Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
File: klUhi2nlURQ8UfodkZUS4aRMXJ0.mft (raw, json)
Hash identifier: CrIZQ+isHqlgkbtHVxPcKGhg2sl9Phd9D2Rz8z5LlL8=
Subject key identifier: 40:5A:32:51:C1:40:E0:DF:72:38:50:AF:7A:E3:5D:80:CC:E5:28:77
Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Certificate serial: 0199FC8FC224DE0E9308A95E6E52C927381E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
Manifest number: 1424
Signing time: Sun 19 Oct 2025 13:01:43 +0000
Manifest this update: Sun 19 Oct 2025 13:01:43 +0000
Manifest next update: Mon 20 Oct 2025 13:01:43 +0000
Files and hashes: 1: GHhfFCE3A402Gr9cqgeQDfKgELg.roa (hash: ykZ7G8ecfT0Bn+ARhYf2ZXhWVJ+RmdfZPxrqGyOjY/E=)
2: cl0W_dg6-SS2WR9dVPceKMDs_Vs.roa (hash: /pB+oHyiaUXmAAdbfPeCmqHZJhPFFFtRAcQpmJHE+pY=)
3: klUhi2nlURQ8UfodkZUS4aRMXJ0.crl (hash: 5o9JFYo39RpPQBuTAXbeYQkLSn6zxPRhaMx0WbNslKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c2:24:de:0e:93:08:a9:5e:6e:52:c9:27:38:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Validity
Not Before: Oct 19 13:01:43 2025 GMT
Not After : Oct 20 13:01:43 2025 GMT
Subject: CN=405a3251c140e0df723850af7ae35d80cce52877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b0:31:b8:8e:92:a5:fb:79:25:af:f3:0a:db:
8f:2e:a7:3c:96:c8:a0:3e:b4:b2:7b:2a:cd:8a:2f:
54:22:f1:b6:80:9c:56:ba:6d:f0:46:62:cb:e1:de:
ef:6a:ba:05:13:56:24:72:be:63:0f:0c:71:38:c4:
6a:b9:38:23:b3:b9:cf:fc:18:bd:db:ed:d1:e3:f5:
a2:83:dc:8a:6c:ba:01:75:16:9f:b2:6f:01:33:65:
38:e2:e6:f7:c2:f1:78:7f:38:c5:e9:57:d5:77:ae:
af:c8:9e:ce:01:1a:16:b3:23:05:39:0c:15:07:ab:
27:af:10:c5:40:9a:68:5e:55:14:b0:fa:ec:3c:2d:
ab:f6:5f:78:9b:06:c2:25:d7:06:17:f6:c3:e6:49:
40:9a:13:b0:ed:ef:b6:a6:9c:79:7a:07:dd:d7:81:
4e:45:8c:7a:c3:2c:19:2f:3b:93:d4:18:ad:56:78:
e6:a8:89:85:2c:cd:b9:ca:3d:46:4f:30:83:37:44:
b4:2f:75:3a:2b:d4:f4:cf:19:e8:2c:05:31:ff:ef:
2c:ff:79:0b:f9:1c:5a:37:8e:60:e1:09:10:b5:12:
91:e0:5e:b7:d0:77:cf:64:02:c0:66:1e:af:94:0f:
32:a0:d2:c0:69:4c:a6:bc:ae:0b:6b:dc:a0:ee:89:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5A:32:51:C1:40:E0:DF:72:38:50:AF:7A:E3:5D:80:CC:E5:28:77
X509v3 Authority Key Identifier:
keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:85:6e:d1:6a:ad:7a:b9:e7:5f:ed:9c:51:fc:14:fe:a8:0d:
b3:ba:80:c7:be:15:6e:38:22:50:41:e8:e1:b5:55:3c:24:2a:
f6:67:d8:cc:8e:20:53:5e:a8:ff:19:6c:ae:50:ec:61:42:37:
c8:07:b5:41:2c:c6:d2:e1:3b:0b:bc:08:99:84:87:f2:00:00:
ef:b2:a7:dc:44:90:d3:cd:4e:f3:41:f3:f4:b3:67:20:54:64:
31:86:15:95:a0:f3:53:1f:48:64:71:e8:8c:e1:f0:1b:b0:75:
8b:6d:74:6d:c0:bb:02:22:58:9a:b5:e4:7c:47:9d:59:9f:5e:
4e:79:64:3f:63:fd:1e:35:ce:f9:c9:06:29:b2:71:77:6a:e0:
b9:69:3e:86:5a:05:14:c4:f9:8b:75:87:c0:58:64:d8:2a:23:
56:ff:c2:89:c6:07:7d:c1:3a:5e:b9:06:d8:2d:92:04:70:40:
84:3a:62:9a:7c:40:a5:c6:d5:82:00:e8:d1:c0:6a:62:b4:a0:
fb:5f:11:d4:4e:83:0d:5a:20:d6:30:f3:87:ed:72:86:0d:6b:
7b:d5:bc:03:e3:ea:15:53:27:3e:1b:4d:ff:44:ad:13:ed:8f:
c7:10:32:61:36:38:5e:87:cc:9f:77:fb:22:b7:dd:dc:5b:f6:
8a:8f:09:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j8Ik3g6TCKleblLJJzgeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTUyMThiNjllNTUxMTQzYzUxZmExZDkxOTUxMmUxYTQ0
YzVjOWQwHhcNMjUxMDE5MTMwMTQzWhcNMjUxMDIwMTMwMTQzWjAzMTEwLwYDVQQD
Eyg0MDVhMzI1MWMxNDBlMGRmNzIzODUwYWY3YWUzNWQ4MGNjZTUyODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87AxuI6Spft5Ja/zCtuPLqc8lsig
PrSyeyrNii9UIvG2gJxWum3wRmLL4d7varoFE1Ykcr5jDwxxOMRquTgjs7nP/Bi9
2+3R4/Wig9yKbLoBdRafsm8BM2U44ub3wvF4fzjF6VfVd66vyJ7OARoWsyMFOQwV
B6snrxDFQJpoXlUUsPrsPC2r9l94mwbCJdcGF/bD5klAmhOw7e+2ppx5egfd14FO
RYx6wywZLzuT1BitVnjmqImFLM25yj1GTzCDN0S0L3U6K9T0zxnoLAUx/+8s/3kL
+RxaN45g4QkQtRKR4F630HfPZALAZh6vlA8yoNLAaUymvK4La9yg7ol1bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBaMlHBQODfcjhQr3rjXYDM5Sh3MB8GA1UdIwQY
MBaAFJJVIYtp5VEUPFH6HZGVEuGkTFydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xVaGkybmxVUlE4VWZvZGtaVVM0YVJNWEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ODI4OTYtODI2YS00YmVkLWIxNGYt
YWZmYmEyZGYzZDYyLzEva2xVaGkybmxVUlE4VWZvZGtaVVM0YVJNWEowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80ODI4OTYtODI2YS00YmVkLWIxNGYtYWZmYmEyZGYzZDYy
LzEva2xVaGkybmxVUlE4VWZvZGtaVVM0YVJNWEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIVu0Wqt
ernnX+2cUfwU/qgNs7qAx74VbjgiUEHo4bVVPCQq9mfYzI4gU16o/xlsrlDsYUI3
yAe1QSzG0uE7C7wImYSH8gAA77Kn3ESQ081O80Hz9LNnIFRkMYYVlaDzUx9IZHHo
jOHwG7B1i210bcC7AiJYmrXkfEedWZ9eTnlkP2P9HjXO+ckGKbJxd2rguWk+hloF
FMT5i3WHwFhk2CojVv/CicYHfcE6XrkG2C2SBHBAhDpimnxApcbVggDo0cBqYrSg
+18R1E6DDVog1jDzh+1yhg1re9W8A+PqFVMnPhtN/0StE+2PxxAyYTY4XofMn3f7
Irfd3Fv2io8Jbg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:17 2025 by rpki-client