Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft
File: kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft (raw, json)
Hash identifier: q/EKIrAGjIGR3aZQ4t1+uhgdURiS+wzUz5DeILubDDI=
Subject key identifier: 4C:AB:41:69:73:B4:17:87:6B:2F:DF:59:FA:03:1A:A3:23:D4:B3:70
Authority key identifier: 90:7D:02:30:4A:8A:06:30:AF:E6:A9:85:E4:DC:09:00:78:51:F8:39
Certificate issuer: /CN=907d02304a8a0630afe6a985e4dc09007851f839
Certificate serial: 0199FB7D02D3A8827C7D146BD5C7328385C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft
Manifest number: 5B
Signing time: Sun 19 Oct 2025 08:01:37 +0000
Manifest this update: Sun 19 Oct 2025 08:01:37 +0000
Manifest next update: Mon 20 Oct 2025 08:01:37 +0000
Files and hashes: 1: kH0CMEqKBjCv5qmF5NwJAHhR-Dk.crl (hash: fux7IT8ThdBDw5bOkTKEGwmYDJ2nCLV1LgUCpS+MbyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:02:d3:a8:82:7c:7d:14:6b:d5:c7:32:83:85:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907d02304a8a0630afe6a985e4dc09007851f839
Validity
Not Before: Oct 19 08:01:37 2025 GMT
Not After : Oct 20 08:01:37 2025 GMT
Subject: CN=4cab416973b417876b2fdf59fa031aa323d4b370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:cd:a3:8d:48:c4:31:c5:21:f0:7d:fa:f8:
af:5d:41:d0:e1:6f:72:28:ea:5b:3e:5e:c7:42:fd:
99:18:63:83:10:68:82:21:a4:11:69:0c:f6:be:b3:
0c:c4:da:7d:3a:32:70:2f:9b:01:87:d3:3a:89:48:
51:f5:07:71:3b:46:7c:92:a5:cc:29:99:40:6d:88:
46:37:43:2f:c5:a9:06:cb:66:49:7c:3c:54:70:92:
0e:d4:2e:84:5c:9d:52:c4:e3:ba:c5:d8:3d:2c:ba:
ce:72:c7:59:b5:11:28:52:b7:1d:50:4e:96:4d:83:
82:8f:15:e3:4a:fe:50:44:dc:aa:b5:f8:a5:f8:b0:
e7:be:5a:a0:06:13:57:5a:36:fe:0f:f0:d1:c7:3a:
a6:e7:b6:f7:ac:bf:8c:a6:1c:9f:39:3c:8f:ef:b6:
4f:67:cf:cf:d9:f0:9f:00:ef:b8:e6:d4:95:45:43:
1c:11:58:07:93:b1:38:bb:50:43:d5:98:11:5a:b9:
97:4c:b5:15:7d:e1:67:cd:dc:f4:f3:d1:e8:67:5a:
cf:cf:2b:43:41:70:54:3e:1a:10:1c:e0:b7:3c:5f:
ea:f4:d7:6b:db:25:86:f3:fc:28:ef:54:ed:bd:fd:
86:f6:d6:f8:dc:d2:3d:f7:b9:59:a7:58:e2:45:bd:
60:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AB:41:69:73:B4:17:87:6B:2F:DF:59:FA:03:1A:A3:23:D4:B3:70
X509v3 Authority Key Identifier:
keyid:90:7D:02:30:4A:8A:06:30:AF:E6:A9:85:E4:DC:09:00:78:51:F8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3b:2f:51:f1:72:e7:60:2b:66:b2:b5:29:d8:1f:e5:29:30:
d1:60:c2:3a:69:4d:11:ad:8c:46:2c:e6:f5:0e:8f:9f:9c:fa:
b5:b8:69:27:14:08:15:a3:10:6b:67:15:cf:a9:7e:6d:38:fd:
b4:9b:c3:7d:84:90:90:60:5c:69:64:cd:b4:d7:14:09:97:51:
23:ef:87:d4:ca:b9:5f:b1:6a:71:12:8c:11:b7:1a:e3:b4:64:
3c:59:b1:2d:b0:7a:b5:7d:f5:08:0a:fb:42:4d:d3:08:9e:cd:
f6:a1:d9:8e:82:a9:f5:a2:d3:7e:c4:05:f9:e0:00:b6:2a:18:
3b:34:15:10:57:bc:fe:9d:c9:a1:2f:29:73:c3:21:12:e7:3e:
53:b8:e1:00:67:95:8f:35:8f:2c:e9:8d:c3:3f:be:97:ba:08:
7e:d7:61:69:2d:e2:9d:e3:4a:bf:de:6d:be:76:ed:0e:72:05:
0a:ba:f4:a8:51:8f:ac:e9:3b:d6:5a:ee:fb:4a:79:0c:47:34:
df:ca:de:0e:bd:49:cd:75:51:1e:c0:8a:df:59:9f:cf:7b:e0:
04:b8:b6:c8:64:34:b1:97:3b:ad:d8:04:d3:a7:ac:2f:2c:c6:
88:46:ed:d9:1b:56:80:30:fc:c9:73:3f:f1:1b:50:28:fe:ca:
9f:f9:87:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fQLTqIJ8fRRr1ccyg4XJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwN2QwMjMwNGE4YTA2MzBhZmU2YTk4NWU0ZGMwOTAwNzg1
MWY4MzkwHhcNMjUxMDE5MDgwMTM3WhcNMjUxMDIwMDgwMTM3WjAzMTEwLwYDVQQD
Eyg0Y2FiNDE2OTczYjQxNzg3NmIyZmRmNTlmYTAzMWFhMzIzZDRiMzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur7No41IxDHFIfB9+vivXUHQ4W9y
KOpbPl7HQv2ZGGODEGiCIaQRaQz2vrMMxNp9OjJwL5sBh9M6iUhR9QdxO0Z8kqXM
KZlAbYhGN0MvxakGy2ZJfDxUcJIO1C6EXJ1SxOO6xdg9LLrOcsdZtREoUrcdUE6W
TYOCjxXjSv5QRNyqtfil+LDnvlqgBhNXWjb+D/DRxzqm57b3rL+MphyfOTyP77ZP
Z8/P2fCfAO+45tSVRUMcEVgHk7E4u1BD1ZgRWrmXTLUVfeFnzdz089HoZ1rPzytD
QXBUPhoQHOC3PF/q9Ndr2yWG8/wo71Ttvf2G9tb43NI997lZp1jiRb1ggwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyrQWlztBeHay/fWfoDGqMj1LNwMB8GA1UdIwQY
MBaAFJB9AjBKigYwr+apheTcCQB4Ufg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0gwQ01FcUtCakN2NXFtRjVOd0pBSGhSLURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xNTcxZGQtMmU5ZS00YTUwLWI4MTIt
OTYxYTA2ZDJhY2Y0LzEva0gwQ01FcUtCakN2NXFtRjVOd0pBSGhSLURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8xNTcxZGQtMmU5ZS00YTUwLWI4MTItOTYxYTA2ZDJhY2Y0
LzEva0gwQ01FcUtCakN2NXFtRjVOd0pBSGhSLURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDsvUfFy
52ArZrK1Kdgf5Skw0WDCOmlNEa2MRizm9Q6Pn5z6tbhpJxQIFaMQa2cVz6l+bTj9
tJvDfYSQkGBcaWTNtNcUCZdRI++H1Mq5X7FqcRKMEbca47RkPFmxLbB6tX31CAr7
Qk3TCJ7N9qHZjoKp9aLTfsQF+eAAtioYOzQVEFe8/p3JoS8pc8MhEuc+U7jhAGeV
jzWPLOmNwz++l7oIftdhaS3ineNKv95tvnbtDnIFCrr0qFGPrOk71lru+0p5DEc0
38reDr1JzXVRHsCK31mfz3vgBLi2yGQ0sZc7rdgE06esLyzGiEbt2RtWgDD8yXM/
8RtQKP7Kn/mHjA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:43 2025 by rpki-client