Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: 7kmpKUXBEQdwM+bNnc9XooBxPAVyOBrJ+ZLtHMXUsF8=
Subject key identifier: 04:DF:52:4E:C7:0A:3C:98:59:1C:54:DF:C6:52:69:15:3D:8B:EF:3A
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 0199FF59D85FEE719B094BE39AD0ADEEF2DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 02:01:41 +0000
Manifest this update: Mon 20 Oct 2025 02:01:41 +0000
Manifest next update: Tue 21 Oct 2025 02:01:41 +0000
Files and hashes: 1: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: Gm57/9dfBT7b9cvG8TeoMAqJHJEPLhLcYqBD5M83bMw=)
2: veklkDiCqI48H1uQ5ixFAlK84NY.roa (hash: KUIRIFDZrVheg1iXYyW8LsCjhDrH33Kf+Op6ybMvK2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:d8:5f:ee:71:9b:09:4b:e3:9a:d0:ad:ee:f2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Oct 20 02:01:41 2025 GMT
Not After : Oct 21 02:01:41 2025 GMT
Subject: CN=04df524ec70a3c98591c54dfc65269153d8bef3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:14:62:f7:e1:48:d3:0f:ec:d1:fe:64:41:
69:36:96:90:b3:2e:3e:3b:39:5c:e2:e6:46:d4:dc:
90:2d:7d:fa:d2:dd:3e:c0:c9:f2:2a:03:ee:cd:5e:
8a:ab:91:70:41:4b:14:3c:dc:24:06:c4:af:0d:17:
14:ad:d9:6e:6f:b9:95:9d:08:84:bc:1b:0b:a6:71:
f9:a6:f9:64:62:d1:8b:3b:47:de:fc:77:cb:f2:3a:
ad:0e:a2:7c:ca:5b:8d:ab:29:0c:64:df:70:67:f7:
56:b5:1f:51:93:da:df:e0:61:e8:c8:7a:0b:7d:9b:
51:3f:f7:62:bc:1f:bb:ce:86:3e:ce:de:56:0f:d2:
7b:41:dc:9e:ab:3b:0f:9f:52:be:ac:5d:8c:26:14:
18:3b:d9:50:41:1f:2a:34:7b:a2:52:45:ad:b3:3b:
b5:0a:00:8b:9b:a1:db:56:1d:46:5e:ab:8f:43:25:
fb:b2:d4:64:0f:fc:15:6b:bf:ec:1c:fb:2d:e3:4b:
b5:0d:3b:1d:c8:f9:c7:61:72:2f:c4:d6:28:7f:ef:
04:e3:cd:74:d6:ec:80:c9:50:32:c7:d1:d0:17:1a:
83:0e:0b:14:cd:16:0b:4c:51:f7:a1:65:44:99:82:
6f:bc:ed:7e:50:77:00:38:4c:c0:80:eb:45:11:a6:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DF:52:4E:C7:0A:3C:98:59:1C:54:DF:C6:52:69:15:3D:8B:EF:3A
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:43:6e:46:96:96:1d:3f:28:2b:8a:36:45:15:e3:05:18:17:
9c:80:e5:ed:46:05:20:83:ab:02:58:64:61:26:39:5c:0f:5f:
2a:b2:dd:6a:ab:45:89:78:ca:91:2b:c0:97:e2:b9:9d:76:36:
3a:6d:cd:c2:48:cf:f8:20:61:13:a0:a9:b6:ad:02:cd:d7:eb:
d0:d2:19:6a:ef:cb:c4:22:dc:2c:4b:f5:d6:44:47:d0:59:5e:
e6:4e:a0:c6:7d:fa:80:54:60:fe:88:99:07:4c:8a:ee:2b:4b:
df:78:89:f8:03:94:42:86:83:dd:93:61:c9:96:cb:8e:4f:66:
24:9f:c1:6b:27:a5:11:e8:69:7f:cf:2b:de:4a:fd:13:63:27:
f7:cf:8d:a7:e9:81:ef:00:ad:07:9a:f8:33:28:d8:5e:b8:e3:
55:2e:0d:c5:2f:63:7b:0a:7e:5a:ac:ca:e0:c1:4e:90:75:54:
41:0a:0a:fe:ae:f0:84:cc:89:a1:b5:6e:ae:52:f9:35:89:a0:
99:2c:e0:08:9a:89:86:30:a9:71:70:44:38:bb:16:27:cc:3f:
62:5f:8a:af:e6:87:f2:aa:d8:30:c6:8c:32:76:e4:c4:cf:9c:
5f:32:90:21:a3:13:79:92:6d:7f:4b:14:bc:fd:f0:0e:50:4a:
61:03:7e:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/Wdhf7nGbCUvjmtCt7vLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMDRlYmEyYTk3YTA5YzliM2IwOGNmZjgzZGZiNDc3MTQx
YmMxY2IwHhcNMjUxMDIwMDIwMTQxWhcNMjUxMDIxMDIwMTQxWjAzMTEwLwYDVQQD
EygwNGRmNTI0ZWM3MGEzYzk4NTkxYzU0ZGZjNjUyNjkxNTNkOGJlZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtToUYvfhSNMP7NH+ZEFpNpaQsy4+
Ozlc4uZG1NyQLX360t0+wMnyKgPuzV6Kq5FwQUsUPNwkBsSvDRcUrdlub7mVnQiE
vBsLpnH5pvlkYtGLO0fe/HfL8jqtDqJ8yluNqykMZN9wZ/dWtR9Rk9rf4GHoyHoL
fZtRP/divB+7zoY+zt5WD9J7QdyeqzsPn1K+rF2MJhQYO9lQQR8qNHuiUkWtszu1
CgCLm6HbVh1GXquPQyX7stRkD/wVa7/sHPst40u1DTsdyPnHYXIvxNYof+8E4810
1uyAyVAyx9HQFxqDDgsUzRYLTFH3oWVEmYJvvO1+UHcAOEzAgOtFEaaLPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATfUk7HCjyYWRxU38ZSaRU9i+86MB8GA1UdIwQY
MBaAFJME66KpegnJs7CM/4PftHcUG8HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hYjIzZmYtZTUzYi00ZDA4LTgzOTIt
OWFmOTkzYjAzNDNlLzEva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hYjIzZmYtZTUzYi00ZDA4LTgzOTItOWFmOTkzYjAzNDNl
LzEva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkNuRpaW
HT8oK4o2RRXjBRgXnIDl7UYFIIOrAlhkYSY5XA9fKrLdaqtFiXjKkSvAl+K5nXY2
Om3NwkjP+CBhE6Cptq0Czdfr0NIZau/LxCLcLEv11kRH0Fle5k6gxn36gFRg/oiZ
B0yK7itL33iJ+AOUQoaD3ZNhyZbLjk9mJJ/BayelEehpf88r3kr9E2Mn98+Np+mB
7wCtB5r4MyjYXrjjVS4NxS9jewp+WqzK4MFOkHVUQQoK/q7whMyJobVurlL5NYmg
mSzgCJqJhjCpcXBEOLsWJ8w/Yl+Kr+aH8qrYMMaMMnbkxM+cXzKQIaMTeZJtf0sU
vP3wDlBKYQN+xg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:34:31 2025 by rpki-client