Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: uUgrufNDGeeZ9ZAInXh1wkNtAqRFwUg2C8SVhn/Up5U=
Subject key identifier: 08:3C:59:49:3A:27:8A:89:FA:B2:0C:91:CE:5B:01:C9:9E:28:AA:50
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 019A4D74259D1F24D444BAD0C86E435154FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 05DA
Signing time: Tue 04 Nov 2025 06:00:48 +0000
Manifest this update: Tue 04 Nov 2025 06:00:48 +0000
Manifest next update: Wed 05 Nov 2025 06:00:48 +0000
Files and hashes: 1: 3IEfkjrujN1otjC8OV1_yIF0n7I.roa (hash: Wz9JDIVRLlsFUBi000ABJhgJex6MuDmGadz9gz6sp1w=)
2: ZStJjyYeeW80s3UrenWKL6Fviiw.roa (hash: QylBnhEyvnv79g3JL425L8t6RW7UscFPY8hGIf7mOwQ=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: DH0uIgmod1yD/IeceZB8/uuGXfnrzr/+NvKN5fd9o8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:25:9d:1f:24:d4:44:ba:d0:c8:6e:43:51:54:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Nov 4 06:00:48 2025 GMT
Not After : Nov 5 06:00:48 2025 GMT
Subject: CN=083c59493a278a89fab20c91ce5b01c99e28aa50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:c9:d1:33:19:34:a8:25:55:31:11:a7:b9:
de:c2:c6:29:c8:02:77:05:96:b7:4b:f0:de:44:5b:
3b:56:ca:8d:8c:a7:48:c3:17:4c:27:61:f9:35:02:
be:d6:15:bc:75:0e:63:10:ed:a3:7b:15:f5:8e:73:
16:12:98:f4:fb:30:49:0c:ff:4f:2f:b4:d1:83:6f:
7e:d1:21:c9:88:64:10:ce:73:67:d6:c9:e2:58:0d:
2f:91:9e:04:48:38:21:e0:e5:2d:74:e8:45:d8:2a:
ae:6f:1d:d1:ca:80:ae:e4:5a:07:32:f7:62:b4:86:
13:dc:2d:91:3d:d9:0a:07:2a:31:1d:02:39:f9:28:
7a:90:a5:56:e1:60:ae:49:54:cd:be:57:6a:38:e0:
7e:7d:6a:d0:8f:ef:4f:9e:9e:bf:d2:c2:e1:0f:6d:
c5:ae:18:ff:87:6a:fd:86:4d:db:88:e8:f2:46:18:
1a:18:56:20:37:75:27:a0:12:27:d7:1c:d0:6a:a9:
82:9f:82:79:22:c8:6b:d5:c5:56:d7:12:0e:83:8e:
bd:5a:81:89:ca:a5:91:90:b5:e7:d2:32:33:80:38:
a6:b6:31:cf:d3:8e:1b:ca:80:ed:15:af:98:26:57:
19:c2:ba:7f:5a:28:95:cb:32:db:af:3b:b8:a6:09:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3C:59:49:3A:27:8A:89:FA:B2:0C:91:CE:5B:01:C9:9E:28:AA:50
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:29:b9:40:0d:4e:63:c0:b1:10:90:36:86:42:14:96:8f:d3:
29:8b:b5:b9:e0:c2:74:3e:cb:a7:4b:93:ea:7b:36:5d:25:d2:
0c:14:6d:6a:70:b0:b4:0b:82:b5:ba:04:08:52:93:9c:0f:02:
e7:f5:c0:8d:29:c3:2b:f2:75:aa:0c:eb:50:42:b7:76:83:49:
91:58:74:52:94:2b:74:7a:7c:6c:e3:45:0d:0f:8f:4d:3c:89:
dd:a1:72:03:cf:3a:aa:ec:f4:8e:e2:ff:5d:84:01:91:7d:a1:
d2:89:96:74:6e:01:bf:47:60:eb:fc:25:62:4f:40:57:a4:b8:
27:34:40:b6:71:18:ec:d5:0e:98:6e:bd:11:cd:34:0c:5d:da:
ec:d5:89:57:30:0a:ad:67:52:fb:df:9c:d6:19:29:2a:9d:f2:
7b:75:08:6b:d0:17:cb:77:8a:fa:31:c6:ff:9c:50:36:f4:46:
66:14:7a:73:3c:c0:11:fc:e9:e1:f8:27:68:9e:6b:bf:ba:85:
87:45:4a:1c:d9:1b:89:ea:3f:de:cf:cb:4c:e3:f9:24:a3:ea:
0f:f2:ec:c1:be:58:82:57:65:f0:f7:24:e5:69:63:51:3d:ad:
5f:9b:ff:23:17:2a:4c:89:6c:9d:3a:d7:3f:d2:af:fd:6b:59:
41:78:da:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdCWdHyTURLrQyG5DUVT+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwODc4YzM5NjI0YWVkZTM5MjllMTdjY2Q5NTg3OGMyOTJi
MmYzNTEwHhcNMjUxMTA0MDYwMDQ4WhcNMjUxMTA1MDYwMDQ4WjAzMTEwLwYDVQQD
EygwODNjNTk0OTNhMjc4YTg5ZmFiMjBjOTFjZTViMDFjOTllMjhhYTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGXJ0TMZNKglVTERp7newsYpyAJ3
BZa3S/DeRFs7VsqNjKdIwxdMJ2H5NQK+1hW8dQ5jEO2jexX1jnMWEpj0+zBJDP9P
L7TRg29+0SHJiGQQznNn1sniWA0vkZ4ESDgh4OUtdOhF2Cqubx3RyoCu5FoHMvdi
tIYT3C2RPdkKByoxHQI5+Sh6kKVW4WCuSVTNvldqOOB+fWrQj+9Pnp6/0sLhD23F
rhj/h2r9hk3biOjyRhgaGFYgN3UnoBIn1xzQaqmCn4J5Ishr1cVW1xIOg469WoGJ
yqWRkLXn0jIzgDimtjHP044byoDtFa+YJlcZwrp/WiiVyzLbrzu4pgk3MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAg8WUk6J4qJ+rIMkc5bAcmeKKpQMB8GA1UdIwQY
MBaAFJCHjDliSu3jkp4XzNlYeMKSsvNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzkt
ZDVhZWZjY2M5NTIyLzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzktZDVhZWZjY2M5NTIy
LzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACym5QA1O
Y8CxEJA2hkIUlo/TKYu1ueDCdD7Lp0uT6ns2XSXSDBRtanCwtAuCtboECFKTnA8C
5/XAjSnDK/J1qgzrUEK3doNJkVh0UpQrdHp8bONFDQ+PTTyJ3aFyA886quz0juL/
XYQBkX2h0omWdG4Bv0dg6/wlYk9AV6S4JzRAtnEY7NUOmG69Ec00DF3a7NWJVzAK
rWdS+9+c1hkpKp3ye3UIa9AXy3eK+jHG/5xQNvRGZhR6czzAEfzp4fgnaJ5rv7qF
h0VKHNkbieo/3s/LTOP5JKPqD/Lswb5Ygldl8Pck5WljUT2tX5v/IxcqTIlsnTrX
P9Kv/WtZQXja7g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:18 2025 by rpki-client