Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
File: k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json)
Hash identifier: ZcHBKe1uUCFUQ2T0Qj7isLjNvsx2m/cKKnXswJlfKtQ=
Subject key identifier: 3B:E5:7B:F7:17:F7:E1:34:7B:04:2B:91:22:5E:D9:DC:A1:E7:36:50
Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
Certificate issuer: /CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Certificate serial: 0199FDDA180B70CE8A4C87747B6165EBA11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
Manifest number: 0842
Signing time: Sun 19 Oct 2025 19:02:32 +0000
Manifest this update: Sun 19 Oct 2025 19:02:32 +0000
Manifest next update: Mon 20 Oct 2025 19:02:32 +0000
Files and hashes: 1: GdYDqrOhgB8exVYYyIqPRX61C-I.roa (hash: NWfhvpFN96SLGPQqqCOWVE/72vTziFHwtrYFSPDHX60=)
2: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: SnRJxONCREu58bYyGtbZ0+li3uYRTw+yictYj+AM4c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:18:0b:70:ce:8a:4c:87:74:7b:61:65:eb:a1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Validity
Not Before: Oct 19 19:02:32 2025 GMT
Not After : Oct 20 19:02:32 2025 GMT
Subject: CN=3be57bf717f7e1347b042b91225ed9dca1e73650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:1f:95:8b:35:38:84:2f:dc:8f:d3:06:ab:
c5:51:3c:94:b7:32:0e:41:38:31:fc:6e:04:6d:ca:
9a:8e:e1:a9:06:46:6f:ee:2d:92:2a:34:10:4e:35:
cd:4b:20:77:ba:cf:3a:8b:61:3b:92:62:97:e3:1a:
96:72:9f:8b:41:1b:c4:c9:12:67:18:1f:8b:f2:25:
da:77:a0:07:c1:12:c1:ae:ea:2d:13:f5:51:77:1c:
aa:34:1a:0b:e8:e2:1e:5b:de:7d:91:bc:f6:37:3b:
30:d8:48:46:3f:26:6b:25:9a:9d:01:31:2c:4a:66:
17:a9:b7:ce:a5:55:f6:02:74:bd:29:2e:fa:f9:4a:
2b:d9:ee:d7:cd:56:6b:9d:2a:ff:75:26:f7:fa:77:
18:31:07:13:06:07:26:bc:46:6f:49:2d:23:b3:d4:
8c:dc:f6:c0:cd:bf:a6:3b:2c:ea:14:c0:e2:a0:bd:
57:3c:54:7d:69:6c:e7:82:ef:e3:c9:14:ca:55:7c:
e8:25:3f:a2:8e:c3:44:b5:b0:39:c0:9b:7a:73:2f:
92:c1:09:88:44:80:75:c4:03:ae:a8:39:4b:9b:45:
09:24:7a:92:d0:aa:38:0a:f6:f7:9d:db:69:d4:77:
53:1a:b8:97:41:6e:b2:2a:dd:ae:08:d4:eb:89:aa:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E5:7B:F7:17:F7:E1:34:7B:04:2B:91:22:5E:D9:DC:A1:E7:36:50
X509v3 Authority Key Identifier:
keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:51:07:6c:20:45:9f:6f:a9:2c:ba:e5:ce:86:21:1c:e2:35:
5d:35:d8:13:50:81:ba:fa:36:81:86:3e:0d:82:8c:fc:75:4a:
cc:b2:29:0a:2e:04:16:d4:7a:a5:99:85:c2:59:f3:07:bd:5f:
d0:bf:be:e1:b1:fa:43:56:6d:fc:2c:d6:de:bd:28:26:31:ea:
38:bf:4a:e3:44:e3:6d:38:2b:c3:f5:68:62:ad:85:aa:44:1f:
90:70:a8:96:3f:80:e2:25:7e:44:da:3e:2a:35:c3:f9:a2:e9:
72:96:32:fc:d4:d4:50:4e:d3:0e:bf:e0:7d:cd:19:b7:5d:32:
fa:eb:c1:51:06:d3:53:06:3d:7c:cb:76:d5:13:8d:ed:22:81:
b3:c7:23:d7:7d:95:28:89:42:95:1c:da:03:8a:6d:6e:b2:c4:
29:63:8e:ba:21:ae:d3:c4:26:88:66:1a:42:4e:4c:ad:ff:35:
60:64:4c:ec:e1:22:31:af:3a:e7:b9:1d:c3:08:45:e8:61:fb:
b3:bb:4a:bc:04:94:13:a9:3e:f3:96:7d:50:2d:15:94:32:16:
55:fc:da:27:f8:c1:e3:2b:8e:61:5d:55:20:15:ad:55:f9:0b:
b4:ca:01:1b:a5:62:3a:f0:a9:ed:31:63:8c:e6:32:45:34:db:
1a:1f:f5:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92hgLcM6KTId0e2Fl66EaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzOGEyZDcyZTc5MDI2ZjUyYmY1NjU3ZTk3ZmZkMWIxMWJl
ODg2NDEwHhcNMjUxMDE5MTkwMjMyWhcNMjUxMDIwMTkwMjMyWjAzMTEwLwYDVQQD
EygzYmU1N2JmNzE3ZjdlMTM0N2IwNDJiOTEyMjVlZDlkY2ExZTczNjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3IflYs1OIQv3I/TBqvFUTyUtzIO
QTgx/G4EbcqajuGpBkZv7i2SKjQQTjXNSyB3us86i2E7kmKX4xqWcp+LQRvEyRJn
GB+L8iXad6AHwRLBruotE/VRdxyqNBoL6OIeW959kbz2Nzsw2EhGPyZrJZqdATEs
SmYXqbfOpVX2AnS9KS76+Uor2e7XzVZrnSr/dSb3+ncYMQcTBgcmvEZvSS0js9SM
3PbAzb+mOyzqFMDioL1XPFR9aWzngu/jyRTKVXzoJT+ijsNEtbA5wJt6cy+SwQmI
RIB1xAOuqDlLm0UJJHqS0Ko4Cvb3ndtp1HdTGriXQW6yKt2uCNTriaqCFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvle/cX9+E0ewQrkSJe2dyh5zZQMB8GA1UdIwQY
MBaAFJOKLXLnkCb1K/Vlfpf/0bEb6IZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazRvdGN1ZVFKdlVyOVdWLWxfX1JzUnZvaGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ZjdkMzctYTc0MC00MmIwLWFjZDAt
YzM2OTc2MzYzOTY4LzEvazRvdGN1ZVFKdlVyOVdWLWxfX1JzUnZvaGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84ZjdkMzctYTc0MC00MmIwLWFjZDAtYzM2OTc2MzYzOTY4
LzEvazRvdGN1ZVFKdlVyOVdWLWxfX1JzUnZvaGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1EHbCBF
n2+pLLrlzoYhHOI1XTXYE1CBuvo2gYY+DYKM/HVKzLIpCi4EFtR6pZmFwlnzB71f
0L++4bH6Q1Zt/CzW3r0oJjHqOL9K40TjbTgrw/VoYq2FqkQfkHColj+A4iV+RNo+
KjXD+aLpcpYy/NTUUE7TDr/gfc0Zt10y+uvBUQbTUwY9fMt21RON7SKBs8cj132V
KIlClRzaA4ptbrLEKWOOuiGu08QmiGYaQk5Mrf81YGRM7OEiMa8657kdwwhF6GH7
s7tKvASUE6k+85Z9UC0VlDIWVfzaJ/jB4yuOYV1VIBWtVfkLtMoBG6ViOvCp7TFj
jOYyRTTbGh/13g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:12 2025 by rpki-client