Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
File: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft (raw, json)
Hash identifier: kl4QAvxEo8vFMSEhQ69Ugmq+lUB8KJcA6Gu2p59wkYE=
Subject key identifier: 50:F3:69:01:4F:54:37:50:8C:8B:D4:EB:A0:79:25:D7:CA:CE:98:B8
Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
Certificate issuer: /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Certificate serial: 0199FF903373E36517AB7273118A8B477A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
Manifest number: 0450
Signing time: Mon 20 Oct 2025 03:01:04 +0000
Manifest this update: Mon 20 Oct 2025 03:01:04 +0000
Manifest next update: Tue 21 Oct 2025 03:01:04 +0000
Files and hashes: 1: 6w2zju3MQesL2h0kBvZh3fnqTpk.roa (hash: qFtRm28NJGQNJhvYD72+GzqZcewOHcDC5+790w2uIjw=)
2: Va4lT4dcegb6wAxu5d6hAtZ0sPc.roa (hash: V2GzO75KrR6j8wTx9v/Qqyh9ekhgpMjeYEsEM94WE4M=)
3: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl (hash: hV6JFz3Md1+2SgYUILgUpTBMMKUuvbyN9I1O45nzs1E=)
4: f5zZHfnsAaopf1GoZf4uBje2t0Q.roa (hash: stYfXchqDnkN91Nt8UqXVM+bMk/Z/wzqFhIgpOKs0pk=)
5: j3K4X35kfjEUhm8UmbEuSZuRvvY.roa (hash: uk+5aj7HJZZkakM6PdHtx3JuETeBBl+0lL4mUEVaQ90=)
6: oFLSLxTROTSIlscGjGR0gR901FM.roa (hash: WRbdNPDyjk05klC3/AGlx6tP1ckSGAuLYeSpiKLvrT0=)
7: un7aOLvVH0DQuSmGP1vDBl9I7QA.roa (hash: iVhFcj6hdZp2lh837gdlgVnJ4rMcKoq6PbO5cfW5HHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:90:33:73:e3:65:17:ab:72:73:11:8a:8b:47:7a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Validity
Not Before: Oct 20 03:01:04 2025 GMT
Not After : Oct 21 03:01:04 2025 GMT
Subject: CN=50f369014f5437508c8bd4eba07925d7cace98b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:0f:fc:cf:b9:e3:99:a7:4f:5d:43:33:f2:
64:03:89:dc:6f:ae:de:3e:a4:e4:55:55:4d:9e:47:
b0:4a:c4:24:fc:54:67:7a:3e:b5:81:18:3a:19:84:
c4:cf:8b:5d:db:a9:d3:43:32:d6:3f:74:9c:3f:a8:
3f:69:f4:52:25:73:17:28:e7:86:23:94:23:f9:d9:
c6:16:83:62:95:a2:02:f3:33:fd:73:b3:ca:f0:94:
d0:ee:76:0b:5a:6e:bd:e3:01:80:24:95:17:69:d0:
0e:74:f7:ba:a3:4f:24:16:1d:0a:5e:de:0c:29:bb:
51:24:06:ad:0b:9c:93:df:de:64:92:c7:b0:68:81:
04:fc:fc:55:6c:86:64:a6:3b:c8:d9:44:38:42:32:
9f:bd:08:08:47:c6:1f:b3:2b:84:6c:49:ee:02:46:
ee:f2:2f:d7:f6:a5:cf:22:aa:ee:7d:6f:4c:48:cc:
95:d1:c1:6c:7a:ce:54:9c:10:cb:ad:28:c4:2e:5a:
c2:11:45:61:6b:50:9b:65:7d:d6:71:af:66:d8:c6:
a1:8d:29:25:9f:18:33:cb:3d:41:e4:75:3e:ae:db:
cb:22:2e:d4:66:2b:c9:9c:69:46:f9:5a:e8:e4:50:
6a:ea:33:0b:9c:b5:b8:8a:9c:e0:26:a4:cf:eb:50:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F3:69:01:4F:54:37:50:8C:8B:D4:EB:A0:79:25:D7:CA:CE:98:B8
X509v3 Authority Key Identifier:
keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8a:b8:43:29:bc:9c:22:48:dd:6e:4d:fb:9d:04:a0:25:c4:
9a:7a:9f:cd:b4:c7:c5:24:80:4f:09:66:de:72:20:63:d3:29:
a0:4f:4d:ce:f5:80:6c:1c:04:c5:3f:0f:38:b1:01:d3:64:c5:
f9:8f:c5:2f:b1:36:db:e4:8a:21:87:5b:db:11:6d:35:4b:4f:
25:90:1f:f0:fe:c9:28:dc:5c:4d:ab:6e:0e:35:9b:f6:3b:a9:
ca:f3:1f:90:be:b9:51:c6:60:19:ae:92:0e:52:94:c6:0b:8f:
a7:de:ba:0e:d6:23:3f:59:06:e8:6b:43:1b:e3:fb:2c:28:ee:
79:f9:98:a2:5b:de:8b:b5:6d:fc:e7:e8:1b:74:3f:1e:8d:2c:
88:01:cf:d9:7c:f6:d0:7b:33:cb:43:3b:f0:9c:4f:8d:1f:0a:
0f:70:00:ef:06:38:ff:16:a2:3b:74:2a:b7:c1:96:fd:f5:87:
0d:b8:10:80:5b:c9:1c:43:6d:6f:75:b1:c5:9d:44:08:32:39:
30:38:f4:de:c0:cc:3f:c5:45:45:22:18:2a:79:0c:a9:c4:c5:
a6:60:98:21:c2:f2:f5:0d:03:93:dd:41:76:4a:0c:f2:b1:85:
b2:67:d0:ac:01:e5:37:95:08:0c:85:2c:b8:77:63:5d:94:ef:
4f:aa:73:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/kDNz42UXq3JzEYqLR3pbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYTM5NmYxYzM0NGIwNzljNWQyZjI3YmZiMzEzMzc3ZmVi
YjJlYzcwHhcNMjUxMDIwMDMwMTA0WhcNMjUxMDIxMDMwMTA0WjAzMTEwLwYDVQQD
Eyg1MGYzNjkwMTRmNTQzNzUwOGM4YmQ0ZWJhMDc5MjVkN2NhY2U5OGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuMP/M+545mnT11DM/JkA4ncb67e
PqTkVVVNnkewSsQk/FRnej61gRg6GYTEz4td26nTQzLWP3ScP6g/afRSJXMXKOeG
I5Qj+dnGFoNilaIC8zP9c7PK8JTQ7nYLWm694wGAJJUXadAOdPe6o08kFh0KXt4M
KbtRJAatC5yT395kksewaIEE/PxVbIZkpjvI2UQ4QjKfvQgIR8YfsyuEbEnuAkbu
8i/X9qXPIqrufW9MSMyV0cFses5UnBDLrSjELlrCEUVha1CbZX3Wca9m2MahjSkl
nxgzyz1B5HU+rtvLIi7UZivJnGlG+Vro5FBq6jMLnLW4ipzgJqTP61AmNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDzaQFPVDdQjIvU66B5JdfKzpi4MB8GA1UdIwQY
MBaAFPyjlvHDRLB5xdLye/sxM3f+uy7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWIt
ZmZiMTZlYmQxMTFmLzEvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWItZmZiMTZlYmQxMTFm
LzEvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIq4Qym8
nCJI3W5N+50EoCXEmnqfzbTHxSSATwlm3nIgY9MpoE9NzvWAbBwExT8POLEB02TF
+Y/FL7E22+SKIYdb2xFtNUtPJZAf8P7JKNxcTatuDjWb9jupyvMfkL65UcZgGa6S
DlKUxguPp966DtYjP1kG6GtDG+P7LCjuefmYolvei7Vt/OfoG3Q/Ho0siAHP2Xz2
0Hszy0M78JxPjR8KD3AA7wY4/xaiO3Qqt8GW/fWHDbgQgFvJHENtb3WxxZ1ECDI5
MDj03sDMP8VFRSIYKnkMqcTFpmCYIcLy9Q0Dk91BdkoM8rGFsmfQrAHlN5UIDIUs
uHdjXZTvT6pzqA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:24 2025 by rpki-client