Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
File: KjbWeMS7ysJK5r6pokyZXEjVk_A.mft (raw, json)
Hash identifier: 2yyDE5n0FoRHoIdt44V56YJ03rW+sR0VC4Dr1xNNSpE=
Subject key identifier: 5A:F5:87:C6:31:19:FB:55:08:1B:02:8B:F3:28:C1:F2:8C:A1:6A:71
Authority key identifier: 2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
Certificate issuer: /CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Certificate serial: 0199FF5990C5BDF8F15931BCD9D360B467BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 02:01:23 +0000
Manifest this update: Mon 20 Oct 2025 02:01:23 +0000
Manifest next update: Tue 21 Oct 2025 02:01:23 +0000
Files and hashes: 1: KjbWeMS7ysJK5r6pokyZXEjVk_A.crl (hash: Ws76cRyKWxg+vHhGz65g5BJDuVoRMz+5AqzHAvLEsUo=)
2: zK1LIZGeSSnaNXNW0qcn6w1MLCU.roa (hash: e8RwpvlrpxWqEOoeavX1Cyz9aTwhsZ8GdJGcHGa5+Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:90:c5:bd:f8:f1:59:31:bc:d9:d3:60:b4:67:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Validity
Not Before: Oct 20 02:01:23 2025 GMT
Not After : Oct 21 02:01:23 2025 GMT
Subject: CN=5af587c63119fb55081b028bf328c1f28ca16a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:5c:f3:00:a6:d5:d6:d8:ed:1c:07:82:36:
7e:6f:95:36:d9:79:18:8a:5f:80:64:b5:61:a5:4d:
3f:7b:e8:3c:b9:bf:c3:a0:bf:28:19:5c:ab:26:2c:
04:20:1a:7d:b4:79:42:bf:cf:4e:da:f0:1a:6c:44:
0a:37:74:f2:33:2a:5b:84:2e:ef:ce:65:ed:dc:dd:
ac:e6:43:f4:f1:1f:46:8e:66:09:23:d7:be:d0:a5:
bd:3e:cc:71:4a:15:95:7b:05:e5:a0:c2:05:49:c3:
21:a6:dd:1c:d9:29:89:2d:e5:f7:d8:bf:2c:cf:d9:
fb:03:40:48:0b:ec:e8:69:70:15:a6:3a:76:a9:2e:
5b:09:ea:c8:e0:f3:dc:57:a0:bb:aa:ae:fa:c2:82:
54:19:a2:93:f1:e8:ca:b8:42:87:b7:b3:80:51:b6:
b9:b2:35:d2:85:21:16:73:0a:0e:84:03:60:f7:48:
9b:3e:b9:3e:56:a6:ab:5f:b1:ae:56:1b:3d:18:97:
37:94:a0:54:87:91:ad:6c:9a:fb:c4:0e:ad:a0:46:
70:d5:07:42:6b:68:6f:2b:c3:9c:99:da:14:54:65:
34:97:a4:95:cf:df:cc:c9:7c:30:0a:bb:d8:ef:d2:
eb:f8:12:c0:57:50:36:32:33:ec:ae:15:06:21:67:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F5:87:C6:31:19:FB:55:08:1B:02:8B:F3:28:C1:F2:8C:A1:6A:71
X509v3 Authority Key Identifier:
keyid:2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:27:7f:9a:a8:71:51:73:dc:70:a2:02:7a:ad:70:65:46:bf:
c2:03:ea:6b:de:1d:fc:bd:fe:0d:df:e0:fa:9f:f9:50:10:06:
91:56:23:c4:e8:09:ea:ed:83:05:71:a9:53:d6:92:58:42:c7:
24:52:ac:f7:8d:16:fa:15:4d:b0:c5:39:b0:a0:2b:24:cc:59:
ab:60:93:13:b3:98:27:bc:8e:49:91:b1:f1:3b:dd:d0:1b:5c:
a4:34:ff:8e:1d:02:24:58:5d:2f:cc:ac:41:a8:41:83:28:b2:
59:e3:f7:b2:31:11:27:c0:f6:c8:e7:3f:c0:3e:4f:f7:89:e5:
e7:66:89:c4:40:5a:1f:e7:63:90:65:85:f0:2a:8d:7b:4c:c5:
7d:7a:dc:ce:91:3c:3d:6a:86:13:60:f1:1f:76:a2:b2:18:ce:
f1:90:14:28:fa:d2:15:9c:71:b3:f5:ad:61:fb:ee:43:52:20:
4a:f0:c9:37:d5:94:6f:a3:c4:99:13:eb:fa:62:54:c2:1a:50:
e4:ee:ef:b1:21:40:82:35:68:4d:69:1f:7a:37:c8:5e:b6:7e:
b6:7f:34:6e:70:6b:2e:39:ab:b6:40:37:6c:60:86:78:a6:62:
56:55:7d:e2:a6:7a:a8:88:00:32:04:81:3b:ec:52:bc:6a:cd:
95:1e:04:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WZDFvfjxWTG82dNgtGe8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMzZkNjc4YzRiYmNhYzI0YWU2YmVhOWEyNGM5OTVjNDhk
NTkzZjAwHhcNMjUxMDIwMDIwMTIzWhcNMjUxMDIxMDIwMTIzWjAzMTEwLwYDVQQD
Eyg1YWY1ODdjNjMxMTlmYjU1MDgxYjAyOGJmMzI4YzFmMjhjYTE2YTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDVc8wCm1dbY7RwHgjZ+b5U22XkY
il+AZLVhpU0/e+g8ub/DoL8oGVyrJiwEIBp9tHlCv89O2vAabEQKN3TyMypbhC7v
zmXt3N2s5kP08R9GjmYJI9e+0KW9PsxxShWVewXloMIFScMhpt0c2SmJLeX32L8s
z9n7A0BIC+zoaXAVpjp2qS5bCerI4PPcV6C7qq76woJUGaKT8ejKuEKHt7OAUba5
sjXShSEWcwoOhANg90ibPrk+VqarX7GuVhs9GJc3lKBUh5GtbJr7xA6toEZw1QdC
a2hvK8OcmdoUVGU0l6SVz9/MyXwwCrvY79Lr+BLAV1A2MjPsrhUGIWcCwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFr1h8YxGftVCBsCi/MowfKMoWpxMB8GA1UdIwQY
MBaAFCo21njEu8rCSua+qaJMmVxI1ZPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2piV2VNUzd5c0pLNXI2cG9reVpYRWpWa19BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9hMDFmZDMtYTg2Ny00MmM2LTlhMGUt
ZGY2NTFiOTY2YjJiLzEvS2piV2VNUzd5c0pLNXI2cG9reVpYRWpWa19BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9hMDFmZDMtYTg2Ny00MmM2LTlhMGUtZGY2NTFiOTY2YjJi
LzEvS2piV2VNUzd5c0pLNXI2cG9reVpYRWpWa19BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByd/mqhx
UXPccKICeq1wZUa/wgPqa94d/L3+Dd/g+p/5UBAGkVYjxOgJ6u2DBXGpU9aSWELH
JFKs940W+hVNsMU5sKArJMxZq2CTE7OYJ7yOSZGx8Tvd0BtcpDT/jh0CJFhdL8ys
QahBgyiyWeP3sjERJ8D2yOc/wD5P94nl52aJxEBaH+djkGWF8CqNe0zFfXrczpE8
PWqGE2DxH3aishjO8ZAUKPrSFZxxs/WtYfvuQ1IgSvDJN9WUb6PEmRPr+mJUwhpQ
5O7vsSFAgjVoTWkfejfIXrZ+tn80bnBrLjmrtkA3bGCGeKZiVlV94qZ6qIgAMgSB
O+xSvGrNlR4Eqw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:39 2025 by rpki-client