
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
File: K1wFUAyGXpJL3esa7nsuuMupJ8k.mft (raw, json)
Hash identifier: 6golgM8AEEhqKrZBHDQtvPdwdpQCXIxhoQ71Ju5ZSEI=
Subject key identifier: AE:E3:84:6F:13:46:0A:34:E7:89:43:11:35:4D:61:59:21:AD:4A:3E
Authority key identifier: 2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
Certificate issuer: /CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Certificate serial: 0199FB7C93E0508778C0BF74909011C03A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
Manifest number: 01E7
Signing time: Sun 19 Oct 2025 08:01:09 +0000
Manifest this update: Sun 19 Oct 2025 08:01:09 +0000
Manifest next update: Mon 20 Oct 2025 08:01:09 +0000
Files and hashes: 1: K1wFUAyGXpJL3esa7nsuuMupJ8k.crl (hash: upmGC8KlODyQBASb+m+EcE3URorqNS48ka3Kn1ZCZIg=)
2: vzFDjwhsHuCEXenA4Ry9zlS6KxI.roa (hash: nNA4bFfVyipriW6rYfX4ArBAMjERFDTms9Zlmp1WCCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:93:e0:50:87:78:c0:bf:74:90:90:11:c0:3a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Validity
Not Before: Oct 19 08:01:09 2025 GMT
Not After : Oct 20 08:01:09 2025 GMT
Subject: CN=aee3846f13460a34e7894311354d615921ad4a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:76:91:0c:0e:9d:ee:97:21:97:8a:29:08:
19:95:bf:8b:3a:b9:81:e5:c2:11:79:18:c2:a3:29:
45:7d:f7:6f:51:b1:a3:a0:e8:cf:8b:a3:47:a9:3b:
b5:28:29:da:16:1c:c7:29:41:dc:b3:61:11:3b:3e:
37:de:b3:0a:31:1e:6c:ed:28:48:84:9b:9f:05:d6:
8e:50:d6:5f:d1:a0:cf:30:cc:5f:b1:5c:2e:ae:c5:
84:b4:39:2a:6d:5b:ac:80:d4:52:35:f6:7d:e0:6a:
aa:49:68:b2:e9:56:da:e6:eb:c8:d9:46:67:c5:31:
86:72:9c:74:47:8f:c4:d9:df:b8:8a:8f:c2:5f:68:
cd:b1:61:77:f6:0d:25:94:54:d9:85:a1:55:68:04:
e2:2a:34:9a:47:b0:05:67:a3:18:15:ae:54:af:b3:
99:c7:05:59:a9:d1:09:c2:00:e5:6b:e7:d0:f4:31:
6c:cd:c2:fa:c8:de:47:e2:35:7f:2a:58:7a:4f:06:
02:d3:79:b7:86:07:af:34:ca:e4:01:47:e9:80:d2:
23:ac:05:11:f9:ee:1c:cc:ea:d5:0a:32:38:9e:c8:
41:81:f2:25:9c:ab:db:6f:74:af:27:e5:5f:12:04:
97:b1:6b:2d:5c:1c:c0:3b:82:26:05:7d:a6:ee:45:
12:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E3:84:6F:13:46:0A:34:E7:89:43:11:35:4D:61:59:21:AD:4A:3E
X509v3 Authority Key Identifier:
keyid:2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ad:29:e3:cc:8c:93:10:96:b7:1f:1b:fa:23:f8:f4:17:63:
d6:1e:97:06:54:a9:2a:aa:7b:e1:a4:3f:be:25:2c:fe:5e:9c:
6c:b6:09:d4:b1:1d:cd:74:cf:00:09:2d:0a:2c:14:8e:e0:37:
d1:ba:c6:0c:ac:55:9d:1a:27:96:08:76:3b:99:4e:16:a3:5e:
7c:7f:cd:fb:b8:51:7c:80:ef:01:e0:4f:f4:19:49:bf:8e:14:
41:5c:4b:dc:47:55:16:49:3f:1d:01:63:5b:6b:98:29:5a:5e:
4b:2b:2b:ab:25:ce:38:20:a7:fa:ec:de:a6:65:a3:ec:78:49:
b6:51:6b:99:85:8c:52:43:44:aa:d4:64:92:b9:71:75:27:f7:
80:9a:2f:c0:27:c2:1a:fc:2f:99:f8:61:d2:2c:93:13:88:0a:
55:1c:b5:e1:8a:a3:75:b4:9a:54:4f:f8:f6:57:37:6f:11:b7:
be:68:e9:8d:63:6a:99:fd:95:c9:6a:ed:04:49:1c:40:27:08:
7b:89:3c:e2:c0:4c:07:60:0a:b0:36:d8:76:ca:17:44:5a:4b:
2a:99:46:96:e0:e8:07:55:8e:f7:04:16:db:ed:39:d0:68:86:
ef:18:88:79:d6:e5:12:5f:63:75:57:51:f9:55:68:4b:02:f0:
95:46:30:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fJPgUId4wL90kJARwDqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNWMwNTUwMGM4NjVlOTI0YmRkZWIxYWVlN2IyZWI4Y2Jh
OTI3YzkwHhcNMjUxMDE5MDgwMTA5WhcNMjUxMDIwMDgwMTA5WjAzMTEwLwYDVQQD
EyhhZWUzODQ2ZjEzNDYwYTM0ZTc4OTQzMTEzNTRkNjE1OTIxYWQ0YTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp112kQwOne6XIZeKKQgZlb+LOrmB
5cIReRjCoylFffdvUbGjoOjPi6NHqTu1KCnaFhzHKUHcs2EROz433rMKMR5s7ShI
hJufBdaOUNZf0aDPMMxfsVwursWEtDkqbVusgNRSNfZ94GqqSWiy6Vba5uvI2UZn
xTGGcpx0R4/E2d+4io/CX2jNsWF39g0llFTZhaFVaATiKjSaR7AFZ6MYFa5Ur7OZ
xwVZqdEJwgDla+fQ9DFszcL6yN5H4jV/Klh6TwYC03m3hgevNMrkAUfpgNIjrAUR
+e4czOrVCjI4nshBgfIlnKvbb3SvJ+VfEgSXsWstXBzAO4ImBX2m7kUSxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7jhG8TRgo054lDETVNYVkhrUo+MB8GA1UdIwQY
MBaAFCtcBVAMhl6SS93rGu57LrjLqSfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzF3RlVBeUdYcEpMM2VzYTduc3V1TXVwSjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yN2ZkNWUtN2Q1ZS00ODk4LTg2ODkt
NTk1ZDQyZDVjMjU0LzEvSzF3RlVBeUdYcEpMM2VzYTduc3V1TXVwSjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8yN2ZkNWUtN2Q1ZS00ODk4LTg2ODktNTk1ZDQyZDVjMjU0
LzEvSzF3RlVBeUdYcEpMM2VzYTduc3V1TXVwSjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxa0p48yM
kxCWtx8b+iP49Bdj1h6XBlSpKqp74aQ/viUs/l6cbLYJ1LEdzXTPAAktCiwUjuA3
0brGDKxVnRonlgh2O5lOFqNefH/N+7hRfIDvAeBP9BlJv44UQVxL3EdVFkk/HQFj
W2uYKVpeSysrqyXOOCCn+uzepmWj7HhJtlFrmYWMUkNEqtRkkrlxdSf3gJovwCfC
Gvwvmfhh0iyTE4gKVRy14YqjdbSaVE/49lc3bxG3vmjpjWNqmf2VyWrtBEkcQCcI
e4k84sBMB2AKsDbYdsoXRFpLKplGluDoB1WO9wQW2+050GiG7xiIedblEl9jdVdR
+VVoSwLwlUYwLQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:52 2025 by rpki-client