
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
File: KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft (raw, json)
Hash identifier: 1DCVgs4Gf+kgz29xT87urPva5dfVBAxnq+dsUKQPCOA=
Subject key identifier: 7B:A2:0B:21:87:37:46:4A:49:13:52:14:C3:E0:A3:02:70:98:A9:A7
Authority key identifier: 28:18:D8:93:A6:99:56:1A:94:D0:58:57:4C:62:EE:FD:51:4B:7F:96
Certificate issuer: /CN=2818d893a699561a94d058574c62eefd514b7f96
Certificate serial: 0199FC8F853061CF4571BEDB03B08CD60A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
Manifest number: 015C
Signing time: Sun 19 Oct 2025 13:01:27 +0000
Manifest this update: Sun 19 Oct 2025 13:01:27 +0000
Manifest next update: Mon 20 Oct 2025 13:01:27 +0000
Files and hashes: 1: KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl (hash: Okfpuawn7gHcXUg3x63owumtrzOmULlgPg27T6lPx7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:85:30:61:cf:45:71:be:db:03:b0:8c:d6:0a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2818d893a699561a94d058574c62eefd514b7f96
Validity
Not Before: Oct 19 13:01:27 2025 GMT
Not After : Oct 20 13:01:27 2025 GMT
Subject: CN=7ba20b218737464a49135214c3e0a3027098a9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f0:0e:50:b5:b3:a6:66:f9:3e:9e:bd:51:d2:
1f:77:6b:fc:31:53:6f:38:5b:75:35:4d:1f:f5:5b:
d8:91:11:55:72:8b:e5:88:da:79:db:24:3a:8f:45:
b3:5a:9e:d1:45:69:c3:04:4b:33:bf:c6:8c:e4:74:
08:9c:bf:44:43:40:4e:aa:d3:73:90:b0:12:8e:21:
84:c5:05:fa:3a:94:44:bc:02:01:8c:2a:b5:f1:bc:
c2:7b:42:a3:2d:39:9f:0e:38:a8:3a:37:58:99:10:
03:6d:f5:eb:f5:17:37:7b:64:b8:48:31:22:c7:b8:
53:61:2d:b7:2b:73:6e:06:00:52:b0:e4:e5:16:f7:
8d:77:4f:e6:ca:1f:ef:08:58:ce:5d:a0:8b:ce:80:
1e:ab:6f:cd:4a:ce:86:bd:2c:d1:93:9f:2c:2e:0f:
c8:d5:ac:36:78:57:0c:4c:a4:f5:79:b9:85:1f:d3:
2d:38:56:3d:fa:b1:40:07:c4:95:ec:51:fb:dc:75:
6d:ac:e6:5b:99:5d:02:cd:51:51:95:03:f6:45:13:
4a:97:09:8d:16:f1:8f:ea:20:02:7c:14:ef:d9:c7:
8a:a6:07:4d:e7:d5:84:30:44:e4:b2:e9:d8:a5:f9:
49:2a:1a:f6:1b:cf:48:c7:0f:1f:ff:e1:01:9b:26:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A2:0B:21:87:37:46:4A:49:13:52:14:C3:E0:A3:02:70:98:A9:A7
X509v3 Authority Key Identifier:
keyid:28:18:D8:93:A6:99:56:1A:94:D0:58:57:4C:62:EE:FD:51:4B:7F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c3:32:2a:43:73:dc:08:3b:84:c8:9f:25:42:9f:48:79:6c:
aa:42:1d:77:c7:7c:b9:65:eb:b7:dc:c7:90:93:79:e8:ff:1b:
8f:7c:24:c8:00:27:c3:07:96:d2:41:fd:b6:93:66:4e:09:16:
6d:83:e9:78:5d:12:39:7c:cf:8d:cf:94:a7:f9:8f:c9:c0:8a:
6f:08:0b:80:ec:a1:5e:ba:4a:d5:99:a8:cc:e1:61:62:87:39:
8a:21:9d:da:39:39:fb:04:36:c9:37:4d:d2:fd:81:25:50:4f:
5a:0e:5c:d8:39:8d:54:9d:aa:7b:e7:a8:25:d5:a1:8f:2a:f9:
44:b7:ce:a2:7a:10:e8:44:6d:81:52:95:bb:9e:22:bb:e6:73:
4e:b8:13:9d:7d:92:7e:57:10:18:26:2f:e9:7e:12:89:37:74:
d3:dc:3e:a8:b1:46:f1:99:dd:a3:81:f0:86:85:5b:59:9d:1f:
0c:99:43:e8:3d:b6:58:77:d3:0a:57:5a:04:e0:4d:b4:61:92:
4a:64:e5:7a:57:99:e7:25:9e:80:ab:2b:7d:38:c5:e1:3f:d2:
d8:3f:13:a4:64:1b:88:3e:23:da:10:c2:17:df:3d:5a:21:38:
ef:19:4f:53:f4:00:f2:92:ec:d4:62:83:17:bf:29:a7:61:a1:
ca:50:71:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j4UwYc9Fcb7bA7CM1gojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MThkODkzYTY5OTU2MWE5NGQwNTg1NzRjNjJlZWZkNTE0
YjdmOTYwHhcNMjUxMDE5MTMwMTI3WhcNMjUxMDIwMTMwMTI3WjAzMTEwLwYDVQQD
Eyg3YmEyMGIyMTg3Mzc0NjRhNDkxMzUyMTRjM2UwYTMwMjcwOThhOWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/AOULWzpmb5Pp69UdIfd2v8MVNv
OFt1NU0f9VvYkRFVcovliNp52yQ6j0WzWp7RRWnDBEszv8aM5HQInL9EQ0BOqtNz
kLASjiGExQX6OpREvAIBjCq18bzCe0KjLTmfDjioOjdYmRADbfXr9Rc3e2S4SDEi
x7hTYS23K3NuBgBSsOTlFveNd0/myh/vCFjOXaCLzoAeq2/NSs6GvSzRk58sLg/I
1aw2eFcMTKT1ebmFH9MtOFY9+rFAB8SV7FH73HVtrOZbmV0CzVFRlQP2RRNKlwmN
FvGP6iACfBTv2ceKpgdN59WEMETksunYpflJKhr2G89Ixw8f/+EBmyawMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuiCyGHN0ZKSRNSFMPgowJwmKmnMB8GA1UdIwQY
MBaAFCgY2JOmmVYalNBYV0xi7v1RS3+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JqWWs2YVpWaHFVMEZoWFRHTHVfVkZMZjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS85NzEzNzEtZWVkZi00ZDY2LThiNWYt
ZTQxNzA2YmYxMjMxLzEvS0JqWWs2YVpWaHFVMEZoWFRHTHVfVkZMZjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS85NzEzNzEtZWVkZi00ZDY2LThiNWYtZTQxNzA2YmYxMjMx
LzEvS0JqWWs2YVpWaHFVMEZoWFRHTHVfVkZMZjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8MyKkNz
3Ag7hMifJUKfSHlsqkIdd8d8uWXrt9zHkJN56P8bj3wkyAAnwweW0kH9tpNmTgkW
bYPpeF0SOXzPjc+Up/mPycCKbwgLgOyhXrpK1ZmozOFhYoc5iiGd2jk5+wQ2yTdN
0v2BJVBPWg5c2DmNVJ2qe+eoJdWhjyr5RLfOonoQ6ERtgVKVu54iu+ZzTrgTnX2S
flcQGCYv6X4SiTd009w+qLFG8Zndo4HwhoVbWZ0fDJlD6D22WHfTCldaBOBNtGGS
SmTleleZ5yWegKsrfTjF4T/S2D8TpGQbiD4j2hDCF989WiE47xlPU/QA8pLs1GKD
F78pp2GhylBxbg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:52 2025 by rpki-client