manifest number: 0917
Signing time: Sun 19 Oct 2025 10:02:11 +0000
Manifest this update: Sun 19 Oct 2025 10:02:11 +0000
Manifest next update: Mon 20 Oct 2025 10:02:11 +0000
Files and hashes: 1: KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl (hash: XEdr/BprLxpO92VkAjeYi/4wxy9f08V8+I1y4dV9kjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:65:04:15:69:d3:3a:91:be:9b:8b:ea:db:1d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a14915e27f8bf405ccfca94b6c530bd4d3e54c0
Validity
Not Before: Oct 19 10:02:11 2025 GMT
Not After : Oct 20 10:02:11 2025 GMT
Subject: CN=0c58653564d4a924e50b08a1e8ba43144f76f331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:db:27:7a:85:5d:d1:d1:81:9a:99:3c:fe:22:
be:a1:49:70:0e:31:2a:09:04:28:2c:70:89:c0:71:
be:97:f0:d0:27:97:c4:80:4e:01:43:0c:34:69:28:
63:af:9c:ad:15:3d:c6:5f:ea:2d:b7:9f:9b:1e:2b:
77:bf:e0:a7:ef:e6:82:04:a7:67:a8:be:54:86:41:
dc:ce:35:c1:58:3c:0e:a1:18:3a:a3:27:c7:0f:d4:
6d:92:0c:60:3b:a0:35:a4:6c:b0:48:33:51:15:6e:
84:48:73:b9:db:b3:32:79:40:2f:b5:f0:05:c8:32:
fb:6d:c4:42:88:b2:10:06:65:ae:59:92:6a:03:78:
c7:e1:1e:f5:0d:4d:da:41:1e:98:53:0d:fb:ca:88:
5e:94:b1:a3:1d:d2:3f:b6:8e:f6:8f:1f:a4:12:98:
33:81:2c:39:58:f6:8b:e1:65:6a:16:bc:89:1a:99:
42:e5:4e:47:f3:6c:03:be:43:a0:4b:76:26:a7:a7:
fa:82:a1:9b:40:d8:30:8e:99:ff:4f:b0:aa:3a:b0:
ff:40:7c:ad:4d:d0:d3:69:44:9a:77:39:e8:5a:54:
52:b2:86:9a:f7:e4:dd:24:07:a1:80:34:4f:1d:05:
af:f2:1d:e7:a3:dd:0b:61:68:00:e3:90:fd:06:0a:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:58:65:35:64:D4:A9:24:E5:0B:08:A1:E8:BA:43:14:4F:76:F3:31
X509v3 Authority Key Identifier:
keyid:2A:14:91:5E:27:F8:BF:40:5C:CF:CA:94:B6:C5:30:BD:4D:3E:54:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:19:f7:df:89:f0:75:88:13:d8:c5:25:eb:6c:c8:46:d2:bb:
5d:fc:ed:c0:72:8f:6a:e4:e0:24:7f:59:a7:93:aa:91:ab:61:
01:2e:21:60:43:ff:1a:64:26:11:47:2a:92:f5:77:8c:aa:8a:
e2:dd:cb:54:38:72:3e:82:aa:c4:72:49:4b:98:d1:e8:06:88:
b6:34:8a:15:88:e2:e4:96:1e:c3:92:1f:ed:da:a8:be:82:e2:
4f:d8:8a:6d:a8:9e:cb:44:84:b3:71:2c:42:cf:1c:a5:54:f4:
1c:50:0f:61:4b:bd:95:d0:26:35:e9:0d:d9:f4:90:88:f0:c9:
10:be:a3:ff:cf:b1:36:2e:e6:29:29:08:12:5b:eb:62:0d:67:
bc:85:b6:94:17:88:20:e1:a9:1a:6e:36:93:44:68:47:76:40:
f3:69:db:69:66:14:66:16:67:d5:bf:9f:6a:8d:94:59:49:d0:
c5:89:1d:8d:65:24:cd:f7:fa:2f:c1:d8:c7:8c:8f:2d:2b:ef:
7e:4d:2c:74:e5:72:14:b8:aa:bb:6a:43:cb:10:30:1e:6b:a8:
0b:ca:45:bf:e8:0f:d0:2a:9d:40:8c:c4:2b:e7:23:63:da:8d:
b5:ff:45:a4:12:f1:3a:79:06:81:f2:29:76:18:e3:6a:ce:f5:
98:5b:fc:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn762UEFWnTOpG+m4vq2x2cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMTQ5MTVlMjdmOGJmNDA1Y2NmY2E5NGI2YzUzMGJkNGQz
ZTU0YzAwHhcNMjUxMDE5MTAwMjExWhcNMjUxMDIwMTAwMjExWjAzMTEwLwYDVQQD
EygwYzU4NjUzNTY0ZDRhOTI0ZTUwYjA4YTFlOGJhNDMxNDRmNzZmMzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNsneoVd0dGBmpk8/iK+oUlwDjEq
CQQoLHCJwHG+l/DQJ5fEgE4BQww0aShjr5ytFT3GX+ott5+bHit3v+Cn7+aCBKdn
qL5UhkHczjXBWDwOoRg6oyfHD9RtkgxgO6A1pGywSDNRFW6ESHO527MyeUAvtfAF
yDL7bcRCiLIQBmWuWZJqA3jH4R71DU3aQR6YUw37yohelLGjHdI/to72jx+kEpgz
gSw5WPaL4WVqFryJGplC5U5H82wDvkOgS3Ymp6f6gqGbQNgwjpn/T7CqOrD/QHyt
TdDTaUSadznoWlRSsoaa9+TdJAehgDRPHQWv8h3no90LYWgA45D9BgoNkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxYZTVk1Kkk5QsIoei6QxRPdvMxMB8GA1UdIwQY
MBaAFCoUkV4n+L9AXM/KlLbFML1NPlTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2hTUlhpZjR2MEJjejhxVXRzVXd2VTAtVk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80NzIxYWMtYzRmZC00NmFmLTlhOTEt
NDBhZTkyNDdjYzY0LzEvS2hTUlhpZjR2MEJjejhxVXRzVXd2VTAtVk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80NzIxYWMtYzRmZC00NmFmLTlhOTEtNDBhZTkyNDdjYzY0
LzEvS2hTUlhpZjR2MEJjejhxVXRzVXd2VTAtVk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARn334nw
dYgT2MUl62zIRtK7XfztwHKPauTgJH9Zp5OqkathAS4hYEP/GmQmEUcqkvV3jKqK
4t3LVDhyPoKqxHJJS5jR6AaItjSKFYji5JYew5If7dqovoLiT9iKbaiey0SEs3Es
Qs8cpVT0HFAPYUu9ldAmNekN2fSQiPDJEL6j/8+xNi7mKSkIElvrYg1nvIW2lBeI
IOGpGm42k0RoR3ZA82nbaWYUZhZn1b+fao2UWUnQxYkdjWUkzff6L8HYx4yPLSvv
fk0sdOVyFLiqu2pDyxAwHmuoC8pFv+gP0CqdQIzEK+cjY9qNtf9FpBLxOnkGgfIp
dhjjas71mFv8dw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:33 2025 by rpki-client