Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft
File: kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft (raw, json)
Hash identifier: 8GSfySfLHc6+gD8XORWDlXRGJAGkOlZp/jzw07FN0v8=
Subject key identifier: E9:E0:78:E5:8C:4C:95:61:24:5D:02:DB:F3:8B:34:A5:50:9D:E4:B5
Authority key identifier: 90:F5:92:8C:75:2A:D9:A0:8C:FE:B1:B8:8F:46:3C:3C:0D:D2:E8:5D
Certificate issuer: /CN=90f5928c752ad9a08cfeb1b88f463c3c0dd2e85d
Certificate serial: 0199FFC877B70B1F5886DA1FC362550D0DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft
Manifest number: 0834
Signing time: Mon 20 Oct 2025 04:02:31 +0000
Manifest this update: Mon 20 Oct 2025 04:02:31 +0000
Manifest next update: Tue 21 Oct 2025 04:02:31 +0000
Files and hashes: 1: kPWSjHUq2aCM_rG4j0Y8PA3S6F0.crl (hash: AezpXMLZKOkSY+xrKmJ2bYIxIhhadh1t+J5zF+aplvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:77:b7:0b:1f:58:86:da:1f:c3:62:55:0d:0d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f5928c752ad9a08cfeb1b88f463c3c0dd2e85d
Validity
Not Before: Oct 20 04:02:31 2025 GMT
Not After : Oct 21 04:02:31 2025 GMT
Subject: CN=e9e078e58c4c9561245d02dbf38b34a5509de4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:26:b6:a5:b9:de:6f:b2:c7:02:26:5a:83:
b6:42:0d:29:76:11:be:e0:b7:a4:b6:cd:df:3a:e6:
b2:96:ee:77:86:fb:81:5c:a6:ce:1a:f1:cc:5b:59:
e8:24:2f:10:a8:2f:1a:d1:f9:4f:f6:89:56:23:fd:
6e:a8:ca:83:d3:13:7f:86:22:f5:f1:62:29:90:2f:
c6:e0:5e:da:49:e8:66:65:92:b2:c9:89:7e:09:55:
65:72:d7:d4:90:5d:47:9d:b3:65:fb:2a:1a:8c:5f:
9d:b4:6c:68:68:34:65:2a:49:67:79:8f:1f:ee:43:
49:3b:8d:8d:33:63:4c:23:4b:02:b0:c9:03:b0:25:
6d:df:aa:7c:ba:4d:6b:92:ff:07:76:3f:54:84:67:
0e:23:93:73:e6:20:bd:03:11:23:4b:c5:4b:c2:92:
ff:f1:43:dc:4a:ab:48:c2:83:80:78:2f:ad:dd:4c:
d5:da:c1:bb:03:0a:b3:ca:f4:e3:ae:94:78:d8:ef:
e5:65:69:d3:04:c4:e6:6f:24:89:9a:75:92:c1:1d:
d9:7b:50:5b:be:0b:c8:c9:fe:cb:bf:c6:56:d5:fb:
d1:2e:12:b7:a0:f3:c6:64:c6:66:59:f7:3b:05:54:
88:2c:b1:fa:0f:92:1f:28:b4:1c:3c:15:cf:bb:b9:
e0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E0:78:E5:8C:4C:95:61:24:5D:02:DB:F3:8B:34:A5:50:9D:E4:B5
X509v3 Authority Key Identifier:
keyid:90:F5:92:8C:75:2A:D9:A0:8C:FE:B1:B8:8F:46:3C:3C:0D:D2:E8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0f:b8:0c:c5:b7:f9:e0:f5:64:a8:b3:bb:56:dc:07:2b:d4:
f0:5c:64:07:5b:7b:5c:4f:4a:6c:1d:e2:d5:61:86:a6:e0:c0:
92:b8:31:aa:ca:bd:19:64:09:c7:df:32:fd:b9:6b:62:4e:f9:
be:e6:2f:66:31:ba:47:7f:b6:3a:53:83:4f:6a:35:db:fd:8a:
25:9c:d2:c9:3b:ec:bd:cd:a6:5a:7c:9a:24:a7:34:b9:63:8d:
8c:88:af:78:ec:75:2e:71:44:e0:f8:20:7b:35:2c:d9:44:55:
c4:cc:2c:27:8e:8a:aa:97:66:1b:97:9b:97:97:71:0c:6f:c3:
33:dd:65:ed:3f:82:e6:24:8b:5d:7d:c9:e2:2d:c9:73:fc:ce:
7f:6c:b1:10:93:bc:31:bf:0b:cc:ed:7d:ac:1e:4d:9e:80:59:
1b:63:bf:76:84:9c:76:8f:00:5d:4e:88:89:b6:51:8b:d7:ec:
a1:62:a0:4f:8c:d7:9b:3a:ed:97:8f:d2:1b:91:ae:01:86:0b:
80:7a:39:85:e5:a9:da:51:2d:2f:43:98:c0:d1:24:fe:4d:5a:
06:ee:3d:02:8c:6f:fa:e0:5f:29:bf:9f:5c:46:3d:f9:3d:0e:
60:fd:0a:fa:75:ae:ce:fa:fe:89:1e:61:a2:b1:9a:32:a4:b5:
83:99:a5:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yHe3Cx9Yhtofw2JVDQ26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjU5MjhjNzUyYWQ5YTA4Y2ZlYjFiODhmNDYzYzNjMGRk
MmU4NWQwHhcNMjUxMDIwMDQwMjMxWhcNMjUxMDIxMDQwMjMxWjAzMTEwLwYDVQQD
EyhlOWUwNzhlNThjNGM5NTYxMjQ1ZDAyZGJmMzhiMzRhNTUwOWRlNGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvMmtqW53m+yxwImWoO2Qg0pdhG+
4Lekts3fOuaylu53hvuBXKbOGvHMW1noJC8QqC8a0flP9olWI/1uqMqD0xN/hiL1
8WIpkC/G4F7aSehmZZKyyYl+CVVlctfUkF1HnbNl+yoajF+dtGxoaDRlKklneY8f
7kNJO42NM2NMI0sCsMkDsCVt36p8uk1rkv8Hdj9UhGcOI5Nz5iC9AxEjS8VLwpL/
8UPcSqtIwoOAeC+t3UzV2sG7AwqzyvTjrpR42O/lZWnTBMTmbySJmnWSwR3Ze1Bb
vgvIyf7Lv8ZW1fvRLhK3oPPGZMZmWfc7BVSILLH6D5IfKLQcPBXPu7ng/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOngeOWMTJVhJF0C2/OLNKVQneS1MB8GA1UdIwQY
MBaAFJD1kox1KtmgjP6xuI9GPDwN0uhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BXU2pIVXEyYUNNX3JHNGowWThQQTNTNkYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zMWEyMGEtNzdkMC00YWM4LWEwOWYt
MDRhNmNkODE2YTAzLzEva1BXU2pIVXEyYUNNX3JHNGowWThQQTNTNkYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8zMWEyMGEtNzdkMC00YWM4LWEwOWYtMDRhNmNkODE2YTAz
LzEva1BXU2pIVXEyYUNNX3JHNGowWThQQTNTNkYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHw+4DMW3
+eD1ZKizu1bcByvU8FxkB1t7XE9KbB3i1WGGpuDAkrgxqsq9GWQJx98y/blrYk75
vuYvZjG6R3+2OlODT2o12/2KJZzSyTvsvc2mWnyaJKc0uWONjIiveOx1LnFE4Pgg
ezUs2URVxMwsJ46KqpdmG5ebl5dxDG/DM91l7T+C5iSLXX3J4i3Jc/zOf2yxEJO8
Mb8LzO19rB5NnoBZG2O/doScdo8AXU6IibZRi9fsoWKgT4zXmzrtl4/SG5GuAYYL
gHo5heWp2lEtL0OYwNEk/k1aBu49Aoxv+uBfKb+fXEY9+T0OYP0K+nWuzvr+iR5h
orGaMqS1g5mlmA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:42:58 2025 by rpki-client