Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
File: kLW7gP7vNEZQqadz9h8LLPv3zow.mft (raw, json)
Hash identifier: NNBthqXRoaznQc4cvmAD4CRHyqK95VXNHcKmNkWO/w4=
Subject key identifier: 42:F3:A8:45:54:63:68:16:57:BF:9A:C2:0B:26:9A:AC:CD:6A:5A:48
Authority key identifier: 90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
Certificate issuer: /CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Certificate serial: 0199FA6AA27D8EDD0822DB4CBF4203BDA124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 03:01:56 +0000
Manifest this update: Sun 19 Oct 2025 03:01:56 +0000
Manifest next update: Mon 20 Oct 2025 03:01:56 +0000
Files and hashes: 1: FGJLDNwIe5pLjXrqbymC0a0gPJo.roa (hash: kQgzQHprcEB53dC9DqKWQUqd46ovamQ0wepPNfm8eyk=)
2: kLW7gP7vNEZQqadz9h8LLPv3zow.crl (hash: x5+b5uQoIu3/5dogsgn5wFs7J9MUrMUWvJXly1crAv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:a2:7d:8e:dd:08:22:db:4c:bf:42:03:bd:a1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Validity
Not Before: Oct 19 03:01:56 2025 GMT
Not After : Oct 20 03:01:56 2025 GMT
Subject: CN=42f3a8455463681657bf9ac20b269aaccd6a5a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:bf:62:9a:2d:1c:c5:6e:c7:02:c7:05:b1:
09:a9:93:63:34:31:f7:51:f4:ae:b2:15:ea:99:f7:
75:d7:18:f3:a5:e4:5b:02:39:0e:aa:c5:0d:d1:86:
34:79:9e:1a:e8:fd:31:85:65:d0:4d:30:87:84:a0:
e7:d6:48:01:a6:a9:a6:ac:62:f2:21:10:6a:43:82:
75:a4:2e:c1:4b:e4:f7:fe:d0:a3:9e:ae:2f:b0:63:
6e:60:ad:75:d8:a1:20:42:9a:ee:d8:c0:95:22:2a:
46:d2:c8:95:09:86:90:d8:80:08:fa:3a:91:6b:23:
08:14:14:c2:c6:0c:c7:c5:e1:27:f4:27:9c:5a:49:
e2:7a:58:b0:98:5f:4f:a6:ac:13:ba:c3:4e:e7:37:
3c:bb:11:15:12:4b:03:0c:6e:0d:1a:f1:c8:9c:1c:
31:7b:c5:16:c0:90:a2:be:d8:e0:f4:d7:bc:41:bd:
03:1a:51:67:ba:bb:19:7d:fd:61:1b:94:10:03:93:
ad:03:70:c9:c6:04:a2:0a:29:1a:a1:15:14:44:3c:
5b:d2:ee:fb:f6:42:62:30:15:f3:08:e0:71:77:e6:
e0:be:1c:dc:f2:f5:d1:af:ba:87:42:69:bb:7b:47:
0d:64:a3:b8:b9:c6:83:64:51:f1:0f:08:07:19:9a:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F3:A8:45:54:63:68:16:57:BF:9A:C2:0B:26:9A:AC:CD:6A:5A:48
X509v3 Authority Key Identifier:
keyid:90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:01:b2:6b:ad:f0:9e:c9:99:14:a4:03:9b:aa:2b:7f:89:40:
4f:94:8b:a3:d7:8c:29:c2:0e:6b:94:90:85:ec:61:64:87:07:
3c:34:85:e3:ff:87:1c:7c:9a:03:56:4d:0e:30:b6:a4:aa:3e:
91:2c:52:dc:00:ba:a9:e5:79:99:8f:31:f2:52:08:7f:09:fd:
0c:4a:de:88:01:92:89:80:55:d8:aa:fd:28:e2:fa:4c:79:0f:
19:c6:72:4c:dd:dd:38:9e:00:38:9d:82:56:48:50:07:ea:f7:
65:05:f3:4c:0c:cf:38:22:e9:40:96:b4:0a:4e:3d:20:0d:40:
0b:04:09:db:16:ac:62:28:fd:7d:33:78:de:ed:9b:71:7a:97:
5b:bb:3f:04:2b:30:6b:15:fc:e3:33:30:4c:3f:13:81:a5:4a:
6a:5f:2a:c7:f3:45:0b:2d:c6:ad:c9:8c:39:34:7a:53:15:17:
ce:c0:75:57:a0:17:ae:1f:26:c1:be:bf:26:21:74:53:8f:d8:
7c:41:a0:83:39:14:6e:7d:74:54:f6:ec:db:4f:b5:84:16:18:
a4:5e:3a:0b:52:e7:33:db:ba:7c:9e:72:ab:b1:2d:23:5b:ca:
78:92:18:d0:7c:34:23:33:c7:16:b2:1c:ef:79:18:15:01:0b:
cd:94:84:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6aqJ9jt0IIttMv0IDvaEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYjViYjgwZmVlZjM0NDY1MGE5YTc3M2Y2MWYwYjJjZmJm
N2NlOGMwHhcNMjUxMDE5MDMwMTU2WhcNMjUxMDIwMDMwMTU2WjAzMTEwLwYDVQQD
Eyg0MmYzYTg0NTU0NjM2ODE2NTdiZjlhYzIwYjI2OWFhY2NkNmE1YTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ly/YpotHMVuxwLHBbEJqZNjNDH3
UfSushXqmfd11xjzpeRbAjkOqsUN0YY0eZ4a6P0xhWXQTTCHhKDn1kgBpqmmrGLy
IRBqQ4J1pC7BS+T3/tCjnq4vsGNuYK112KEgQpru2MCVIipG0siVCYaQ2IAI+jqR
ayMIFBTCxgzHxeEn9CecWknieliwmF9PpqwTusNO5zc8uxEVEksDDG4NGvHInBwx
e8UWwJCivtjg9Ne8Qb0DGlFnursZff1hG5QQA5OtA3DJxgSiCikaoRUURDxb0u77
9kJiMBXzCOBxd+bgvhzc8vXRr7qHQmm7e0cNZKO4ucaDZFHxDwgHGZoUjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELzqEVUY2gWV7+awgsmmqzNalpIMB8GA1UdIwQY
MBaAFJC1u4D+7zRGUKmnc/YfCyz7986MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wNTIxMTgtYzQ2Yi00OGI0LTg3ZGMt
NWVkNTI3MGVkZjIzLzEva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wNTIxMTgtYzQ2Yi00OGI0LTg3ZGMtNWVkNTI3MGVkZjIz
LzEva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwGya63w
nsmZFKQDm6orf4lAT5SLo9eMKcIOa5SQhexhZIcHPDSF4/+HHHyaA1ZNDjC2pKo+
kSxS3AC6qeV5mY8x8lIIfwn9DEreiAGSiYBV2Kr9KOL6THkPGcZyTN3dOJ4AOJ2C
VkhQB+r3ZQXzTAzPOCLpQJa0Ck49IA1ACwQJ2xasYij9fTN43u2bcXqXW7s/BCsw
axX84zMwTD8TgaVKal8qx/NFCy3GrcmMOTR6UxUXzsB1V6AXrh8mwb6/JiF0U4/Y
fEGggzkUbn10VPbs20+1hBYYpF46C1LnM9u6fJ5yq7EtI1vKeJIY0Hw0IzPHFrIc
73kYFQELzZSEng==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:58 2025 by rpki-client