Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
File: kRAQDzzHh9YxUwPLf8iNniXlbqg.mft (raw, json)
Hash identifier: cx4ppC4yaalfpOCGTRSZb+JxoqQZ/D0Z/6llTS0vtPw=
Subject key identifier: 22:F2:6D:04:C2:A2:BB:A3:CE:58:DB:9D:E2:FA:D0:10:F4:1C:B3:47
Authority key identifier: 91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
Certificate issuer: /CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Certificate serial: 0199FFC87F40AF38B7594C74C8FBB24D5381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
Manifest number: 0AF8
Signing time: Mon 20 Oct 2025 04:02:33 +0000
Manifest this update: Mon 20 Oct 2025 04:02:33 +0000
Manifest next update: Tue 21 Oct 2025 04:02:33 +0000
Files and hashes: 1: bRhGJqv0p8mJ4Y5Zi3hw3lkQdsk.roa (hash: z2JalsCXdVTGdLdK888EdCX/YOon+kmiEVhkkUSf3/w=)
2: kRAQDzzHh9YxUwPLf8iNniXlbqg.crl (hash: Qt0xfNRQULvUPrQz+Af7vxB1HtrTdf8Sp9UGNCUJI5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:7f:40:af:38:b7:59:4c:74:c8:fb:b2:4d:53:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Validity
Not Before: Oct 20 04:02:33 2025 GMT
Not After : Oct 21 04:02:33 2025 GMT
Subject: CN=22f26d04c2a2bba3ce58db9de2fad010f41cb347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:7e:d2:a7:7f:bf:0b:0e:6c:7e:7b:ed:ac:
d9:86:cc:a7:27:05:2a:06:d0:12:a1:53:8f:a6:55:
65:03:c6:0f:13:8d:b5:45:36:cd:19:ef:94:59:dc:
ee:c7:2f:95:93:7d:7f:db:31:c7:19:be:15:7b:18:
e8:3e:b4:7e:94:b3:97:01:76:0d:72:00:55:4b:10:
88:d3:f1:bc:01:7d:0e:63:de:65:ba:e2:7e:e7:f6:
4c:94:92:e8:09:34:7e:28:e4:62:b7:2a:cd:27:6e:
c8:9d:b6:75:aa:7f:3f:9a:47:13:9b:71:fb:a1:cc:
3e:b8:60:4b:84:00:66:1e:01:1e:34:9f:53:52:d8:
6c:d5:93:a2:60:90:45:80:3e:b9:15:72:cf:0e:19:
77:30:7c:e2:a2:34:3e:b9:35:ab:45:48:61:21:3b:
92:77:e8:1e:41:54:1d:cc:48:00:ec:aa:46:84:04:
cd:2d:48:65:15:63:23:a1:dd:16:b5:dc:84:b4:1c:
14:37:c8:3d:f9:18:6c:2d:9b:2b:f1:fa:a6:ae:34:
ce:55:8d:ac:f0:8d:66:df:f8:dc:52:fd:2f:fa:28:
84:15:f4:52:7f:39:46:a2:72:fc:a0:43:24:5f:38:
ad:67:4f:d2:8d:95:e9:02:c8:11:12:c7:bc:cc:5e:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F2:6D:04:C2:A2:BB:A3:CE:58:DB:9D:E2:FA:D0:10:F4:1C:B3:47
X509v3 Authority Key Identifier:
keyid:91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4c:6c:28:99:c9:e7:39:c1:17:ae:d7:13:82:31:bf:4a:ff:
7f:da:11:de:55:38:f2:c2:ae:13:08:0c:8e:18:b0:40:18:90:
b9:2b:5e:06:5d:89:51:8d:0d:da:aa:52:3c:77:69:aa:bc:ce:
77:f2:0e:81:d9:6a:db:e3:c7:ed:46:bb:3e:27:38:17:3c:b9:
00:5e:e0:ca:04:45:c2:6e:a7:f2:f3:4d:c3:57:bb:b5:44:02:
9b:bc:8d:ca:5a:50:46:5b:e3:a5:41:e9:0f:66:d9:7e:a8:17:
75:22:af:a7:a8:1c:92:a8:9e:b6:61:84:fc:49:fe:64:14:38:
a7:2e:d7:4b:35:6c:f7:71:7e:41:18:f0:d6:31:18:34:3d:ef:
85:c6:f2:9a:7a:80:37:b1:15:2f:84:a5:c3:ec:e2:6d:86:b6:
d2:95:31:04:97:13:54:d7:2e:9e:93:60:9a:c3:e2:29:06:62:
da:52:aa:ef:e0:90:22:5c:67:5a:91:b0:d9:99:55:31:05:99:
7c:11:6d:13:a2:c8:b1:9a:e9:73:01:a8:5a:0d:f6:6f:d3:b7:
ee:37:89:b0:58:dc:8f:48:aa:69:b8:9a:e9:45:ff:8b:91:d4:
41:45:48:58:fe:85:16:c1:12:ee:24:6f:3d:7c:d0:db:7e:94:
9b:d9:76:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yH9Arzi3WUx0yPuyTVOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMTAxMDBmM2NjNzg3ZDYzMTUzMDNjYjdmYzg4ZDllMjVl
NTZlYTgwHhcNMjUxMDIwMDQwMjMzWhcNMjUxMDIxMDQwMjMzWjAzMTEwLwYDVQQD
EygyMmYyNmQwNGMyYTJiYmEzY2U1OGRiOWRlMmZhZDAxMGY0MWNiMzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDB+0qd/vwsObH577azZhsynJwUq
BtASoVOPplVlA8YPE421RTbNGe+UWdzuxy+Vk31/2zHHGb4VexjoPrR+lLOXAXYN
cgBVSxCI0/G8AX0OY95luuJ+5/ZMlJLoCTR+KORityrNJ27InbZ1qn8/mkcTm3H7
ocw+uGBLhABmHgEeNJ9TUths1ZOiYJBFgD65FXLPDhl3MHziojQ+uTWrRUhhITuS
d+geQVQdzEgA7KpGhATNLUhlFWMjod0WtdyEtBwUN8g9+RhsLZsr8fqmrjTOVY2s
8I1m3/jcUv0v+iiEFfRSfzlGonL8oEMkXzitZ0/SjZXpAsgREse8zF6xyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLybQTCorujzljbneL60BD0HLNHMB8GA1UdIwQY
MBaAFJEQEA88x4fWMVMDy3/IjZ4l5W6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1JBUUR6ekhoOVl4VXdQTGY4aU5uaVhsYnFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kOTAwYjMtNTQ2Mi00ZWI0LTljOTAt
MGUwMzc3ZDRlNmQ2LzEva1JBUUR6ekhoOVl4VXdQTGY4aU5uaVhsYnFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kOTAwYjMtNTQ2Mi00ZWI0LTljOTAtMGUwMzc3ZDRlNmQ2
LzEva1JBUUR6ekhoOVl4VXdQTGY4aU5uaVhsYnFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0xsKJnJ
5znBF67XE4Ixv0r/f9oR3lU48sKuEwgMjhiwQBiQuSteBl2JUY0N2qpSPHdpqrzO
d/IOgdlq2+PH7Ua7Pic4Fzy5AF7gygRFwm6n8vNNw1e7tUQCm7yNylpQRlvjpUHp
D2bZfqgXdSKvp6gckqietmGE/En+ZBQ4py7XSzVs93F+QRjw1jEYND3vhcbymnqA
N7EVL4Slw+zibYa20pUxBJcTVNcunpNgmsPiKQZi2lKq7+CQIlxnWpGw2ZlVMQWZ
fBFtE6LIsZrpcwGoWg32b9O37jeJsFjcj0iqabia6UX/i5HUQUVIWP6FFsES7iRv
PXzQ236Um9l2WA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:26 2025 by rpki-client