Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
File: kPeS6o__kECyzX8XBzbkLnSDp2c.mft (raw, json)
Hash identifier: AtvXLfQCcEqRLKKQzVuOcYBk/OamV93TlfSPT/+Esi8=
Subject key identifier: 6A:34:EA:C7:20:EE:3E:2E:52:A3:59:7D:21:FB:51:2B:53:76:B5:0C
Authority key identifier: 90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
Certificate issuer: /CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Certificate serial: 0199FC8F2C03F8E6EBAF451EF67463E40B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
Manifest number: 03A8
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: R-CX4CB0hLo514CToPVhOwxreNk.roa (hash: uWvGHgIozdO3NKS0KfC+P7cEFWYQl8434I9zUzprdfA=)
2: kPeS6o__kECyzX8XBzbkLnSDp2c.crl (hash: F1tr2tmxbyvqJkw2P68VMvReVnje5P9aZJCHz0rfsfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2c:03:f8:e6:eb:af:45:1e:f6:74:63:e4:0b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=6a34eac720ee3e2e52a3597d21fb512b5376b50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:95:57:fa:f3:6a:7b:93:30:6c:9f:9c:3d:
16:a9:f4:a7:b4:06:ee:35:da:5a:a1:66:e5:a7:af:
4f:fa:0f:82:dc:4b:78:38:7f:ca:d3:a2:e9:69:ef:
3c:fc:26:a7:e1:d3:31:5f:40:aa:48:a1:51:04:ba:
d3:27:fa:50:b4:f2:07:36:fc:13:8b:92:a4:44:95:
c8:75:d0:28:b5:48:09:69:f5:85:60:ac:d3:a4:26:
c0:1c:ca:2d:b9:fd:78:8d:27:a3:ee:e8:38:4b:6f:
84:91:3e:34:94:a9:af:ee:ba:7a:89:ad:65:2b:0a:
7c:77:8e:d8:e3:1f:8f:2b:b1:56:2d:85:82:8c:b9:
59:5c:79:97:90:51:5b:97:68:41:32:fb:34:66:78:
5f:c2:e1:f1:fd:91:f5:cc:1f:8b:bf:e9:15:11:49:
65:eb:9c:64:7d:9d:14:4e:b8:e9:04:ec:06:44:cf:
8b:f7:85:18:62:36:4e:4f:30:fc:12:82:04:32:8e:
3d:93:fa:dd:15:1c:62:2e:0c:0f:4c:c9:57:c4:c2:
47:d0:87:06:b1:5d:10:d3:d4:2a:70:8e:c6:22:85:
62:c9:e9:91:d6:af:7c:56:c6:c2:24:2a:e3:7e:b3:
56:20:1d:92:54:20:5d:c3:cf:1f:6b:1f:cc:f8:ab:
e7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:34:EA:C7:20:EE:3E:2E:52:A3:59:7D:21:FB:51:2B:53:76:B5:0C
X509v3 Authority Key Identifier:
keyid:90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cc:81:42:e0:52:34:25:9d:9c:7b:ef:df:bd:55:98:a0:48:
84:85:49:a6:cf:28:70:c8:cc:6c:37:fb:24:19:19:c4:fa:12:
1c:40:cd:90:39:d5:c4:63:fc:c2:ff:e0:3d:7b:ea:48:a1:15:
ea:43:05:29:12:d7:05:fe:54:2e:a7:fc:7e:6e:91:b8:81:2c:
7f:af:50:5c:2b:fd:df:40:3b:90:95:0a:7f:45:57:d7:17:dd:
d1:48:d9:76:42:9e:55:9d:01:c7:98:b5:77:73:c9:83:69:da:
cb:a6:9e:f8:26:a9:c4:56:aa:5c:9e:ec:e1:37:a5:9d:23:52:
8f:3e:75:60:19:50:21:88:bf:50:b5:73:32:f3:22:f1:df:a8:
c6:62:1f:9b:9b:02:1d:cf:bf:0a:46:c7:9a:75:0d:03:29:97:
d3:14:a5:58:7d:0b:c2:81:6a:c2:87:af:3d:3b:a8:c9:a3:8f:
b6:09:08:dd:a2:ce:6d:5d:f4:be:a9:bc:7c:ba:66:39:27:b0:
e8:cf:25:e1:55:06:80:35:12:9b:33:bf:25:b7:e7:fd:a8:98:
84:30:27:a9:c8:b0:24:0a:5a:ad:4f:75:28:96:83:92:03:06:
dd:42:05:50:6a:e4:b6:65:c1:66:f2:d8:03:48:e8:5e:3f:62:
98:8c:2e:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jywD+Obrr0Ue9nRj5AtQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjc5MmVhOGZmZjkwNDBiMmNkN2YxNzA3MzZlNDJlNzQ4
M2E3NjcwHhcNMjUxMDE5MTMwMTA1WhcNMjUxMDIwMTMwMTA1WjAzMTEwLwYDVQQD
Eyg2YTM0ZWFjNzIwZWUzZTJlNTJhMzU5N2QyMWZiNTEyYjUzNzZiNTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArySVV/rzanuTMGyfnD0WqfSntAbu
NdpaoWblp69P+g+C3Et4OH/K06Lpae88/Can4dMxX0CqSKFRBLrTJ/pQtPIHNvwT
i5KkRJXIddAotUgJafWFYKzTpCbAHMotuf14jSej7ug4S2+EkT40lKmv7rp6ia1l
Kwp8d47Y4x+PK7FWLYWCjLlZXHmXkFFbl2hBMvs0ZnhfwuHx/ZH1zB+Lv+kVEUll
65xkfZ0UTrjpBOwGRM+L94UYYjZOTzD8EoIEMo49k/rdFRxiLgwPTMlXxMJH0IcG
sV0Q09QqcI7GIoViyemR1q98VsbCJCrjfrNWIB2SVCBdw88fax/M+Kvn/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGo06scg7j4uUqNZfSH7UStTdrUMMB8GA1UdIwQY
MBaAFJD3kuqP/5BAss1/Fwc25C50g6dnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BlUzZvX19rRUN5elg4WEJ6YmtMblNEcDJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84NDUyYTgtYmFmZS00YTBmLThjNDQt
Y2I3NDBkYjA2YjI5LzEva1BlUzZvX19rRUN5elg4WEJ6YmtMblNEcDJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC84NDUyYTgtYmFmZS00YTBmLThjNDQtY2I3NDBkYjA2YjI5
LzEva1BlUzZvX19rRUN5elg4WEJ6YmtMblNEcDJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcyBQuBS
NCWdnHvv371VmKBIhIVJps8ocMjMbDf7JBkZxPoSHEDNkDnVxGP8wv/gPXvqSKEV
6kMFKRLXBf5ULqf8fm6RuIEsf69QXCv930A7kJUKf0VX1xfd0UjZdkKeVZ0Bx5i1
d3PJg2nay6ae+CapxFaqXJ7s4TelnSNSjz51YBlQIYi/ULVzMvMi8d+oxmIfm5sC
Hc+/CkbHmnUNAymX0xSlWH0LwoFqwoevPTuoyaOPtgkI3aLObV30vqm8fLpmOSew
6M8l4VUGgDUSmzO/Jbfn/aiYhDAnqciwJAparU91KJaDkgMG3UIFUGrktmXBZvLY
A0joXj9imIwuow==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:41 2025 by rpki-client