Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: xszMT/GsmdRzUxy8q0nEJiGpqCHKyQttDGXwZXZ4pbQ=
Subject key identifier: 28:BB:08:82:03:D6:10:D2:4C:3B:92:F9:2D:B5:04:42:29:07:25:A5
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 0199FCFD66F2405E653A12EEE9118D38717B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 15:01:29 +0000
Manifest this update: Sun 19 Oct 2025 15:01:29 +0000
Manifest next update: Mon 20 Oct 2025 15:01:29 +0000
Files and hashes: 1: 7KoL3jGlfNGPpyhqV9AtZAaoaI0.roa (hash: Nb/Vw+/Ylb4cSX8JKW25BkVIJgSx13SRW+VCTwm5sJ8=)
2: HL23JkhmDLszmlcMKIQLjOYgOlw.roa (hash: UcG0dWZ6JWWkmOHgvKVtqjoii96EVOB2hFdkb/AhZXs=)
3: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: 5R1NNJdROG+0j95ABz2YHrTSrYs8Up3wYsoFcZ/p4SM=)
4: _5futta0xSGb2K29XZ9-2mIIcNo.roa (hash: B+25/sqAb1n8V0UhyQrKEJ3bDb2KGluec9BcmrwzlDo=)
5: bLZSbio8bkJcYZljrUphK1wwfiI.roa (hash: 8pmPyotbXxfraqC1rKstG9Ljo1wkSagV+FMWF45wlzU=)
6: pZ6QLhb3L-zU8HaIuMWziHfarGQ.roa (hash: bAsLcg/vcZKidF7bKnaCdDmEHtuPe3QKZhFTHIqySAA=)
7: vgrDVzIHM-lfYbprXn7b8oE_EG0.roa (hash: pmw87KrkZDI/w+UgS4DgQBhIgi8uItz6U8fozdzX4sc=)
8: yIaElboDEcTWK_3VfQrVd7rO3sU.roa (hash: dRcI0G+6+49AKUKXqa7HKsOOK4Sxw6VtAfiMSWdhRnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:66:f2:40:5e:65:3a:12:ee:e9:11:8d:38:71:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Oct 19 15:01:29 2025 GMT
Not After : Oct 20 15:01:29 2025 GMT
Subject: CN=28bb088203d610d24c3b92f92db50442290725a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:ef:11:35:d0:3a:51:62:b0:7e:53:76:b6:
18:d8:b9:cc:1f:08:e2:c2:78:de:51:9b:2a:32:0d:
dc:a0:78:36:2c:d8:0b:b3:6f:3c:e5:55:13:d7:03:
62:35:29:72:fa:97:1a:ce:ba:fe:59:27:1b:78:6c:
92:e4:ad:a8:8e:cb:15:33:0f:13:6b:ce:1e:c6:a1:
b6:f5:c3:05:f1:c3:53:e4:49:14:4b:3f:ee:fe:f1:
99:9e:cc:b1:0f:4a:59:d7:8f:ef:a3:35:5f:18:db:
eb:11:12:6d:fe:3d:10:a5:bf:8b:d8:95:25:09:e5:
f1:77:f3:8a:53:c6:fe:d7:82:4a:fa:e4:b0:84:2f:
17:54:86:59:8c:53:a2:b1:09:52:28:12:bf:70:2b:
a1:f8:68:ef:69:b0:d6:71:c9:06:62:e1:ed:71:7a:
60:40:92:fe:1c:32:fa:68:eb:4d:2b:4f:55:fc:fa:
11:fb:d9:2f:98:98:7c:a0:00:25:a2:97:a2:0d:d6:
42:21:50:b4:20:4d:d0:15:ae:ad:e1:a8:6d:73:91:
60:35:b5:60:ca:4f:35:9b:06:7f:9c:a9:3d:64:71:
32:25:d1:73:8b:6f:a7:5e:f2:ad:c6:4a:b3:35:10:
8e:04:a0:ed:ff:fe:bd:c5:b7:f5:16:52:7a:22:22:
c8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BB:08:82:03:D6:10:D2:4C:3B:92:F9:2D:B5:04:42:29:07:25:A5
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8f:a5:72:f9:75:1b:bf:0e:fa:fe:c1:0a:0a:70:8b:a4:6f:
f6:05:75:5b:19:90:f5:8f:2f:a3:ab:0f:82:99:83:d7:55:7c:
18:da:8e:9c:00:c1:35:74:df:14:17:52:84:70:1a:03:1f:05:
47:df:4b:e0:d2:3a:8e:48:d4:7a:c7:3d:f6:2c:2a:e0:c8:fc:
50:ee:fc:e7:21:90:12:21:4a:19:bb:cd:8f:25:ce:da:70:ab:
93:68:1d:dc:57:51:fc:db:55:4f:af:2b:09:8d:70:7c:21:05:
d6:76:bc:21:f9:e5:ea:36:e9:98:47:0d:7f:7c:a6:a0:a5:d6:
a2:4e:dd:b1:71:69:a7:2b:d8:38:0d:42:9d:ef:a9:a8:16:51:
20:ca:16:6e:1c:42:60:06:c6:21:d7:8b:6d:e1:61:d8:7f:85:
39:ab:02:c0:a8:5d:59:c8:38:43:10:49:cd:32:27:d9:b5:51:
0b:91:46:f3:80:e8:2f:a7:27:39:05:06:cf:a2:ab:30:d9:e1:
74:ce:9f:50:bb:eb:7c:cd:80:48:0c:1f:7f:3a:2f:11:d6:e0:
c3:94:c0:11:f2:57:82:3b:8e:cb:89:71:3f:51:ea:f4:00:04:
e6:e4:6a:56:f7:de:ed:f0:dd:fc:ba:e7:f5:c4:50:39:d6:7c:
d2:be:0f:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/WbyQF5lOhLu6RGNOHF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzY0ZGMyMWNiNWZkNGQwYmNiMDJjYzJiNDNmZDc1MWZk
OTFlMWUwHhcNMjUxMDE5MTUwMTI5WhcNMjUxMDIwMTUwMTI5WjAzMTEwLwYDVQQD
EygyOGJiMDg4MjAzZDYxMGQyNGMzYjkyZjkyZGI1MDQ0MjI5MDcyNWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpbvETXQOlFisH5TdrYY2LnMHwji
wnjeUZsqMg3coHg2LNgLs2885VUT1wNiNSly+pcazrr+WScbeGyS5K2ojssVMw8T
a84exqG29cMF8cNT5EkUSz/u/vGZnsyxD0pZ14/vozVfGNvrERJt/j0Qpb+L2JUl
CeXxd/OKU8b+14JK+uSwhC8XVIZZjFOisQlSKBK/cCuh+GjvabDWcckGYuHtcXpg
QJL+HDL6aOtNK09V/PoR+9kvmJh8oAAlopeiDdZCIVC0IE3QFa6t4ahtc5FgNbVg
yk81mwZ/nKk9ZHEyJdFzi2+nXvKtxkqzNRCOBKDt//69xbf1FlJ6IiLIcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCi7CIID1hDSTDuS+S21BEIpByWlMB8GA1UdIwQY
MBaAFCrGTcIctf1NC8sCzCtD/XUf2R4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAt
MDk3YzNjMWMyNTQwLzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAtMDk3YzNjMWMyNTQw
LzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4+lcvl1
G78O+v7BCgpwi6Rv9gV1WxmQ9Y8vo6sPgpmD11V8GNqOnADBNXTfFBdShHAaAx8F
R99L4NI6jkjUesc99iwq4Mj8UO785yGQEiFKGbvNjyXO2nCrk2gd3FdR/NtVT68r
CY1wfCEF1na8Ifnl6jbpmEcNf3ymoKXWok7dsXFppyvYOA1Cne+pqBZRIMoWbhxC
YAbGIdeLbeFh2H+FOasCwKhdWcg4QxBJzTIn2bVRC5FG84DoL6cnOQUGz6KrMNnh
dM6fULvrfM2ASAwffzovEdbgw5TAEfJXgjuOy4lxP1Hq9AAE5uRqVvfe7fDd/Lrn
9cRQOdZ80r4Pzw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:46 2025 by rpki-client