Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
File: KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json)
Hash identifier: lGsG4Yk6WPleZ2Gni0uTBQYKeEuOmbfYiQcoC4vmpUk=
Subject key identifier: FF:E7:09:84:8B:6E:89:E1:CE:C2:CC:1A:E2:E6:8D:CF:5F:30:7B:A3
Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Certificate serial: 0199FC58867D88BF8B5FE728E5E8EC0FE1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
Manifest number: 078E
Signing time: Sun 19 Oct 2025 12:01:23 +0000
Manifest this update: Sun 19 Oct 2025 12:01:23 +0000
Manifest next update: Mon 20 Oct 2025 12:01:23 +0000
Files and hashes: 1: 0ew3GDGdcko8IEl72SU1gGU7W_k.roa (hash: 9xx5BwMCjSrUJr+68yVrM18oEIPDjZ9uwovBe4fuSRQ=)
2: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: 13EQxtkphOgEdmVWXhUxa6FatDOftNeglNpSe1CSGrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:86:7d:88:bf:8b:5f:e7:28:e5:e8:ec:0f:e1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Validity
Not Before: Oct 19 12:01:23 2025 GMT
Not After : Oct 20 12:01:23 2025 GMT
Subject: CN=ffe709848b6e89e1cec2cc1ae2e68dcf5f307ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:f6:23:ec:53:15:12:1b:2f:28:cf:e8:76:
db:7b:1e:f1:dd:4a:b9:ba:4d:1c:a1:0c:ba:53:89:
82:14:b7:ee:9f:57:df:78:1f:8e:ca:41:26:e5:59:
db:71:8d:61:38:ba:4a:03:e8:fc:5a:ee:49:fa:89:
2b:43:70:0f:8d:18:36:bc:26:1b:64:8c:25:94:51:
29:63:ba:4f:53:b3:25:02:2d:87:4b:02:58:de:04:
f9:40:5c:56:09:f9:37:a1:a8:3e:7c:6e:b5:5a:cb:
ed:9e:a5:ba:c0:ec:90:c2:e9:e7:3a:9a:bc:e4:13:
f8:98:70:1d:2a:41:b7:ea:6b:21:63:d4:05:50:a5:
ba:8a:d7:8e:35:97:e2:94:41:bb:79:5f:71:2d:6d:
d3:77:89:63:13:7f:52:c7:cb:d5:e8:b8:ac:e1:86:
c4:bc:ff:e4:b3:02:b7:91:85:f9:19:95:00:16:9f:
39:d5:da:84:3c:9f:98:10:6d:d3:a7:9b:93:64:2b:
46:3d:e9:a4:1b:b6:52:41:23:73:08:30:0a:57:19:
31:80:3e:67:a6:96:24:04:50:ed:ca:d2:c8:d6:3e:
de:b0:17:98:7b:d2:ba:e1:36:e4:55:15:7f:c7:fb:
37:3c:84:9c:5a:24:4b:65:27:20:9d:c5:08:5f:5b:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E7:09:84:8B:6E:89:E1:CE:C2:CC:1A:E2:E6:8D:CF:5F:30:7B:A3
X509v3 Authority Key Identifier:
keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a1:4f:e4:8f:bc:4f:45:b8:69:d9:17:47:5e:20:74:cb:15:
36:63:9c:c8:a7:a5:57:ea:25:c5:83:38:14:34:4f:99:bd:d4:
af:63:0c:2e:9f:f4:07:fc:0d:68:53:68:cd:27:b1:03:b1:f7:
ab:46:34:79:0c:65:10:c2:41:f9:ac:52:58:fc:11:6f:1d:2f:
6c:e1:a9:03:b6:4c:30:af:10:2c:20:f3:a0:a7:7d:de:26:ee:
28:cb:53:62:84:3a:51:af:32:d0:f7:f2:b9:8b:9a:a5:b8:61:
69:84:9b:54:11:c8:4d:ec:30:af:f8:6e:55:58:63:cc:41:1c:
18:89:70:74:2e:37:fd:ac:43:64:86:8d:93:12:69:36:14:e6:
b1:94:b1:58:57:91:e8:4a:eb:0c:a8:64:48:3a:fd:bc:1d:85:
d7:d8:9e:19:8f:97:d9:d4:7b:a7:79:42:e9:ff:2a:30:fb:76:
69:ec:81:ec:20:f3:01:f4:15:eb:a4:bc:01:26:b3:30:99:53:
da:3d:f1:9b:73:42:52:06:98:39:ed:30:f5:9a:13:dd:8b:e5:
bc:72:c7:f1:e8:95:b8:b7:92:5e:ec:d8:1d:34:5b:9f:59:6c:
fc:1c:e4:fb:31:a3:60:e2:b2:70:f4:5c:42:e7:ea:40:34:87:
1d:a3:0d:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WIZ9iL+LX+co5ejsD+H2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MmQ2YjgwNWUxMWVjMzgwMzRmMDc3ODlkY2QyNWQxYzE3
ZmEwMWUwHhcNMjUxMDE5MTIwMTIzWhcNMjUxMDIwMTIwMTIzWjAzMTEwLwYDVQQD
EyhmZmU3MDk4NDhiNmU4OWUxY2VjMmNjMWFlMmU2OGRjZjVmMzA3YmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxn2I+xTFRIbLyjP6Hbbex7x3Uq5
uk0coQy6U4mCFLfun1ffeB+OykEm5VnbcY1hOLpKA+j8Wu5J+okrQ3APjRg2vCYb
ZIwllFEpY7pPU7MlAi2HSwJY3gT5QFxWCfk3oag+fG61WsvtnqW6wOyQwunnOpq8
5BP4mHAdKkG36mshY9QFUKW6iteONZfilEG7eV9xLW3Td4ljE39Sx8vV6Lis4YbE
vP/kswK3kYX5GZUAFp851dqEPJ+YEG3Tp5uTZCtGPemkG7ZSQSNzCDAKVxkxgD5n
ppYkBFDtytLI1j7esBeYe9K64TbkVRV/x/s3PIScWiRLZScgncUIX1vvMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/nCYSLbonhzsLMGuLmjc9fMHujMB8GA1UdIwQY
MBaAFCkta4BeEew4A08HeJ3NJdHBf6AeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84YjMzNDEtZjg1Yi00YzE1LWE5ODkt
NTEwY2YyNmJjYTY1LzEvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84YjMzNDEtZjg1Yi00YzE1LWE5ODktNTEwY2YyNmJjYTY1
LzEvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6FP5I+8
T0W4adkXR14gdMsVNmOcyKelV+olxYM4FDRPmb3Ur2MMLp/0B/wNaFNozSexA7H3
q0Y0eQxlEMJB+axSWPwRbx0vbOGpA7ZMMK8QLCDzoKd93ibuKMtTYoQ6Ua8y0Pfy
uYuapbhhaYSbVBHITewwr/huVVhjzEEcGIlwdC43/axDZIaNkxJpNhTmsZSxWFeR
6ErrDKhkSDr9vB2F19ieGY+X2dR7p3lC6f8qMPt2aeyB7CDzAfQV66S8ASazMJlT
2j3xm3NCUgaYOe0w9ZoT3YvlvHLH8eiVuLeSXuzYHTRbn1ls/Bzk+zGjYOKycPRc
QufqQDSHHaMNTw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:08 2025 by rpki-client