Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
File: kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft (raw, json)
Hash identifier: XsYN09mVs8uU3mPk/2VXfGttmhsgcNeWWfs+pGWNa0Q=
Subject key identifier: 99:D3:1C:5C:5F:12:97:13:24:15:7E:59:4D:CE:C2:B0:33:07:34:8D
Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5
Certificate serial: 0199FFFE3621E4F544EB022E6D8F8D436DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
Manifest number: 10B7
Signing time: Mon 20 Oct 2025 05:01:13 +0000
Manifest this update: Mon 20 Oct 2025 05:01:13 +0000
Manifest next update: Tue 21 Oct 2025 05:01:13 +0000
Files and hashes: 1: Is94Q2E0TcL99ktPLy3XOhFlG9s.roa (hash: QmvTWH4bMNqja9fgfEB+gdmLSFW4G8IyUfhDS4uj7O4=)
2: kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl (hash: itF8i8gTS+S80GZJb1TuPU2G3TsfyAVyZB1qxSyOz5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:36:21:e4:f5:44:eb:02:2e:6d:8f:8d:43:6d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a02705006532ef33a0064f875a100923509fd5
Validity
Not Before: Oct 20 05:01:13 2025 GMT
Not After : Oct 21 05:01:13 2025 GMT
Subject: CN=99d31c5c5f12971324157e594dcec2b03307348d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:c7:b8:31:6b:e0:3b:99:ed:3d:5f:ff:12:
86:28:71:c5:a5:ce:15:1b:ea:38:14:fc:67:87:cd:
e4:2d:91:07:fe:cf:dc:3c:e9:a6:59:6b:4b:b6:4a:
35:37:f4:99:12:a7:a1:72:86:83:63:7a:39:98:e4:
66:ea:f4:66:ec:14:d5:e6:cd:da:67:35:ff:30:30:
27:71:0e:d2:c2:60:7d:05:e1:ce:99:69:9b:24:4d:
80:d0:cd:d6:f0:2b:83:57:c4:ee:02:35:61:0d:57:
01:99:22:66:ab:14:5c:f8:1d:0a:ff:5b:0a:51:6c:
5e:f2:b2:26:f7:c7:36:5a:fd:d9:31:3c:92:0f:18:
4b:18:f5:55:89:c2:01:1b:67:e1:8e:21:85:f9:ca:
3b:04:62:64:6b:87:ff:19:b0:1c:09:ed:b6:24:21:
45:97:3c:8f:1c:3b:f6:e9:94:ba:ac:a5:d6:3d:59:
ef:08:52:23:71:47:e9:b3:fb:a6:d7:b0:ff:20:d5:
76:a2:f2:96:df:05:51:df:2b:40:a2:ad:00:93:1e:
3f:73:55:d1:5f:ba:de:df:fc:02:c0:b2:41:b6:1f:
a2:0e:64:03:00:2c:0e:c8:2a:88:27:7e:f9:a8:96:
14:7b:2b:0c:a3:bc:9a:00:be:a3:eb:5a:d6:0c:33:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D3:1C:5C:5F:12:97:13:24:15:7E:59:4D:CE:C2:B0:33:07:34:8D
X509v3 Authority Key Identifier:
keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:27:50:c4:f3:03:d9:eb:d6:08:65:05:d3:77:b6:86:94:7b:
37:af:31:9a:86:cc:fd:b5:8a:11:14:c5:d6:97:14:9d:a5:7b:
ae:e3:e7:0e:31:70:88:7c:ca:11:e7:46:90:0b:08:3b:d1:df:
72:c0:7e:b1:46:4f:22:ee:ee:ae:47:19:24:f3:0a:f5:83:de:
c8:25:d0:a7:91:be:05:6e:86:37:7d:63:d9:31:54:01:cc:c5:
f1:6b:88:6d:9f:54:92:c3:9f:5a:0f:4c:ef:68:34:c7:8b:46:
1d:98:40:51:1b:f7:b5:9e:d1:87:ff:2b:dc:c1:f9:74:32:26:
bb:af:b0:2e:24:3f:7c:c4:d0:97:8b:eb:b2:d5:12:c0:e7:f3:
b5:1c:0a:cc:74:29:5e:7c:de:ef:1c:d9:36:44:1f:bc:4b:af:
62:8b:7c:0c:dd:cf:cf:cd:e3:9d:eb:21:21:42:e9:11:7c:95:
1e:9b:29:d5:ed:87:95:a5:7f:5f:c9:55:21:b2:7a:22:33:91:
40:12:13:e5:39:2d:bd:10:06:94:0d:3e:25:aa:bd:79:3e:7c:
ee:16:12:ac:18:04:6d:74:ce:b9:ec:47:cf:08:f7:bd:eb:7d:
59:3a:31:44:38:5a:4c:4a:74:3f:84:cb:5f:7c:35:1c:22:9b:
31:1a:25:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//jYh5PVE6wIubY+NQ23SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYTAyNzA1MDA2NTMyZWYzM2EwMDY0Zjg3NWExMDA5MjM1
MDlmZDUwHhcNMjUxMDIwMDUwMTEzWhcNMjUxMDIxMDUwMTEzWjAzMTEwLwYDVQQD
Eyg5OWQzMWM1YzVmMTI5NzEzMjQxNTdlNTk0ZGNlYzJiMDMzMDczNDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+jHuDFr4DuZ7T1f/xKGKHHFpc4V
G+o4FPxnh83kLZEH/s/cPOmmWWtLtko1N/SZEqehcoaDY3o5mORm6vRm7BTV5s3a
ZzX/MDAncQ7SwmB9BeHOmWmbJE2A0M3W8CuDV8TuAjVhDVcBmSJmqxRc+B0K/1sK
UWxe8rIm98c2Wv3ZMTySDxhLGPVVicIBG2fhjiGF+co7BGJka4f/GbAcCe22JCFF
lzyPHDv26ZS6rKXWPVnvCFIjcUfps/um17D/INV2ovKW3wVR3ytAoq0Akx4/c1XR
X7re3/wCwLJBth+iDmQDACwOyCqIJ375qJYUeysMo7yaAL6j61rWDDPBqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnTHFxfEpcTJBV+WU3OwrAzBzSNMB8GA1UdIwQY
MBaAFJCgJwUAZTLvM6AGT4daEAkjUJ/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kOWY0ODItMTM1ZS00N2Y2LTkzMTct
Njc4NWFkYTUyN2MxLzEva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kOWY0ODItMTM1ZS00N2Y2LTkzMTctNjc4NWFkYTUyN2Mx
LzEva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACidQxPMD
2evWCGUF03e2hpR7N68xmobM/bWKERTF1pcUnaV7ruPnDjFwiHzKEedGkAsIO9Hf
csB+sUZPIu7urkcZJPMK9YPeyCXQp5G+BW6GN31j2TFUAczF8WuIbZ9UksOfWg9M
72g0x4tGHZhAURv3tZ7Rh/8r3MH5dDImu6+wLiQ/fMTQl4vrstUSwOfztRwKzHQp
Xnze7xzZNkQfvEuvYot8DN3Pz83jneshIULpEXyVHpsp1e2HlaV/X8lVIbJ6IjOR
QBIT5TktvRAGlA0+Jaq9eT587hYSrBgEbXTOuexHzwj3vet9WToxRDhaTEp0P4TL
X3w1HCKbMRol3Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:02:46 2025 by rpki-client