Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
File: KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft (raw, json)
Hash identifier: E6mnI2fKWLnla+3gQXLOs/Ch1xS/C8NOXhkkoQUjYLI=
Subject key identifier: 68:5A:7E:7E:51:F8:94:D0:FE:2E:B9:A9:D9:2E:D4:22:87:29:2E:7E
Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
Certificate issuer: /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Certificate serial: 019A4EF5928323D3619201898436B251DC9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:47 +0000
Manifest this update: Tue 04 Nov 2025 13:01:47 +0000
Manifest next update: Wed 05 Nov 2025 13:01:47 +0000
Files and hashes: 1: 023NXf0NRLbsgezphpzZHNxZ3e4.roa (hash: 5Oh3BvS9337aAFlKHkUHIB4jGr7DBQIIdxMScBWVcOU=)
2: KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl (hash: eErF1m5vsKXL8DO/AsZRM9SiKgB+iwmZ2iIhDDx46lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:92:83:23:d3:61:92:01:89:84:36:b2:51:dc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Validity
Not Before: Nov 4 13:01:47 2025 GMT
Not After : Nov 5 13:01:47 2025 GMT
Subject: CN=685a7e7e51f894d0fe2eb9a9d92ed42287292e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:bc:f8:61:4a:52:fb:22:1b:5b:ec:7f:a2:
60:82:79:4d:7e:a6:a8:1a:ce:a1:b3:7f:30:4f:93:
9a:b9:58:0b:72:36:c3:65:90:2c:a6:92:46:ad:b5:
08:5b:44:b7:82:d8:0e:89:4f:93:56:ab:55:49:52:
13:c5:7d:8d:0c:fc:1a:5a:67:5b:eb:03:3b:17:c4:
4d:f4:24:84:50:32:b5:fa:db:e4:a0:5a:12:42:b9:
f2:a1:34:cd:93:73:c0:1a:16:55:43:ee:5a:ba:ca:
1e:e1:df:e4:89:95:84:4e:c6:38:03:63:87:c9:49:
74:59:d8:f7:10:da:54:fb:6a:ae:4c:aa:5c:ec:13:
83:47:54:82:34:25:a7:36:ef:3c:e3:1e:c7:b8:84:
6b:d6:fb:76:17:3a:bc:41:4e:7f:f5:3b:85:02:24:
b5:d3:81:ea:8f:ce:ac:30:51:0b:8f:ea:a5:23:ea:
f5:ca:c7:4a:7d:44:36:ea:f1:99:4e:f6:a9:be:21:
86:c0:47:4a:ee:cb:a2:ee:a6:bd:8d:ba:30:c5:47:
10:70:05:71:4c:da:c3:b9:28:58:e7:95:13:c4:d9:
95:45:14:8b:e4:b5:fa:c9:68:ef:91:35:9a:84:cd:
bd:35:c9:05:05:6b:aa:d5:da:55:6e:91:69:49:03:
0f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5A:7E:7E:51:F8:94:D0:FE:2E:B9:A9:D9:2E:D4:22:87:29:2E:7E
X509v3 Authority Key Identifier:
keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:43:a1:3c:8c:bc:e9:85:94:88:b1:fe:ad:f2:e5:8a:5d:f8:
c8:30:f1:a3:79:f4:a2:1e:aa:75:37:2e:fe:cb:7b:cf:70:65:
4b:84:1e:e2:40:2c:4f:a5:4e:7e:e7:05:a8:d0:a5:01:de:ca:
30:91:2d:23:f8:80:df:60:24:37:f7:5d:6b:b6:22:36:13:e7:
e8:99:5f:e8:92:d6:24:fa:f5:d5:20:71:f8:3b:51:2f:ac:d0:
20:2b:ce:84:6d:54:a0:38:f2:25:dd:49:2d:8e:ac:fa:ca:64:
57:c4:17:b6:48:e2:71:d3:db:3e:0b:77:35:59:ea:52:3d:fc:
e7:3f:5c:87:a0:7f:c6:4c:6a:84:a9:58:99:55:12:5c:d3:c1:
d0:b8:44:58:79:5f:63:29:14:cb:36:94:9f:3a:82:4e:d8:48:
1f:d5:6a:74:0d:72:65:18:e5:0d:13:3d:34:5b:c0:48:b0:fa:
c5:f5:ff:97:71:e8:ca:d5:aa:11:58:82:29:96:b8:42:09:62:
5b:73:1c:68:c9:0a:f1:da:0e:aa:e0:0b:fb:3c:7e:a0:b1:e1:
ac:7b:5f:92:b4:26:5f:cd:5f:e7:ef:ec:bd:a5:51:7a:fc:48:
fd:ac:a9:21:00:52:8e:f7:18:5c:2d:27:71:06:cf:21:78:c4:
c2:d9:24:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9ZKDI9NhkgGJhDayUdybMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YTM5ZWJiNGU1N2ZmMzQ4NTNjNzZiMGY1ODc3YWU4YWIz
YzdjZjYwHhcNMjUxMTA0MTMwMTQ3WhcNMjUxMTA1MTMwMTQ3WjAzMTEwLwYDVQQD
Eyg2ODVhN2U3ZTUxZjg5NGQwZmUyZWI5YTlkOTJlZDQyMjg3MjkyZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXe8+GFKUvsiG1vsf6JggnlNfqao
Gs6hs38wT5OauVgLcjbDZZAsppJGrbUIW0S3gtgOiU+TVqtVSVITxX2NDPwaWmdb
6wM7F8RN9CSEUDK1+tvkoFoSQrnyoTTNk3PAGhZVQ+5ausoe4d/kiZWETsY4A2OH
yUl0Wdj3ENpU+2quTKpc7BODR1SCNCWnNu884x7HuIRr1vt2Fzq8QU5/9TuFAiS1
04Hqj86sMFELj+qlI+r1ysdKfUQ26vGZTvapviGGwEdK7sui7qa9jbowxUcQcAVx
TNrDuShY55UTxNmVRRSL5LX6yWjvkTWahM29NckFBWuq1dpVbpFpSQMPZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhafn5R+JTQ/i65qdku1CKHKS5+MB8GA1UdIwQY
MBaAFCmjnrtOV/80hTx2sPWHeuirPHz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZjk3ZmMtNWZhMy00MDgzLTk1MTUt
Y2Q5ZGEyZDkyZThkLzEvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yZjk3ZmMtNWZhMy00MDgzLTk1MTUtY2Q5ZGEyZDkyZThk
LzEvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0OhPIy8
6YWUiLH+rfLlil34yDDxo3n0oh6qdTcu/st7z3BlS4Qe4kAsT6VOfucFqNClAd7K
MJEtI/iA32AkN/dda7YiNhPn6Jlf6JLWJPr11SBx+DtRL6zQICvOhG1UoDjyJd1J
LY6s+spkV8QXtkjicdPbPgt3NVnqUj385z9ch6B/xkxqhKlYmVUSXNPB0LhEWHlf
YykUyzaUnzqCTthIH9VqdA1yZRjlDRM9NFvASLD6xfX/l3HoytWqEViCKZa4Qgli
W3McaMkK8doOquAL+zx+oLHhrHtfkrQmX81f5+/svaVRevxI/aypIQBSjvcYXC0n
cQbPIXjEwtkk3g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:20 2025 by rpki-client