Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json)
Hash identifier: GM5iTzcJho73VCTP9n3tjudnSkH85qw5NXnU+gZsDt8=
Subject key identifier: 42:0C:D1:AB:84:DB:A0:3B:F6:C6:49:8E:35:FB:14:BD:C4:DA:9F:87
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial: 0199FBEAE8156B0EC967105AE58FCCEA7618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
Manifest number: 05D6
Signing time: Sun 19 Oct 2025 10:01:40 +0000
Manifest this update: Sun 19 Oct 2025 10:01:40 +0000
Manifest next update: Mon 20 Oct 2025 10:01:40 +0000
Files and hashes: 1: IlzfTHCX--ryHCCh1ym927r2NiI.roa (hash: FciYooHb2klECPV8l+c1FyHw/6m8DpTuCRKy7yclUjA=)
2: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: xCdF5JoditVnjVgs/lQt/FVKcVC0rqpc9Hk59VEJFb4=)
3: LA9bx3k0C7Na4-u8OH3eVdW5a1M.roa (hash: kQiZYiCrBnh88ITE24ugea51DvkHaqRGnV+SPvNj+zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e8:15:6b:0e:c9:67:10:5a:e5:8f:cc:ea:76:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Validity
Not Before: Oct 19 10:01:40 2025 GMT
Not After : Oct 20 10:01:40 2025 GMT
Subject: CN=420cd1ab84dba03bf6c6498e35fb14bdc4da9f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:be:40:7c:ee:e2:58:87:e7:3e:da:b4:62:f0:
81:d2:fd:33:9f:52:33:da:69:3f:44:fa:89:e0:0b:
22:5f:e7:1e:c4:a8:b1:7c:80:bc:d4:bf:e3:c1:93:
56:69:24:15:19:f2:b5:df:f6:7b:e2:3e:0d:f7:bd:
33:d2:d4:4d:cf:d3:ff:f2:e1:8d:2b:44:12:9f:b3:
af:82:c8:a1:73:6e:43:00:cc:2d:a5:b1:fa:56:5e:
0b:a1:1e:07:bd:b5:f6:ad:44:af:7f:3b:8e:7c:af:
c5:2a:1b:e6:e3:7e:8c:e4:c3:0f:d8:4b:83:5f:50:
e3:01:76:31:4d:c3:1e:b8:62:c8:7d:96:2a:89:16:
f6:12:81:05:ed:e4:38:26:f5:dd:c7:0b:23:01:d5:
1a:0b:44:75:df:46:28:88:b7:59:30:be:74:b9:25:
8f:3f:79:75:43:01:ca:79:88:04:3c:e5:a7:2e:aa:
79:b4:ea:1d:2c:9f:fb:7c:19:62:b1:e8:5e:e1:02:
3b:84:50:18:2e:f1:5e:43:f4:05:1d:20:6b:70:ce:
35:92:68:22:00:3b:62:8b:75:d0:10:06:1c:a6:18:
69:15:ef:37:b2:00:61:ed:15:ee:12:b7:05:1c:da:
99:64:35:d2:68:b3:34:0e:0b:94:8f:78:d1:7c:a6:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0C:D1:AB:84:DB:A0:3B:F6:C6:49:8E:35:FB:14:BD:C4:DA:9F:87
X509v3 Authority Key Identifier:
keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:eb:a8:55:0d:53:b5:14:43:d0:5d:02:0e:55:5a:51:32:d2:
21:1a:1f:13:43:d2:d0:c2:af:05:e1:db:bd:31:71:56:3c:5a:
bc:f3:f3:7f:38:50:dc:30:92:75:a3:f5:3f:9c:22:2e:9c:1a:
0c:99:3e:1f:fe:cd:b8:ed:19:c5:35:91:5e:bb:03:50:f3:87:
31:bf:95:4f:9a:03:41:96:c1:45:b3:80:5e:71:f9:0b:56:39:
bc:41:4d:65:2b:ff:fb:2b:e2:f4:81:44:16:b8:e4:0f:4e:4f:
62:6b:3c:bb:76:37:4b:8d:0d:d3:0b:4a:ce:49:d1:b7:f3:87:
4d:3b:c8:b4:7c:9d:a9:59:25:b6:30:29:35:6a:20:86:79:37:
9e:95:7d:70:21:63:95:73:a2:68:c3:7f:cd:81:14:2a:5e:a2:
b3:ff:2d:c1:6c:63:75:a4:3f:7c:cb:2a:06:81:d6:f9:d8:32:
53:e8:06:59:af:bc:5a:ec:c8:bf:45:a7:07:62:38:32:39:03:
23:98:1c:1a:92:76:05:01:b4:41:4c:e6:41:73:ce:46:89:89:
bb:40:90:9d:7f:fe:7f:56:90:9a:b1:2b:db:cc:ae:64:ca:d8:
89:1d:87:d4:e7:45:eb:c6:f4:65:0e:db:3d:67:9c:49:fe:18:
d4:12:8e:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76ugVaw7JZxBa5Y/M6nYYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNGRkZmEzYmJmMTViYzFkYjg1ZDgzNzk5YTAxYjk4Njlh
ZDVjZTcwHhcNMjUxMDE5MTAwMTQwWhcNMjUxMDIwMTAwMTQwWjAzMTEwLwYDVQQD
Eyg0MjBjZDFhYjg0ZGJhMDNiZjZjNjQ5OGUzNWZiMTRiZGM0ZGE5Zjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6r5AfO7iWIfnPtq0YvCB0v0zn1Iz
2mk/RPqJ4AsiX+cexKixfIC81L/jwZNWaSQVGfK13/Z74j4N970z0tRNz9P/8uGN
K0QSn7Ovgsihc25DAMwtpbH6Vl4LoR4HvbX2rUSvfzuOfK/FKhvm436M5MMP2EuD
X1DjAXYxTcMeuGLIfZYqiRb2EoEF7eQ4JvXdxwsjAdUaC0R130YoiLdZML50uSWP
P3l1QwHKeYgEPOWnLqp5tOodLJ/7fBlisehe4QI7hFAYLvFeQ/QFHSBrcM41kmgi
ADtii3XQEAYcphhpFe83sgBh7RXuErcFHNqZZDXSaLM0DguUj3jRfKa3gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIM0auE26A79sZJjjX7FL3E2p+HMB8GA1UdIwQY
MBaAFCtN36O78VvB24XYN5mgG5hprVznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUt
ZmU4YWVhNWQ0MGE3LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUtZmU4YWVhNWQ0MGE3
LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+uoVQ1T
tRRD0F0CDlVaUTLSIRofE0PS0MKvBeHbvTFxVjxavPPzfzhQ3DCSdaP1P5wiLpwa
DJk+H/7NuO0ZxTWRXrsDUPOHMb+VT5oDQZbBRbOAXnH5C1Y5vEFNZSv/+yvi9IFE
FrjkD05PYms8u3Y3S40N0wtKzknRt/OHTTvItHydqVkltjApNWoghnk3npV9cCFj
lXOiaMN/zYEUKl6is/8twWxjdaQ/fMsqBoHW+dgyU+gGWa+8WuzIv0WnB2I4MjkD
I5gcGpJ2BQG0QUzmQXPORomJu0CQnX/+f1aQmrEr28yuZMrYiR2H1OdF68b0ZQ7b
PWecSf4Y1BKOVA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:31 2025 by rpki-client