Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json)
Hash identifier: W8MBNDMAcTa0+nVEexXcDb3yByGY1lx04tRKBeGmb7A=
Subject key identifier: BB:D1:E2:87:62:19:AA:82:B1:BC:50:97:C6:51:4B:AE:15:8C:9B:FB
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 0199FCFD81183DF31917CC1ACDD07B69FA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
Manifest number: 1378
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: 80aaQkaWWCsH78ehEPFgdZ7vJ2MvD5wAovjf351pZOU=)
2: KZGod_BqVRdmwfNvBiSAHniE4gQ.roa (hash: 6XoOJiv494XxgxSZpKNQsumj729QUswWc6xs9n2QuB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:81:18:3d:f3:19:17:cc:1a:cd:d0:7b:69:fa:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=bbd1e2876219aa82b1bc5097c6514bae158c9bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d8:0b:37:f7:f3:31:6b:dd:fe:98:66:f5:cd:
2f:68:60:09:f8:33:e4:61:0c:3a:9f:48:9d:9e:a4:
5c:cc:1d:92:d0:92:02:d3:09:1d:ed:ca:f7:ce:47:
1b:5c:24:9e:fb:9b:e7:60:77:32:03:b4:e6:73:cb:
d4:4c:4e:26:1b:b0:71:1b:6d:81:58:4b:d4:60:0b:
fa:52:8d:dc:b7:b6:0a:58:0f:0a:8f:73:1b:10:a9:
43:55:b7:44:d1:a0:e9:05:aa:83:02:f3:d4:3d:0f:
db:6b:53:88:43:67:09:ae:b5:87:0f:ce:f5:bf:68:
5b:85:2a:a8:66:4d:74:7a:b9:b1:90:2e:63:24:7a:
e7:b7:a9:cd:6c:3f:79:da:f5:8c:50:1e:e3:11:61:
fa:1d:d7:15:cd:02:3a:ad:78:f3:73:62:be:84:58:
6b:db:19:5d:ea:44:e8:70:61:81:d4:16:3e:8e:3c:
fb:fb:c4:45:b8:08:73:50:15:cd:55:17:36:56:75:
78:a8:87:70:24:43:3d:ab:44:ee:28:56:2d:62:a1:
9f:9d:b1:c6:8b:81:70:fe:83:54:8a:ac:f2:cf:9d:
18:f3:c5:9a:36:4e:f6:2d:81:36:62:4a:46:2b:89:
82:78:bb:f3:f0:b5:aa:b5:04:a4:e3:36:df:58:78:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D1:E2:87:62:19:AA:82:B1:BC:50:97:C6:51:4B:AE:15:8C:9B:FB
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8c:fb:93:19:c6:4a:45:99:39:a3:87:b2:e5:a0:d5:ea:24:
b6:c8:58:77:ab:9b:aa:62:27:cc:9a:f8:d6:a0:34:db:1e:ba:
05:2e:1b:93:68:44:95:89:70:2d:f9:8c:6b:a4:f1:66:5f:14:
97:60:91:5a:b3:40:86:cd:2d:28:94:d7:55:8e:38:77:08:d5:
9a:67:00:a7:70:23:f6:bc:1a:0c:6f:78:a8:ca:57:6d:62:2a:
1d:bc:1e:5a:4f:99:0c:6b:e3:c9:6a:29:44:dd:f0:ac:a0:75:
24:71:7f:4c:24:c1:14:11:42:03:63:ba:f6:75:05:0c:d2:c3:
60:cb:c2:dd:29:3e:c5:19:03:5b:6a:cd:cd:8c:74:d6:42:a5:
32:40:85:a3:c7:4a:9f:f2:4d:ac:d9:75:e4:ff:7c:53:b8:6b:
7f:e8:f7:93:8f:a8:db:67:00:67:39:f2:94:da:51:1e:b1:df:
df:96:ae:65:5e:11:39:ce:2a:eb:ae:b8:6a:d9:fd:44:64:d5:
de:d0:ed:71:b8:7f:d5:0c:4d:21:50:97:1f:78:25:67:7a:63:
ea:fb:9e:09:24:53:17:17:6f:92:b3:00:13:33:09:ce:07:09:
46:f0:27:a3:74:52:ab:d8:c1:bc:50:af:9e:03:fe:9f:5f:4a:
fc:20:62:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/YEYPfMZF8wazdB7afpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NGExY2RiNjhmMTU0Y2Y5NTQxOGEzMDhjODJkOGRhNTA3
NzUxMDkwHhcNMjUxMDE5MTUwMTM2WhcNMjUxMDIwMTUwMTM2WjAzMTEwLwYDVQQD
EyhiYmQxZTI4NzYyMTlhYTgyYjFiYzUwOTdjNjUxNGJhZTE1OGM5YmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotgLN/fzMWvd/phm9c0vaGAJ+DPk
YQw6n0idnqRczB2S0JIC0wkd7cr3zkcbXCSe+5vnYHcyA7Tmc8vUTE4mG7BxG22B
WEvUYAv6Uo3ct7YKWA8Kj3MbEKlDVbdE0aDpBaqDAvPUPQ/ba1OIQ2cJrrWHD871
v2hbhSqoZk10ermxkC5jJHrnt6nNbD952vWMUB7jEWH6HdcVzQI6rXjzc2K+hFhr
2xld6kTocGGB1BY+jjz7+8RFuAhzUBXNVRc2VnV4qIdwJEM9q0TuKFYtYqGfnbHG
i4Fw/oNUiqzyz50Y88WaNk72LYE2YkpGK4mCeLvz8LWqtQSk4zbfWHgMjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvR4odiGaqCsbxQl8ZRS64VjJv7MB8GA1UdIwQY
MBaAFClKHNto8VTPlUGKMIyC2NpQd1EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wNGY0NzQtZTNiNS00NTk1LWEwNDQt
NjU3ZTQxYzYzY2E5LzEvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wNGY0NzQtZTNiNS00NTk1LWEwNDQtNjU3ZTQxYzYzY2E5
LzEvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIz7kxnG
SkWZOaOHsuWg1eoktshYd6ubqmInzJr41qA02x66BS4bk2hElYlwLfmMa6TxZl8U
l2CRWrNAhs0tKJTXVY44dwjVmmcAp3Aj9rwaDG94qMpXbWIqHbweWk+ZDGvjyWop
RN3wrKB1JHF/TCTBFBFCA2O69nUFDNLDYMvC3Sk+xRkDW2rNzYx01kKlMkCFo8dK
n/JNrNl15P98U7hrf+j3k4+o22cAZznylNpRHrHf35auZV4ROc4q6664atn9RGTV
3tDtcbh/1QxNIVCXH3glZ3pj6vueCSRTFxdvkrMAEzMJzgcJRvAno3RSq9jBvFCv
ngP+n19K/CBi5Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:02:26 2025 by rpki-client