Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
File: K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json)
Hash identifier: EYRkn8a8OBN90oSsZ/j2MnhdRdKPcfh/BAPf9i3XfQY=
Subject key identifier: 71:E9:DE:BA:BE:59:0E:19:0B:EF:E2:16:2E:C0:88:84:8B:8E:94:8E
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 0199FC58D13F4DBCA45F9A5E515F2A270B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
Manifest number: 156D
Signing time: Sun 19 Oct 2025 12:01:43 +0000
Manifest this update: Sun 19 Oct 2025 12:01:43 +0000
Manifest next update: Mon 20 Oct 2025 12:01:43 +0000
Files and hashes: 1: 7fMcRpn_4NUKYhcILzNUoH1_qFA.roa (hash: ynbImDmPPvdsLOmMwreWm0bsw2CgIBop1J57NfAEBV8=)
2: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: Xst54zIGEWyRVAig65J0nLN6SrxwEq0m1PL+m/VeeYA=)
3: SG-oYWBeZ8PdnxfhbLJBRMxInjk.roa (hash: IQmUUHJFzP7J5Wi5OG22cXQ7JSU97X0TL3RWD8DykE4=)
4: Z2dM55D00aW3RfIUxB7Cn0s3y18.roa (hash: r2sGLOuiB3Y67DgBocYW+k6Ki76Sz1ifvXri1YzDX/Q=)
5: ahgAUM5M5NZzfBW0iQqq_x4yTBk.roa (hash: tYZ97cgI+SOXirQ9qolsOlp5bgffydesZkrQgwP6yTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d1:3f:4d:bc:a4:5f:9a:5e:51:5f:2a:27:0b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Oct 19 12:01:43 2025 GMT
Not After : Oct 20 12:01:43 2025 GMT
Subject: CN=71e9debabe590e190befe2162ec088848b8e948e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4b:61:5e:83:bc:0b:7c:fe:6a:ff:9b:07:11:
b6:c8:87:ee:ab:1a:3d:5e:cf:7a:b0:35:98:db:fe:
ed:a7:6a:7e:ba:0c:0a:9e:55:6e:77:70:87:44:57:
b1:50:63:ce:5b:73:74:67:1c:eb:7e:89:ec:a3:26:
61:84:05:be:78:ce:48:1e:11:0c:d1:46:03:16:29:
bf:f0:69:27:fd:b2:75:be:04:de:fc:c8:6e:c2:7f:
c1:a6:d0:75:f9:e3:3c:07:62:c4:90:12:36:bf:33:
21:1f:ea:65:00:62:f0:06:49:a7:e8:34:f3:7c:22:
17:ee:27:6c:b2:1f:cf:ef:7f:5f:7e:90:fb:67:70:
61:1d:44:fb:02:ab:6e:54:b1:23:8e:c1:67:d1:fb:
85:1c:02:0d:65:61:ea:26:ce:20:0c:3f:47:18:80:
00:85:f7:1a:c8:a7:03:bd:46:ec:07:f6:95:e4:b6:
f6:d1:6a:79:ed:6c:fa:a7:2b:3c:c3:ec:10:ff:a5:
5a:b2:5f:2c:45:83:6a:db:06:27:5a:c6:69:73:26:
f9:d2:04:a8:aa:e6:22:f2:76:1d:36:23:9e:75:c7:
37:9d:2e:47:38:f3:ad:0e:3b:95:71:e2:29:95:fa:
f7:38:41:ae:fb:a2:e2:f1:f2:b7:62:6b:30:b1:a3:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E9:DE:BA:BE:59:0E:19:0B:EF:E2:16:2E:C0:88:84:8B:8E:94:8E
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:99:d5:c5:97:c5:67:2a:d3:33:18:f1:2f:63:49:cc:80:45:
af:8f:88:1c:5b:bb:84:8f:85:1a:25:e2:56:e4:c0:d7:14:be:
f6:ad:89:b4:f8:e5:68:04:5f:2f:45:87:b7:4f:99:d2:d9:44:
d0:4f:41:95:44:92:7a:8b:ac:8b:2d:d4:7f:de:4d:99:7b:e6:
66:c2:52:65:59:6d:9a:11:a9:39:ac:1e:ea:1d:ce:10:c5:12:
b4:56:89:88:14:ce:e6:89:67:08:9f:c7:4f:d5:02:2b:55:c0:
ec:0b:a3:40:c4:cf:b7:28:7e:a6:d0:ad:eb:c3:f0:66:9e:71:
5f:63:d0:30:9c:7b:e5:ae:30:e7:cc:8f:db:ee:7f:8c:3d:8a:
bd:13:43:c2:dc:96:ea:cc:94:5f:eb:be:cb:6d:b6:78:63:ab:
18:4f:37:86:50:78:e8:d2:dd:b9:a2:bc:58:c4:a5:75:e7:41:
93:1c:7f:ee:96:72:7a:5a:18:e3:67:c3:77:4d:10:42:16:42:
e0:3d:d3:2b:98:55:2e:f1:bc:bd:bc:94:d4:7b:37:10:f4:c4:
ed:c5:63:0f:ef:a7:0f:fc:47:bc:f5:cd:fd:e0:32:c0:30:86:
d5:7a:61:aa:3d:87:99:e4:5e:8b:71:bc:6d:1d:5f:94:96:0c:
02:b0:1d:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WNE/TbykX5peUV8qJwuZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYTFjZmQ3NTdmNTFmMmZlYjc0NTA5ZTljMzliZTQ2ODA2
YmU2NDIwHhcNMjUxMDE5MTIwMTQzWhcNMjUxMDIwMTIwMTQzWjAzMTEwLwYDVQQD
Eyg3MWU5ZGViYWJlNTkwZTE5MGJlZmUyMTYyZWMwODg4NDhiOGU5NDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kthXoO8C3z+av+bBxG2yIfuqxo9
Xs96sDWY2/7tp2p+ugwKnlVud3CHRFexUGPOW3N0ZxzrfonsoyZhhAW+eM5IHhEM
0UYDFim/8Gkn/bJ1vgTe/Mhuwn/BptB1+eM8B2LEkBI2vzMhH+plAGLwBkmn6DTz
fCIX7idssh/P739ffpD7Z3BhHUT7AqtuVLEjjsFn0fuFHAINZWHqJs4gDD9HGIAA
hfcayKcDvUbsB/aV5Lb20Wp57Wz6pys8w+wQ/6Vasl8sRYNq2wYnWsZpcyb50gSo
quYi8nYdNiOedcc3nS5HOPOtDjuVceIplfr3OEGu+6Li8fK3YmswsaOdwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHp3rq+WQ4ZC+/iFi7AiISLjpSOMB8GA1UdIwQY
MBaAFCuhz9dX9R8v63RQnpw5vkaAa+ZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUt
NTc4OWRlNDI0YTQyLzEvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUtNTc4OWRlNDI0YTQy
LzEvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5nVxZfF
ZyrTMxjxL2NJzIBFr4+IHFu7hI+FGiXiVuTA1xS+9q2JtPjlaARfL0WHt0+Z0tlE
0E9BlUSSeousiy3Uf95NmXvmZsJSZVltmhGpOawe6h3OEMUStFaJiBTO5olnCJ/H
T9UCK1XA7AujQMTPtyh+ptCt68PwZp5xX2PQMJx75a4w58yP2+5/jD2KvRNDwtyW
6syUX+u+y222eGOrGE83hlB46NLduaK8WMSldedBkxx/7pZyeloY42fDd00QQhZC
4D3TK5hVLvG8vbyU1Hs3EPTE7cVjD++nD/xHvPXN/eAywDCG1Xphqj2HmeRei3G8
bR1flJYMArAdgw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:44 2025 by rpki-client