Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
File: kWAz3VV0R5Zb2u-LRySl5308Ba4.mft (raw, json)
Hash identifier: QMXfCf5XuT9xU8JMV57xmpXJw3WnFU51LuphEXgXrOM=
Subject key identifier: 4E:0A:6E:4C:80:8F:9A:08:EC:3F:54:67:23:CF:15:4E:71:53:DA:C7
Authority key identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
Certificate issuer: /CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Certificate serial: 019A4CCECC5D82B54968A64FD4CC8E863582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
Manifest number: 0975
Signing time: Tue 04 Nov 2025 03:00:12 +0000
Manifest this update: Tue 04 Nov 2025 03:00:12 +0000
Manifest next update: Wed 05 Nov 2025 03:00:12 +0000
Files and hashes: 1: H9X8h-Jo2ED93QCRffXvwdj9Wvo.roa (hash: 12jQO6dfQb4ZiHwe3922CE3yIwiEA5iTvy+mpgxA/Kk=)
2: kWAz3VV0R5Zb2u-LRySl5308Ba4.crl (hash: 3+adtXvR5PnJ3tSAyWRV/Rn5sXt/kaF5szNB2yhBHtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 03:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:ce:cc:5d:82:b5:49:68:a6:4f:d4:cc:8e:86:35:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Validity
Not Before: Nov 4 03:00:12 2025 GMT
Not After : Nov 5 03:00:12 2025 GMT
Subject: CN=4e0a6e4c808f9a08ec3f546723cf154e7153dac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:07:c3:e5:19:8b:cf:03:67:13:de:0f:53:
36:f0:87:a7:00:77:54:dc:cc:1a:14:c8:1a:b9:13:
05:4e:36:e3:89:cd:f8:49:87:78:92:cd:65:80:a7:
db:eb:c8:d5:bf:ea:fb:81:18:6a:14:93:4c:9b:90:
d7:5b:9d:72:d4:3a:62:72:8e:66:ea:2f:06:d9:f2:
fe:cb:2b:54:c0:cc:09:35:e5:9c:d3:83:f9:32:db:
4d:12:73:28:c8:f9:8f:99:3c:2e:11:3d:ec:17:60:
13:21:e7:fc:df:6c:f9:f2:32:14:02:7c:85:51:d5:
05:f9:cc:29:99:f8:50:12:3f:69:a9:68:cf:a4:c8:
b0:5a:62:58:17:87:fc:d2:31:5d:1a:dd:0d:22:15:
dc:68:1b:de:dc:94:ec:22:f1:29:28:cb:97:0c:c4:
d5:dd:b3:dd:ee:89:3d:05:9b:fb:19:50:9a:1d:ee:
24:cf:f9:cd:78:f8:f5:ed:84:f1:f1:ea:90:c8:b8:
9e:1e:72:8f:d0:57:1b:ea:93:80:bd:a8:39:d0:50:
1b:04:68:a1:35:43:76:68:22:5a:44:08:4d:2d:c6:
dc:42:de:1f:01:1a:c6:d7:24:22:90:66:99:16:a9:
d5:a7:07:d5:5d:6c:c4:7b:7e:3a:1c:af:97:e7:b3:
7a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0A:6E:4C:80:8F:9A:08:EC:3F:54:67:23:CF:15:4E:71:53:DA:C7
X509v3 Authority Key Identifier:
keyid:91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:38:af:12:b9:10:75:52:fd:ed:e6:32:a5:a1:33:92:2b:0b:
b9:51:35:a3:a2:90:a8:2d:64:02:78:83:6b:fa:5b:cf:06:86:
05:a9:a0:91:e6:91:50:66:bb:b1:61:fe:b5:7f:e1:a8:9a:01:
8d:5c:16:d3:6c:66:8d:ed:d3:08:eb:48:cc:e8:7a:76:14:82:
ef:75:4c:1e:fa:25:4f:f2:37:9c:7a:91:6f:42:ab:2f:79:df:
22:53:13:93:4d:4f:17:fb:d9:ad:a3:1d:fc:33:99:07:7d:d6:
8f:87:ff:0c:d4:61:65:09:fa:49:a2:10:af:3b:b5:97:d8:1c:
14:55:40:85:2e:64:cf:1f:5e:39:3f:ab:5a:5c:48:da:11:6c:
2a:a0:e1:9b:af:b3:ac:0b:f7:c1:40:3e:d1:07:a7:75:4b:f5:
b7:15:96:0d:a9:2f:1a:b4:3b:0f:d1:25:49:e7:5f:65:dd:bc:
89:11:a8:3d:64:1e:62:40:03:b6:0c:7e:0d:b9:67:89:ea:41:
77:56:3c:52:eb:84:04:1a:e5:dd:e8:a2:a1:4e:b6:bc:ce:3f:
92:64:7a:c8:33:13:fb:d0:45:7e:c0:ea:93:8d:8c:13:01:eb:
59:1e:88:c5:40:d6:c7:1b:7c:be:8f:9a:34:27:79:5b:5c:03:
9b:ce:91:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMzsxdgrVJaKZP1MyOhjWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNjAzM2RkNTU3NDQ3OTY1YmRhZWY4YjQ3MjRhNWU3N2Qz
YzA1YWUwHhcNMjUxMTA0MDMwMDEyWhcNMjUxMTA1MDMwMDEyWjAzMTEwLwYDVQQD
Eyg0ZTBhNmU0YzgwOGY5YTA4ZWMzZjU0NjcyM2NmMTU0ZTcxNTNkYWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrMHw+UZi88DZxPeD1M28IenAHdU
3MwaFMgauRMFTjbjic34SYd4ks1lgKfb68jVv+r7gRhqFJNMm5DXW51y1Dpico5m
6i8G2fL+yytUwMwJNeWc04P5MttNEnMoyPmPmTwuET3sF2ATIef832z58jIUAnyF
UdUF+cwpmfhQEj9pqWjPpMiwWmJYF4f80jFdGt0NIhXcaBve3JTsIvEpKMuXDMTV
3bPd7ok9BZv7GVCaHe4kz/nNePj17YTx8eqQyLieHnKP0Fcb6pOAvag50FAbBGih
NUN2aCJaRAhNLcbcQt4fARrG1yQikGaZFqnVpwfVXWzEe346HK+X57N6GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4KbkyAj5oI7D9UZyPPFU5xU9rHMB8GA1UdIwQY
MBaAFJFgM91VdEeWW9rvi0ckped9PAWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1dBejNWVjBSNVpiMnUtTFJ5U2w1MzA4QmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iYzUxZjQtNjFmMi00ZmFhLWEwMmEt
NjAyOTM2NTM5NDA1LzEva1dBejNWVjBSNVpiMnUtTFJ5U2w1MzA4QmE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9iYzUxZjQtNjFmMi00ZmFhLWEwMmEtNjAyOTM2NTM5NDA1
LzEva1dBejNWVjBSNVpiMnUtTFJ5U2w1MzA4QmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTivErkQ
dVL97eYypaEzkisLuVE1o6KQqC1kAniDa/pbzwaGBamgkeaRUGa7sWH+tX/hqJoB
jVwW02xmje3TCOtIzOh6dhSC73VMHvolT/I3nHqRb0KrL3nfIlMTk01PF/vZraMd
/DOZB33Wj4f/DNRhZQn6SaIQrzu1l9gcFFVAhS5kzx9eOT+rWlxI2hFsKqDhm6+z
rAv3wUA+0QendUv1txWWDakvGrQ7D9ElSedfZd28iRGoPWQeYkADtgx+DblniepB
d1Y8UuuEBBrl3eiioU62vM4/kmR6yDMT+9BFfsDqk42MEwHrWR6IxUDWxxt8vo+a
NCd5W1wDm86RVw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:38 2025 by rpki-client