Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
File: KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft (raw, json)
Hash identifier: pxAOwb23ZEEN7Nf00o+Y6LQgN02Pb8m4k8t1CgeFXs4=
Subject key identifier: F0:3F:3D:E5:11:5A:75:32:49:53:51:C1:C7:A3:7D:5A:DF:F8:C4:F3
Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
Certificate issuer: /CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Certificate serial: 019A00A2D9431CD5D66C215EF8368AEDAA26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
Manifest number: 10DF
Signing time: Mon 20 Oct 2025 08:01:03 +0000
Manifest this update: Mon 20 Oct 2025 08:01:03 +0000
Manifest next update: Tue 21 Oct 2025 08:01:03 +0000
Files and hashes: 1: KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl (hash: E5Ltfphqs2VNW8i/09oeCLD6+IdhVUAPaYXFG8Fy+Sc=)
2: NdfWSMRABwv2F_yFFl7X4UZH0vA.roa (hash: cuV8z/cxgYl0ffX7fgAA/EzOTZZ9e9S+JYGHmQ2nzxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:d9:43:1c:d5:d6:6c:21:5e:f8:36:8a:ed:aa:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Validity
Not Before: Oct 20 08:01:03 2025 GMT
Not After : Oct 21 08:01:03 2025 GMT
Subject: CN=f03f3de5115a7532495351c1c7a37d5adff8c4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:52:75:27:a7:8b:9d:9d:e7:a4:68:10:c0:
00:c6:9e:73:bf:82:0b:67:91:2a:c5:79:98:f6:83:
ab:c6:15:7a:20:0e:cd:14:c9:92:6e:bb:df:fc:fb:
7f:b0:a6:c6:29:b9:cc:39:8d:09:2b:18:50:66:dc:
c5:13:ed:99:f3:8d:7b:c7:c4:8c:2b:0d:af:02:fb:
95:95:d8:55:cb:d4:5c:6e:23:c4:2a:01:99:15:91:
e8:53:c7:fa:cb:5c:b4:b0:1c:aa:7c:3e:3e:5b:7b:
a8:7b:03:01:6f:bf:6d:c5:9a:48:8e:76:a5:c1:0d:
8b:7e:f0:11:41:00:ad:f1:8e:ac:c3:e3:d7:53:3e:
0c:b8:9f:a8:4f:19:7d:a8:f0:fb:6f:89:fe:51:54:
8d:f8:b4:9c:8e:0b:f4:47:02:6b:d7:13:9c:e2:64:
9e:ce:4a:dd:66:0a:5c:2e:17:13:2b:90:3e:a1:0c:
49:ce:4c:81:5a:59:4b:55:6f:dd:46:2d:21:07:65:
e8:0b:99:80:a5:6e:ff:fe:98:b8:ee:e6:18:9c:05:
af:75:8c:a9:c4:a8:06:5a:7c:93:4a:c0:c1:c4:1f:
23:20:01:44:70:b2:4e:d8:70:82:70:a6:61:d9:d9:
07:8c:f7:0e:51:3c:b2:61:25:a8:53:2f:0b:e9:37:
e1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3F:3D:E5:11:5A:75:32:49:53:51:C1:C7:A3:7D:5A:DF:F8:C4:F3
X509v3 Authority Key Identifier:
keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:48:93:29:06:d2:ba:3a:fa:e6:e9:d7:c4:de:d3:4b:9c:f4:
02:ae:76:91:9f:da:9d:02:29:82:9e:2d:1b:32:f3:91:4c:10:
77:cd:42:4d:a7:52:90:72:6d:e3:c9:87:c2:c1:cd:23:ee:ef:
97:22:51:27:35:09:9b:0b:a3:22:b7:23:4e:50:4a:45:da:5a:
84:a9:0a:55:5b:be:d0:3a:36:aa:bc:d6:5e:61:06:a4:70:0d:
75:4d:11:cc:50:c1:71:a9:e8:ef:1d:52:6c:53:32:21:15:9b:
03:1e:89:e8:f4:06:4b:a8:d7:f9:04:c7:bb:45:a2:fe:94:48:
f3:27:ff:6e:44:4f:49:22:dc:c0:20:84:11:37:a5:b8:7a:de:
56:1d:bf:46:f2:40:9e:9a:ef:3c:b3:f4:f2:4e:df:8c:04:42:
13:60:92:fc:c4:1e:7c:1e:dc:f1:52:27:af:77:8e:40:a0:ab:
a2:c3:45:9e:82:e0:8d:9a:7e:bf:79:05:7b:12:64:2f:49:b7:
a3:6d:eb:bf:83:46:83:57:d8:3e:f3:58:bf:72:98:17:0c:ab:
1d:b0:b0:ee:74:e8:d3:ca:56:5b:95:26:1c:8d:c0:12:a9:ad:
d4:05:96:7f:1b:c6:2c:f0:06:2d:be:88:9d:51:08:31:21:77:
28:8c:59:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAotlDHNXWbCFe+DaK7aomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NDVmMWY0ZDU5ZjgxMWQ2MzIzZGI0ZDg2ZDRmNDE4NTRl
ZGU3NDQwHhcNMjUxMDIwMDgwMTAzWhcNMjUxMDIxMDgwMTAzWjAzMTEwLwYDVQQD
EyhmMDNmM2RlNTExNWE3NTMyNDk1MzUxYzFjN2EzN2Q1YWRmZjhjNGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpZSdSeni52d56RoEMAAxp5zv4IL
Z5EqxXmY9oOrxhV6IA7NFMmSbrvf/Pt/sKbGKbnMOY0JKxhQZtzFE+2Z8417x8SM
Kw2vAvuVldhVy9RcbiPEKgGZFZHoU8f6y1y0sByqfD4+W3uoewMBb79txZpIjnal
wQ2LfvARQQCt8Y6sw+PXUz4MuJ+oTxl9qPD7b4n+UVSN+LScjgv0RwJr1xOc4mSe
zkrdZgpcLhcTK5A+oQxJzkyBWllLVW/dRi0hB2XoC5mApW7//pi47uYYnAWvdYyp
xKgGWnyTSsDBxB8jIAFEcLJO2HCCcKZh2dkHjPcOUTyyYSWoUy8L6TfhmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPA/PeURWnUySVNRwcejfVrf+MTzMB8GA1UdIwQY
MBaAFChF8fTVn4EdYyPbTYbU9BhU7edEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85MDY5Y2UtZGZlMS00YjhhLWFmMDMt
MjI2ZjNiODAzMWI3LzEvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS85MDY5Y2UtZGZlMS00YjhhLWFmMDMtMjI2ZjNiODAzMWI3
LzEvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApEiTKQbS
ujr65unXxN7TS5z0Aq52kZ/anQIpgp4tGzLzkUwQd81CTadSkHJt48mHwsHNI+7v
lyJRJzUJmwujIrcjTlBKRdpahKkKVVu+0Do2qrzWXmEGpHANdU0RzFDBcano7x1S
bFMyIRWbAx6J6PQGS6jX+QTHu0Wi/pRI8yf/bkRPSSLcwCCEETeluHreVh2/RvJA
nprvPLP08k7fjARCE2CS/MQefB7c8VInr3eOQKCrosNFnoLgjZp+v3kFexJkL0m3
o23rv4NGg1fYPvNYv3KYFwyrHbCw7nTo08pWW5UmHI3AEqmt1AWWfxvGLPAGLb6I
nVEIMSF3KIxZGw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:43:08 2025 by rpki-client