Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
File: K_sNVIxJtqVhik07PB2kw9FEv0Y.mft (raw, json)
Hash identifier: Gr9VX3pifuJ4t8/6mNGuOKfKTGxXcrTPuWh8hIvvZZg=
Subject key identifier: D9:4F:24:66:71:0E:75:A0:B9:BA:28:6D:7C:CC:C5:8A:A6:FA:47:CA
Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Certificate serial: 019A00DA75F308452697FFF79482FC8828C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
Manifest number: 0C86
Signing time: Mon 20 Oct 2025 09:01:48 +0000
Manifest this update: Mon 20 Oct 2025 09:01:48 +0000
Manifest next update: Tue 21 Oct 2025 09:01:48 +0000
Files and hashes: 1: BZKsmbKkOgpiNQItA4ToED7-XVE.roa (hash: +K+xyT8SZ5ycbey8u6qvz7hsOUxVuM3hMuLKIog812k=)
2: K_sNVIxJtqVhik07PB2kw9FEv0Y.crl (hash: S/J2Kz23f2FQ1+zXohPeP916LRJ4inkVHvtzfE4rBQs=)
3: igZag3cgyJRdv01vkp4DRY6VvTk.roa (hash: JpGBcXUxW150Ej7SxtVldKg4tZ/GU0LkZvopH1/QgMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:75:f3:08:45:26:97:ff:f7:94:82:fc:88:28:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Validity
Not Before: Oct 20 09:01:48 2025 GMT
Not After : Oct 21 09:01:48 2025 GMT
Subject: CN=d94f2466710e75a0b9ba286d7cccc58aa6fa47ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1b:cd:7b:ff:c5:a4:4c:6c:aa:ea:e5:c5:4d:
50:c1:43:ce:2c:80:dd:ef:1c:69:48:fe:35:01:bc:
29:04:d7:71:65:bf:82:00:b3:6b:e7:08:70:72:f0:
b2:d8:93:f7:bf:bc:32:c6:61:cd:46:30:ef:aa:47:
29:48:aa:60:43:f2:a1:76:94:72:c7:3f:55:8f:dd:
b1:6e:d7:6e:f8:cb:58:60:45:85:87:15:e2:92:79:
f9:39:69:15:0d:0a:b8:6e:7d:7a:31:1e:03:2e:ad:
fc:20:58:c4:c3:a6:f0:4c:c3:10:dd:d8:a9:72:3c:
2a:ce:22:11:7d:fc:69:6a:0a:89:73:5d:af:11:f7:
9a:d4:41:8d:09:80:d0:79:4f:70:42:df:99:cb:ac:
a5:fb:c8:a5:9c:f5:9c:29:fa:ca:3c:bb:65:b1:54:
d1:0d:b1:23:f7:3c:98:f3:45:74:27:ce:f3:8f:b0:
92:4f:96:b2:10:21:52:68:4a:69:2b:9d:83:65:c0:
15:11:2f:50:97:10:b5:7a:d3:6e:ca:8e:df:83:4e:
12:32:c2:50:bd:3d:40:39:61:84:6d:70:10:8a:e9:
2f:d8:42:bb:9e:91:1a:8a:f3:3e:38:e7:3f:b7:68:
09:29:31:f5:62:b5:70:8b:d2:9d:69:10:11:1f:d3:
e8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4F:24:66:71:0E:75:A0:B9:BA:28:6D:7C:CC:C5:8A:A6:FA:47:CA
X509v3 Authority Key Identifier:
keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c0:24:ae:57:62:f5:48:2d:dc:4a:44:45:1d:44:90:0e:92:
9f:4e:88:8a:6f:52:db:1f:ee:b4:43:75:53:95:09:7d:d4:af:
30:52:d1:23:63:d4:df:80:4b:29:35:73:15:66:41:a6:6c:fb:
3f:f3:72:5c:dc:89:06:37:82:7e:6f:f7:2a:e7:0c:fb:ab:45:
2e:98:c5:10:b3:6e:97:ef:84:17:2a:78:85:f2:f4:e2:e8:8d:
c5:1c:b7:a6:31:c9:c5:b7:34:e1:a5:e9:87:dc:d1:61:59:3e:
0b:1e:e1:f8:2b:08:1b:87:b3:1d:09:d4:b6:7b:01:f4:c0:50:
a4:38:ca:27:ec:66:32:c4:a2:46:ed:e2:76:f0:31:5d:3b:29:
f2:ae:80:c4:bb:46:36:01:0f:ca:c6:bc:bf:2f:88:e5:28:9a:
ce:4f:a1:2b:90:d7:0c:35:1b:6a:d7:6a:0f:cc:76:09:06:4c:
f2:5a:c6:e4:8b:16:9e:b3:14:91:5c:30:9c:78:fa:6c:df:24:
36:46:88:19:62:de:16:46:41:ad:50:5f:ce:dd:b0:47:2b:1a:
d2:dd:26:99:ac:c7:b3:5b:41:f2:0c:b6:e5:ce:a3:36:62:91:
cf:b9:04:f5:2a:de:2c:d3:95:38:20:72:71:96:76:8d:cf:2f:
05:66:1a:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2nXzCEUml//3lIL8iCjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZmIwZDU0OGM0OWI2YTU2MThhNGQzYjNjMWRhNGMzZDE0
NGJmNDYwHhcNMjUxMDIwMDkwMTQ4WhcNMjUxMDIxMDkwMTQ4WjAzMTEwLwYDVQQD
EyhkOTRmMjQ2NjcxMGU3NWEwYjliYTI4NmQ3Y2NjYzU4YWE2ZmE0N2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhvNe//FpExsqurlxU1QwUPOLIDd
7xxpSP41AbwpBNdxZb+CALNr5whwcvCy2JP3v7wyxmHNRjDvqkcpSKpgQ/KhdpRy
xz9Vj92xbtdu+MtYYEWFhxXiknn5OWkVDQq4bn16MR4DLq38IFjEw6bwTMMQ3dip
cjwqziIRffxpagqJc12vEfea1EGNCYDQeU9wQt+Zy6yl+8ilnPWcKfrKPLtlsVTR
DbEj9zyY80V0J87zj7CST5ayECFSaEppK52DZcAVES9QlxC1etNuyo7fg04SMsJQ
vT1AOWGEbXAQiukv2EK7npEaivM+OOc/t2gJKTH1YrVwi9KdaRARH9PojQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlPJGZxDnWguboobXzMxYqm+kfKMB8GA1UdIwQY
MBaAFCv7DVSMSbalYYpNOzwdpMPRRL9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mNWQwZjktY2EyZi00YjZlLTkxN2Mt
MTM3MTA5MzY5NjIxLzEvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mNWQwZjktY2EyZi00YjZlLTkxN2MtMTM3MTA5MzY5NjIx
LzEvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMAkrldi
9Ugt3EpERR1EkA6Sn06Iim9S2x/utEN1U5UJfdSvMFLRI2PU34BLKTVzFWZBpmz7
P/NyXNyJBjeCfm/3KucM+6tFLpjFELNul++EFyp4hfL04uiNxRy3pjHJxbc04aXp
h9zRYVk+Cx7h+CsIG4ezHQnUtnsB9MBQpDjKJ+xmMsSiRu3idvAxXTsp8q6AxLtG
NgEPysa8vy+I5Siazk+hK5DXDDUbatdqD8x2CQZM8lrG5IsWnrMUkVwwnHj6bN8k
NkaIGWLeFkZBrVBfzt2wRysa0t0mmazHs1tB8gy25c6jNmKRz7kE9SreLNOVOCBy
cZZ2jc8vBWYa7g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:38:28 2025 by rpki-client