Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
File: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft (raw, json)
Hash identifier: Wk9BHRdr37WYd0ywA5q650kVBcdW0JLLgbsf2fRVUlY=
Subject key identifier: EE:2D:C3:E7:D6:13:8D:1B:92:8D:63:5B:88:C6:A6:C8:F7:90:9A:17
Authority key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
Certificate issuer: /CN=292d120970515846360ea223e9a0e6a3c3896934
Certificate serial: 0199FCFDADCC0F28678E837F0991E39AAFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 15:01:47 +0000
Manifest this update: Sun 19 Oct 2025 15:01:47 +0000
Manifest next update: Mon 20 Oct 2025 15:01:47 +0000
Files and hashes: 1: Dmpy31ijG2f6hXZqP5vPJHMC7fc.roa (hash: a19ubK1sseKa07iYGs0SfWBGmOIfQnOOnA1DdC09cIs=)
2: E7yxjynkTDUFSV0KBoIMTHpUAPI.roa (hash: 9bhJ257wp5/WErvUFH4Spo9AhE0rTIMhiGRzFbkOnjk=)
3: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl (hash: jzVH8AQjZLxeOICX7rM7ens/zyWThW8illKYt2fyfWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:ad:cc:0f:28:67:8e:83:7f:09:91:e3:9a:af:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d120970515846360ea223e9a0e6a3c3896934
Validity
Not Before: Oct 19 15:01:47 2025 GMT
Not After : Oct 20 15:01:47 2025 GMT
Subject: CN=ee2dc3e7d6138d1b928d635b88c6a6c8f7909a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:4e:50:6a:cb:6c:30:20:d9:f5:df:c8:21:
43:3f:78:3e:72:83:ca:70:63:dd:0b:f2:83:a6:16:
82:c1:04:8e:8e:64:35:e1:7e:26:07:5e:e7:06:c3:
cd:f6:d8:c3:b5:c0:b9:a5:8c:48:e6:0f:55:00:f3:
f2:69:52:cb:82:3e:51:d0:97:ef:c7:51:a0:3f:ba:
8a:14:c3:17:05:58:b5:51:d6:54:0c:a0:c2:61:d7:
b0:86:59:32:04:37:a6:61:bf:08:47:66:eb:8a:e6:
bf:67:38:3d:b1:4e:7e:9b:29:7a:d1:44:0b:b1:7b:
36:58:97:ea:b8:ab:c4:ca:1d:aa:d9:5c:2a:28:bf:
a0:48:01:e8:e4:c3:21:49:ed:e5:2a:b0:a7:fb:bc:
26:66:f9:4c:7d:0e:8e:07:11:29:ad:9b:7a:4a:71:
92:e7:0f:73:26:fc:25:20:31:0d:9e:e3:8d:da:a1:
f5:d9:5f:91:1f:b0:48:de:24:95:30:60:33:f5:3e:
e8:3f:ae:3b:ca:2b:2b:91:71:12:6d:a2:be:12:81:
0a:01:1f:58:aa:72:7e:07:dd:58:99:c7:b6:d6:f5:
93:91:f6:76:49:3b:8b:22:06:32:fa:ee:83:d3:1f:
17:f9:b3:3a:c5:01:ad:2d:a3:87:a7:2f:da:4b:ff:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2D:C3:E7:D6:13:8D:1B:92:8D:63:5B:88:C6:A6:C8:F7:90:9A:17
X509v3 Authority Key Identifier:
keyid:29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:33:98:3e:54:d8:6b:45:38:14:52:19:dc:17:e1:ad:6a:35:
50:c0:73:45:8d:63:58:a3:1b:30:4e:32:22:75:e1:1b:34:99:
16:b6:98:13:4b:5c:c5:11:01:2a:ce:97:4a:49:57:2a:dc:b4:
18:5c:47:57:b1:77:af:51:fc:01:55:20:7c:6c:23:55:1f:58:
75:43:28:1c:fd:d7:1c:80:08:99:1f:c1:a8:a4:02:59:b0:ca:
e2:0a:5a:87:9a:28:9a:17:ac:12:3c:f5:95:4a:63:93:22:8b:
5d:d2:20:32:a9:18:e8:8b:99:a8:fb:7d:f0:06:c6:2b:11:2d:
7b:f7:31:68:87:b2:20:ec:38:19:2a:40:21:1d:5a:97:38:3f:
38:43:42:76:66:77:2a:f8:13:4e:60:9f:6f:e1:6a:83:ff:52:
4b:29:62:38:a0:e1:09:bd:80:48:41:53:2f:f2:13:52:3f:46:
c1:19:f4:a2:34:10:b6:27:ea:ec:1a:17:28:82:24:7e:c8:5c:
75:d4:8b:dd:56:08:b0:a9:c9:c1:0a:83:48:8d:21:44:95:be:
a9:bd:7e:72:10:44:00:bb:46:b5:1a:40:fe:36:6e:00:f6:80:
78:28:98:60:68:5c:30:fa:f6:23:d6:b9:4b:59:e6:4a:85:2b:
b1:63:95:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/a3MDyhnjoN/CZHjmq/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MmQxMjA5NzA1MTU4NDYzNjBlYTIyM2U5YTBlNmEzYzM4
OTY5MzQwHhcNMjUxMDE5MTUwMTQ3WhcNMjUxMDIwMTUwMTQ3WjAzMTEwLwYDVQQD
EyhlZTJkYzNlN2Q2MTM4ZDFiOTI4ZDYzNWI4OGM2YTZjOGY3OTA5YTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVJOUGrLbDAg2fXfyCFDP3g+coPK
cGPdC/KDphaCwQSOjmQ14X4mB17nBsPN9tjDtcC5pYxI5g9VAPPyaVLLgj5R0Jfv
x1GgP7qKFMMXBVi1UdZUDKDCYdewhlkyBDemYb8IR2briua/Zzg9sU5+myl60UQL
sXs2WJfquKvEyh2q2VwqKL+gSAHo5MMhSe3lKrCn+7wmZvlMfQ6OBxEprZt6SnGS
5w9zJvwlIDENnuON2qH12V+RH7BI3iSVMGAz9T7oP647yisrkXESbaK+EoEKAR9Y
qnJ+B91Ymce21vWTkfZ2STuLIgYy+u6D0x8X+bM6xQGtLaOHpy/aS/8XOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4tw+fWE40bko1jW4jGpsj3kJoXMB8GA1UdIwQY
MBaAFCktEglwUVhGNg6iI+mg5qPDiWk0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1MwU0NYQlJXRVkyRHFJajZhRG1vOE9KYVRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kZTkxMzktYTlkMC00OTNhLTkyNjAt
ZWQwZjI1NmE1ZmUzLzEvS1MwU0NYQlJXRVkyRHFJajZhRG1vOE9KYVRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9kZTkxMzktYTlkMC00OTNhLTkyNjAtZWQwZjI1NmE1ZmUz
LzEvS1MwU0NYQlJXRVkyRHFJajZhRG1vOE9KYVRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTOYPlTY
a0U4FFIZ3BfhrWo1UMBzRY1jWKMbME4yInXhGzSZFraYE0tcxREBKs6XSklXKty0
GFxHV7F3r1H8AVUgfGwjVR9YdUMoHP3XHIAImR/BqKQCWbDK4gpah5oomhesEjz1
lUpjkyKLXdIgMqkY6IuZqPt98AbGKxEte/cxaIeyIOw4GSpAIR1alzg/OENCdmZ3
KvgTTmCfb+Fqg/9SSyliOKDhCb2ASEFTL/ITUj9GwRn0ojQQtifq7BoXKIIkfshc
ddSL3VYIsKnJwQqDSI0hRJW+qb1+chBEALtGtRpA/jZuAPaAeCiYYGhcMPr2I9a5
S1nmSoUrsWOVLg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:04:59 2025 by rpki-client