Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
File: k059UV3emgPC3Ic4mi_KTn1YxOw.mft (raw, json)
Hash identifier: 7/fQBtR0YmLVgVbBM6Ad2cxSDMb7RhODPwwORKJJ604=
Subject key identifier: F8:AE:E8:4E:9D:8E:B4:9F:40:C7:D3:03:DA:9A:4F:3D:81:C2:D5:24
Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
Certificate issuer: /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Certificate serial: 0199FB0ECE8E6ABE7DCEACBE18CDCDEEBCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
Manifest number: 13DC
Signing time: Sun 19 Oct 2025 06:01:15 +0000
Manifest this update: Sun 19 Oct 2025 06:01:15 +0000
Manifest next update: Mon 20 Oct 2025 06:01:15 +0000
Files and hashes: 1: Xv-bUtmsrHjQ28dXxWqb3uBJRDg.roa (hash: 0bOsSKKdGKKiMo/FFhxHgHDZgsrzyzkqrbIyGUoQTCk=)
2: cL-keBkm4oIskLWJO5aafKhJ0jo.roa (hash: s9gkn4aSVId/ngfYN3hJphayygttMpgwEt/RQqhzDWs=)
3: k059UV3emgPC3Ic4mi_KTn1YxOw.crl (hash: /HltzPZFEndlEcWmHsBohg1O9pEvKDXUfJgW7XmeMZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:ce:8e:6a:be:7d:ce:ac:be:18:cd:cd:ee:bc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Validity
Not Before: Oct 19 06:01:15 2025 GMT
Not After : Oct 20 06:01:15 2025 GMT
Subject: CN=f8aee84e9d8eb49f40c7d303da9a4f3d81c2d524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7f:34:86:7b:0d:4b:a7:21:a8:4c:6e:b5:98:
3c:f2:80:85:fb:77:de:16:74:be:90:9d:12:06:ec:
da:ef:fb:85:58:ac:b7:76:9a:1a:c8:4a:44:2a:91:
96:cb:73:1f:49:df:18:8d:60:f5:fb:73:81:32:b1:
a7:19:eb:91:bb:46:52:e6:a9:9e:d1:2c:84:4d:56:
49:fd:82:fc:3c:e0:12:ea:f8:b1:0b:8f:eb:83:68:
d4:64:72:a3:9a:06:14:d5:6a:b8:b4:ef:ff:8c:6e:
4e:9b:51:c3:d7:66:0e:b0:0f:66:71:1d:9d:24:9d:
09:f7:97:de:d0:4a:4e:20:10:4b:9d:b9:d9:fa:c4:
d9:df:a3:45:fd:d3:1f:90:c6:c7:cd:50:58:eb:18:
7c:be:c2:b2:88:ea:3d:27:ca:17:c1:3b:77:4f:16:
62:ba:94:35:f3:81:7e:5f:e9:6d:ae:06:ce:5f:ee:
87:65:ce:76:3a:c0:f9:9b:86:27:dc:04:f7:58:d2:
0f:bc:27:49:94:2f:2a:c7:c5:f7:72:ea:d0:20:22:
b6:ac:2a:14:41:d1:9f:cd:23:70:64:7d:6e:14:50:
3e:b6:a8:8a:32:34:dd:11:80:49:d2:6f:bb:ce:e1:
2a:96:41:18:b4:28:38:53:69:b4:8c:ea:8c:f0:ea:
bf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AE:E8:4E:9D:8E:B4:9F:40:C7:D3:03:DA:9A:4F:3D:81:C2:D5:24
X509v3 Authority Key Identifier:
keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ff:c9:87:1f:23:5d:1e:1d:d8:3b:9a:95:d0:dc:92:2a:b7:
35:f5:7e:ac:52:a4:34:14:c4:12:e5:ca:f3:d8:0c:06:10:8b:
31:95:3c:c1:57:63:bb:c2:dc:02:12:12:79:68:79:10:0e:14:
1c:d6:16:a4:67:54:8e:8f:66:4c:9f:a8:35:da:3a:a9:e3:17:
97:f6:d2:f8:7c:69:1b:6a:9f:34:86:2e:bb:54:b8:d2:20:dc:
26:9c:74:13:5d:c7:fd:66:2a:f6:91:50:80:c7:16:9e:76:55:
27:63:da:56:f1:38:5b:e9:89:bd:cb:2b:c1:c2:38:c9:4a:9e:
46:ca:31:01:c3:91:bd:df:2f:e4:f7:49:ce:a6:5c:b7:84:82:
02:15:1b:21:46:32:d4:59:97:42:ce:b8:05:d9:59:89:f0:fd:
79:2d:fc:77:56:5f:cd:0a:8b:3a:45:98:38:75:5c:24:d8:f8:
16:46:f6:3a:21:6a:5c:a9:c2:7b:59:11:ac:b8:99:24:99:d0:
38:b6:c8:6f:f1:9f:80:e4:0e:ee:b8:79:42:17:95:6a:f9:1c:
c3:1e:e6:f4:d7:83:11:eb:0a:fb:24:aa:dc:b6:b8:aa:e9:70:
73:74:2e:13:bd:25:ba:5a:d9:3e:8c:e4:01:1d:c1:2c:15:6c:
45:03:0c:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Ds6Oar59zqy+GM3N7rysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNGU3ZDUxNWRkZTlhMDNjMmRjODczODlhMmZjYTRlN2Q1
OGM0ZWMwHhcNMjUxMDE5MDYwMTE1WhcNMjUxMDIwMDYwMTE1WjAzMTEwLwYDVQQD
EyhmOGFlZTg0ZTlkOGViNDlmNDBjN2QzMDNkYTlhNGYzZDgxYzJkNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7X80hnsNS6chqExutZg88oCF+3fe
FnS+kJ0SBuza7/uFWKy3dpoayEpEKpGWy3MfSd8YjWD1+3OBMrGnGeuRu0ZS5qme
0SyETVZJ/YL8POAS6vixC4/rg2jUZHKjmgYU1Wq4tO//jG5Om1HD12YOsA9mcR2d
JJ0J95fe0EpOIBBLnbnZ+sTZ36NF/dMfkMbHzVBY6xh8vsKyiOo9J8oXwTt3TxZi
upQ184F+X+ltrgbOX+6HZc52OsD5m4Yn3AT3WNIPvCdJlC8qx8X3curQICK2rCoU
QdGfzSNwZH1uFFA+tqiKMjTdEYBJ0m+7zuEqlkEYtCg4U2m0jOqM8Oq/9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiu6E6djrSfQMfTA9qaTz2BwtUkMB8GA1UdIwQY
MBaAFJNOfVFd3poDwtyHOJovyk59WMTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazA1OVVWM2VtZ1BDM0ljNG1pX0tUbjFZeE93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83NTkzMjctY2M5Zi00ZDZkLWFjNzkt
OWNiOGQwMjNjYzBiLzEvazA1OVVWM2VtZ1BDM0ljNG1pX0tUbjFZeE93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83NTkzMjctY2M5Zi00ZDZkLWFjNzktOWNiOGQwMjNjYzBi
LzEvazA1OVVWM2VtZ1BDM0ljNG1pX0tUbjFZeE93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeP/Jhx8j
XR4d2DualdDckiq3NfV+rFKkNBTEEuXK89gMBhCLMZU8wVdju8LcAhISeWh5EA4U
HNYWpGdUjo9mTJ+oNdo6qeMXl/bS+HxpG2qfNIYuu1S40iDcJpx0E13H/WYq9pFQ
gMcWnnZVJ2PaVvE4W+mJvcsrwcI4yUqeRsoxAcORvd8v5PdJzqZct4SCAhUbIUYy
1FmXQs64BdlZifD9eS38d1ZfzQqLOkWYOHVcJNj4Fkb2OiFqXKnCe1kRrLiZJJnQ
OLbIb/GfgOQO7rh5QheVavkcwx7m9NeDEesK+ySq3La4qulwc3QuE70lulrZPozk
AR3BLBVsRQMMUw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:28 2025 by rpki-client