Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
File: KYlkeFHvzRmJcu09FJzLvenFXAA.mft (raw, json)
Hash identifier: OcteY9Yi/Qwiot9ZfmBpXm6K3AaZzteqatd+X80p2Oo=
Subject key identifier: 55:2B:AB:2A:0E:97:36:35:45:EA:BA:58:CB:4E:87:09:ED:BD:0F:5C
Authority key identifier: 29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
Certificate issuer: /CN=2989647851efcd198972ed3d149ccbbde9c55c00
Certificate serial: 0199FB460F56EB31EACD5C083930E8131ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
Manifest number: 0A1A
Signing time: Sun 19 Oct 2025 07:01:36 +0000
Manifest this update: Sun 19 Oct 2025 07:01:36 +0000
Manifest next update: Mon 20 Oct 2025 07:01:36 +0000
Files and hashes: 1: 1ndyHQjZ22gElMY09b9UIH97Fd0.roa (hash: d9wD6lD21fFSwiL6i7e8/Tvl1y891h5uDv49+B9KB5s=)
2: KYlkeFHvzRmJcu09FJzLvenFXAA.crl (hash: yq3aQ/c196xmfblPxmD+MoYqW4MVGfwQ/akTZtvO2zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:0f:56:eb:31:ea:cd:5c:08:39:30:e8:13:1a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2989647851efcd198972ed3d149ccbbde9c55c00
Validity
Not Before: Oct 19 07:01:36 2025 GMT
Not After : Oct 20 07:01:36 2025 GMT
Subject: CN=552bab2a0e97363545eaba58cb4e8709edbd0f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:ad:8f:a6:83:80:18:8d:b4:3d:7a:55:12:
c8:4a:97:12:3b:df:7e:b0:36:97:3e:39:b2:9c:77:
66:f8:c2:bd:cb:52:a1:26:c4:4c:ec:04:af:3a:63:
46:db:5e:29:8b:ec:12:ad:d6:32:17:ed:73:0d:19:
63:44:51:61:21:10:f6:fd:e9:c2:a3:aa:7d:8c:00:
c3:08:3b:f9:3b:82:6e:64:fb:3e:95:5a:66:a8:6d:
40:84:a8:da:a3:26:8f:4e:56:43:e0:fd:e5:f0:8a:
0b:c7:e5:25:ef:76:f8:b4:76:36:38:3a:35:c3:e1:
d1:18:79:1e:5c:88:d0:3b:9a:54:c9:24:3d:38:ed:
c2:48:d0:e9:9d:f6:c6:1c:fd:7c:a3:0e:32:36:3c:
52:1a:2b:c7:eb:cb:8d:26:14:69:78:39:c4:32:17:
41:1b:2b:f2:6b:68:5b:3c:b9:25:95:6d:e6:4d:70:
32:f3:2a:77:b8:1b:22:9f:ca:a9:ed:8b:1e:2e:5c:
d6:b8:5e:7f:40:ba:62:68:ca:16:35:4d:e5:18:c9:
33:88:e7:ad:af:be:5e:ef:59:a9:c1:9f:e9:56:f3:
2e:4a:23:a5:6c:91:4d:4a:c0:7a:5e:0f:a1:80:d9:
b0:40:be:9d:b4:cc:83:f6:4f:9e:a8:ff:b5:bf:e2:
8f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2B:AB:2A:0E:97:36:35:45:EA:BA:58:CB:4E:87:09:ED:BD:0F:5C
X509v3 Authority Key Identifier:
keyid:29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ba:6b:ff:44:31:29:33:9c:e6:21:fd:d2:4f:c9:27:f2:9e:
71:80:ac:39:d1:0d:6f:98:22:fd:bb:6c:6b:cd:86:04:58:3a:
b8:52:ef:e5:45:94:84:16:f9:3f:ee:f0:05:17:1d:66:41:13:
2d:d2:4d:89:64:04:7a:de:1c:34:5a:3a:e3:e1:5f:6f:11:5c:
3e:12:21:34:a8:48:fc:48:bf:b6:2e:d2:43:2e:1c:d6:f0:f5:
00:8d:5a:c5:05:07:e9:4f:73:f0:1b:0b:a9:64:9d:b0:50:41:
0b:25:40:22:e5:02:0b:a3:8b:e0:b4:0f:89:58:ab:66:de:87:
ac:4c:33:50:fc:0b:1f:66:f5:e1:a7:1d:5b:51:1b:24:3e:58:
b8:db:e8:da:ed:d7:9b:d9:aa:b8:f9:60:e7:52:44:ac:d0:de:
cc:cb:08:21:87:cd:bb:91:25:7b:2a:3e:a8:d6:c2:ad:55:be:
fe:33:cd:88:53:1b:e6:1e:d9:c8:80:0e:81:16:73:99:15:81:
10:b8:76:b4:c0:73:74:11:bb:f9:e3:fc:e7:07:67:39:05:f5:
c3:32:07:bd:1a:d7:7a:52:bc:c2:68:3f:1f:aa:1d:00:c3:3e:
d0:80:14:8a:b1:2e:53:26:5b:c6:1f:07:cc:01:cd:4e:b6:34:
5c:82:79:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rg9W6zHqzVwIOTDoExrMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODk2NDc4NTFlZmNkMTk4OTcyZWQzZDE0OWNjYmJkZTlj
NTVjMDAwHhcNMjUxMDE5MDcwMTM2WhcNMjUxMDIwMDcwMTM2WjAzMTEwLwYDVQQD
Eyg1NTJiYWIyYTBlOTczNjM1NDVlYWJhNThjYjRlODcwOWVkYmQwZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCetj6aDgBiNtD16VRLISpcSO99+
sDaXPjmynHdm+MK9y1KhJsRM7ASvOmNG214pi+wSrdYyF+1zDRljRFFhIRD2/enC
o6p9jADDCDv5O4JuZPs+lVpmqG1AhKjaoyaPTlZD4P3l8IoLx+Ul73b4tHY2ODo1
w+HRGHkeXIjQO5pUySQ9OO3CSNDpnfbGHP18ow4yNjxSGivH68uNJhRpeDnEMhdB
Gyvya2hbPLkllW3mTXAy8yp3uBsin8qp7YseLlzWuF5/QLpiaMoWNU3lGMkziOet
r75e71mpwZ/pVvMuSiOlbJFNSsB6Xg+hgNmwQL6dtMyD9k+eqP+1v+KPxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUrqyoOlzY1Req6WMtOhwntvQ9cMB8GA1UdIwQY
MBaAFCmJZHhR780ZiXLtPRScy73pxVwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lsa2VGSHZ6Um1KY3UwOUZKekx2ZW5GWEFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9hYjVlODgtZDJmOS00ODdiLWJiOTIt
YTRjYjFjZmQwMGI4LzEvS1lsa2VGSHZ6Um1KY3UwOUZKekx2ZW5GWEFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9hYjVlODgtZDJmOS00ODdiLWJiOTItYTRjYjFjZmQwMGI4
LzEvS1lsa2VGSHZ6Um1KY3UwOUZKekx2ZW5GWEFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLpr/0Qx
KTOc5iH90k/JJ/KecYCsOdENb5gi/btsa82GBFg6uFLv5UWUhBb5P+7wBRcdZkET
LdJNiWQEet4cNFo64+FfbxFcPhIhNKhI/Ei/ti7SQy4c1vD1AI1axQUH6U9z8BsL
qWSdsFBBCyVAIuUCC6OL4LQPiVirZt6HrEwzUPwLH2b14acdW1EbJD5YuNvo2u3X
m9mquPlg51JErNDezMsIIYfNu5Eleyo+qNbCrVW+/jPNiFMb5h7ZyIAOgRZzmRWB
ELh2tMBzdBG7+eP85wdnOQX1wzIHvRrXelK8wmg/H6odAMM+0IAUirEuUyZbxh8H
zAHNTrY0XIJ5sQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:15 2025 by rpki-client