Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
File: Kf5mFpV0HYXP7c9v-890aZlZVp8.mft (raw, json)
Hash identifier: zNmxFyS5s4AZzshewgPZ/uiJYEbqqUN1aQRILHfr4Wg=
Subject key identifier: FF:F1:45:B2:C9:8C:B1:59:C9:75:89:2D:0F:FC:6E:DA:19:35:90:9A
Authority key identifier: 29:FE:66:16:95:74:1D:85:CF:ED:CF:6F:FB:CF:74:69:99:59:56:9F
Certificate issuer: /CN=29fe661695741d85cfedcf6ffbcf74699959569f
Certificate serial: 0199FDDA54AC3E12BA2169C0C9C6B40127AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:02:48 +0000
Manifest this update: Sun 19 Oct 2025 19:02:48 +0000
Manifest next update: Mon 20 Oct 2025 19:02:48 +0000
Files and hashes: 1: Kf5mFpV0HYXP7c9v-890aZlZVp8.crl (hash: ekjnvgf00Lc24t11wvQmAYxdT+HmO2LD8T7q+bjAF1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:54:ac:3e:12:ba:21:69:c0:c9:c6:b4:01:27:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe661695741d85cfedcf6ffbcf74699959569f
Validity
Not Before: Oct 19 19:02:48 2025 GMT
Not After : Oct 20 19:02:48 2025 GMT
Subject: CN=fff145b2c98cb159c975892d0ffc6eda1935909a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:ea:4d:e6:a1:8f:3f:aa:10:b7:b7:21:3c:
f7:55:47:1c:f5:82:32:ec:36:23:77:7f:78:b8:74:
bd:d9:aa:ab:25:57:7b:fc:38:bd:e5:89:07:b6:7c:
10:5f:48:5d:35:03:de:06:cd:54:e9:11:09:d5:4a:
dd:a6:33:ff:95:ba:17:5e:2f:01:e0:f4:0e:05:9c:
16:80:8c:de:ff:50:02:c2:6d:fc:5d:ee:c2:65:64:
b7:8f:8f:78:73:88:1b:20:0d:0f:96:eb:09:64:3d:
83:eb:36:5f:2e:14:61:1c:93:59:e2:4f:60:39:c3:
90:f8:58:3f:3f:5d:9b:5d:17:ce:94:38:ed:1b:4b:
a3:93:48:f8:27:2e:63:81:27:a9:65:ad:20:14:44:
df:31:99:1c:96:86:cf:86:51:c4:07:ac:6d:21:fa:
ea:43:5a:11:61:a7:08:a0:8a:05:85:f0:73:25:2e:
2a:10:7f:79:64:88:fd:0c:74:53:13:a4:a9:ca:33:
db:db:fd:66:f1:f4:4b:94:8d:6c:66:be:14:2c:81:
a4:77:a6:6e:90:3a:88:3c:71:64:cd:51:5e:cc:1c:
a6:4e:0a:76:29:a3:4b:94:a9:2f:c4:05:a1:68:01:
54:dc:29:ba:5f:41:0d:ae:d5:25:72:74:da:0b:70:
98:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F1:45:B2:C9:8C:B1:59:C9:75:89:2D:0F:FC:6E:DA:19:35:90:9A
X509v3 Authority Key Identifier:
keyid:29:FE:66:16:95:74:1D:85:CF:ED:CF:6F:FB:CF:74:69:99:59:56:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:03:6c:20:ae:4c:db:1e:bd:65:e1:38:3f:92:b6:23:6c:38:
30:87:b0:33:f5:97:cd:ea:62:0d:76:40:81:c4:96:59:65:04:
58:c4:e3:65:e1:fd:d6:c8:b5:94:0b:7d:1c:e3:a2:b4:6c:3f:
27:2b:3b:a1:67:f8:fa:68:74:a7:b2:7f:57:70:2c:32:04:2f:
dd:0a:43:96:db:2c:17:18:13:90:1e:97:0c:fa:53:02:c4:65:
8a:09:47:5d:32:04:50:d4:f4:99:6e:3b:67:46:bf:4e:7c:51:
29:23:82:b8:89:d8:78:ee:92:79:ce:b4:59:3c:ae:fd:c4:02:
7c:cb:a9:73:45:45:94:fc:ce:4c:c5:8d:0d:d0:e1:df:ab:75:
f2:64:3d:34:86:f0:0b:e9:aa:c2:e0:c6:e3:68:22:de:74:58:
e1:42:6d:24:ca:91:a1:d0:35:3d:aa:4b:b3:de:34:71:1a:27:
6f:0c:7e:bf:be:83:3e:b2:01:3d:b1:f4:8b:99:35:b2:6a:e6:
c2:fe:33:a4:56:5b:7d:5c:b5:c6:31:62:30:2e:3c:21:9f:bf:
f2:4a:c9:46:15:11:de:bc:9f:1f:b8:3d:fe:0f:e8:7b:8c:ed:
b1:ba:6b:ca:10:9f:67:33:ba:79:67:c0:a4:4d:0b:46:77:f8:
4b:b7:78:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92lSsPhK6IWnAyca0ASetMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZmU2NjE2OTU3NDFkODVjZmVkY2Y2ZmZiY2Y3NDY5OTk1
OTU2OWYwHhcNMjUxMDE5MTkwMjQ4WhcNMjUxMDIwMTkwMjQ4WjAzMTEwLwYDVQQD
EyhmZmYxNDViMmM5OGNiMTU5Yzk3NTg5MmQwZmZjNmVkYTE5MzU5MDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE3qTeahjz+qELe3ITz3VUcc9YIy
7DYjd394uHS92aqrJVd7/Di95YkHtnwQX0hdNQPeBs1U6REJ1UrdpjP/lboXXi8B
4PQOBZwWgIze/1ACwm38Xe7CZWS3j494c4gbIA0PlusJZD2D6zZfLhRhHJNZ4k9g
OcOQ+Fg/P12bXRfOlDjtG0ujk0j4Jy5jgSepZa0gFETfMZkclobPhlHEB6xtIfrq
Q1oRYacIoIoFhfBzJS4qEH95ZIj9DHRTE6SpyjPb2/1m8fRLlI1sZr4ULIGkd6Zu
kDqIPHFkzVFezBymTgp2KaNLlKkvxAWhaAFU3Cm6X0ENrtUlcnTaC3CYIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/xRbLJjLFZyXWJLQ/8btoZNZCaMB8GA1UdIwQY
MBaAFCn+ZhaVdB2Fz+3Pb/vPdGmZWVafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2Y1bUZwVjBIWVhQN2M5di04OTBhWmxaVnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi81MWVjYzktNTY4MS00YjAyLTlkYjgt
MmU4ODBhN2E4MmNhLzEvS2Y1bUZwVjBIWVhQN2M5di04OTBhWmxaVnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi81MWVjYzktNTY4MS00YjAyLTlkYjgtMmU4ODBhN2E4MmNh
LzEvS2Y1bUZwVjBIWVhQN2M5di04OTBhWmxaVnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgNsIK5M
2x69ZeE4P5K2I2w4MIewM/WXzepiDXZAgcSWWWUEWMTjZeH91si1lAt9HOOitGw/
Jys7oWf4+mh0p7J/V3AsMgQv3QpDltssFxgTkB6XDPpTAsRliglHXTIEUNT0mW47
Z0a/TnxRKSOCuInYeO6Sec60WTyu/cQCfMupc0VFlPzOTMWNDdDh36t18mQ9NIbw
C+mqwuDG42gi3nRY4UJtJMqRodA1PapLs940cRonbwx+v76DPrIBPbH0i5k1smrm
wv4zpFZbfVy1xjFiMC48IZ+/8krJRhUR3ryfH7g9/g/oe4ztsbpryhCfZzO6eWfA
pE0LRnf4S7d4PA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:24 2025 by rpki-client