Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier: ZBMSRWfSZh0H16b+coTf2fYM/g26OH7jqfqZoxGH+s8=
Subject key identifier: 71:33:9A:24:B1:13:8B:F8:D3:CB:84:31:9D:47:9C:95:0E:58:88:A6
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 0199FE7E19E9554683F12FF0B0DC37B6E29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number: 16FF
Signing time: Sun 19 Oct 2025 22:01:41 +0000
Manifest this update: Sun 19 Oct 2025 22:01:41 +0000
Manifest next update: Mon 20 Oct 2025 22:01:41 +0000
Files and hashes: 1: J-F67EchYLFsSdnuT0ELKO3zkVM.roa (hash: X3ffb8upes93ybjj9N2ywu5hcNrq4bSW9hgoat91kHU=)
2: anqJ49NaASwaJ_s7wvdwnyeoi7A.roa (hash: tT4VObTQFTBANax7YZ+QGhxAr7cz6xVgJTjgQ2oVs4U=)
3: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: EdPqqmbp2fnGsJSpL77iAdC529Wcs3oQqtzWiID9o8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:19:e9:55:46:83:f1:2f:f0:b0:dc:37:b6:e2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Oct 19 22:01:41 2025 GMT
Not After : Oct 20 22:01:41 2025 GMT
Subject: CN=71339a24b1138bf8d3cb84319d479c950e5888a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:da:70:ea:bc:b1:a0:38:f9:0f:86:d0:a4:
51:05:fd:b6:97:b6:f2:39:9d:5b:96:41:63:77:9a:
d7:6c:36:f0:d1:08:c7:2b:ef:f9:29:e0:60:91:8c:
f0:2c:9d:19:4e:e2:67:32:a9:f1:fc:00:2b:67:e1:
46:08:a4:1d:a8:62:67:93:27:14:3e:e6:29:bb:44:
f3:1e:ce:e0:3a:27:84:bc:0d:f4:70:44:40:1c:32:
25:d4:01:62:65:ba:7d:69:8e:e2:20:29:65:7c:e5:
dc:e4:2b:ec:11:21:66:b8:1d:e2:8c:4b:cb:88:e7:
eb:08:39:92:1b:22:14:d8:c7:5f:64:8a:d3:e2:55:
b8:44:ed:b9:ce:ad:36:8f:86:b1:04:0d:23:ca:3c:
60:e5:2e:14:4f:ce:13:e6:83:01:d0:23:88:78:29:
2a:d4:e8:a6:be:a5:d4:98:f4:8d:66:26:11:03:70:
5a:0d:7f:8e:44:25:4e:03:0c:c7:f0:1f:ac:39:31:
32:ed:28:69:ad:86:bb:fb:5a:8d:5d:55:d1:ce:05:
aa:dc:ef:fd:ba:5e:2f:a0:af:5e:ac:1b:d3:0f:52:
0b:ba:39:d4:e8:86:49:fc:2e:4e:71:87:73:58:72:
0e:77:16:11:cc:bc:8d:78:d8:43:c5:3f:85:cd:99:
d7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:33:9A:24:B1:13:8B:F8:D3:CB:84:31:9D:47:9C:95:0E:58:88:A6
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:93:ee:48:16:0d:5e:c5:b2:42:2f:71:2c:c7:d6:07:76:2d:
a5:22:0e:d6:ca:f1:3f:73:08:3a:a3:81:7b:71:7f:c5:f6:73:
89:47:a8:05:1f:1a:d9:c5:98:b9:50:5c:c8:8a:77:c3:00:fd:
bd:40:0c:e1:f5:64:a2:a0:91:bc:a3:00:dc:2f:d8:79:30:29:
25:c0:da:74:aa:1d:93:f0:a3:b7:ca:d6:b2:da:01:f2:04:7f:
8f:cb:ec:ba:8f:4e:de:ce:53:22:06:ee:d6:f1:10:b2:67:61:
0b:8d:72:74:07:b2:bc:c4:6e:18:9d:03:a5:fa:46:bc:b6:58:
82:3c:83:86:6a:3b:b2:18:58:f0:f2:1c:64:04:9a:e4:ee:34:
66:94:19:2e:70:6f:58:55:28:b3:1a:d5:ad:e3:20:4c:c4:f0:
c8:36:75:16:82:ad:ad:89:a2:10:74:03:dd:65:0e:dd:b3:42:
0e:5a:85:30:30:da:ef:58:db:50:54:cb:b9:77:f1:4e:3a:db:
da:15:c7:76:84:07:24:bf:ac:8b:6d:cc:e7:69:34:33:ce:92:
18:ce:07:7c:dd:d8:9b:57:57:4c:a1:7d:ad:26:5b:0c:39:d0:
87:f0:6d:62:8d:0d:41:57:0e:82:a4:5a:4e:17:03:17:20:b9:
f7:92:79:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fhnpVUaD8S/wsNw3tuKbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj
MmEwOTUwHhcNMjUxMDE5MjIwMTQxWhcNMjUxMDIwMjIwMTQxWjAzMTEwLwYDVQQD
Eyg3MTMzOWEyNGIxMTM4YmY4ZDNjYjg0MzE5ZDQ3OWM5NTBlNTg4OGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFvacOq8saA4+Q+G0KRRBf22l7by
OZ1blkFjd5rXbDbw0QjHK+/5KeBgkYzwLJ0ZTuJnMqnx/AArZ+FGCKQdqGJnkycU
PuYpu0TzHs7gOieEvA30cERAHDIl1AFiZbp9aY7iICllfOXc5CvsESFmuB3ijEvL
iOfrCDmSGyIU2MdfZIrT4lW4RO25zq02j4axBA0jyjxg5S4UT84T5oMB0COIeCkq
1OimvqXUmPSNZiYRA3BaDX+ORCVOAwzH8B+sOTEy7ShprYa7+1qNXVXRzgWq3O/9
ul4voK9erBvTD1ILujnU6IZJ/C5OcYdzWHIOdxYRzLyNeNhDxT+FzZnXBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEzmiSxE4v408uEMZ1HnJUOWIimMB8GA1UdIwQY
MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct
MDRkNzRmMzY4Njk4LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4
LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJPuSBYN
XsWyQi9xLMfWB3YtpSIO1srxP3MIOqOBe3F/xfZziUeoBR8a2cWYuVBcyIp3wwD9
vUAM4fVkoqCRvKMA3C/YeTApJcDadKodk/Cjt8rWstoB8gR/j8vsuo9O3s5TIgbu
1vEQsmdhC41ydAeyvMRuGJ0DpfpGvLZYgjyDhmo7shhY8PIcZASa5O40ZpQZLnBv
WFUosxrVreMgTMTwyDZ1FoKtrYmiEHQD3WUO3bNCDlqFMDDa71jbUFTLuXfxTjrb
2hXHdoQHJL+si23M52k0M86SGM4HfN3Ym1dXTKF9rSZbDDnQh/BtYo0NQVcOgqRa
ThcDFyC595J5Ng==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:23:44 2025 by rpki-client